Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.4
Python 3.12 urllib3 Library Security Update
published 1 year ago
Summary
The urllib3 library in Python 3.12 has received a security update to fix a potential issue that could allow an attacker to execute arbitrary code on a system. This update is recommended for all users of Python 3.12 to ensure the security of their systems. It is essential to apply the update as soon as possible to prevent any potential risks.
What to do
- Update redhat python3.12-urllib3 to version 0:1.26.18-2.el9_4.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:rhel_eus:9.4::appstream | redhat | python3.12-urllib3 |
< 0:1.26.18-2.el9_4.1 Fix: upgrade to 0:1.26.18-2.el9_4.1
|
Original advisory text
Red Hat Security Advisory: python3.12-urllib3 security update
References
- https://access.redhat.com/errata/RHSA-2024:9923 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2292788 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9923.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2024-37891 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2024-37891 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-37891 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published25 Nov 2024
Updated6 May 2026
First seen6 May 2026
Sources
RHSA-2024:9923 · OSV
Track software like this
Free during beta