RLSA-2024:8447

Synopsis

Moderate: python3.12 security update

Description

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3.12-libs package, which should be installed automatically along with python3.12. The remaining parts of the Python standard library are broken out into the python3.12-tkinter and python3.12-test packages, which may need to be installed separately. Documentation for Python is provided in the python3.12-docs package. Packages containing additional libraries for Python are generally named with the "python3.12-" prefix.

Security Fix(es):

* python: cpython: tarfile: ReDos via excessive backtracking while parsing header values (CVE-2024-6232)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2309426

CVEs

CVE-2024-6232

Affected packages

Rocky Linux 9 aarch64 - AppStream

python3.12-0:3.12.1-4.el9_4.4.aarch64.rpm python3.12-0:3.12.1-4.el9_4.4.src.rpm python3.12-debuginfo-0:3.12.1-4.el9_4.4.aarch64.rpm python3.12-debugsource-0:3.12.1-4.el9_4.4.aarch64.rpm python3.12-devel-0:3.12.1-4.el9_4.4.aarch64.rpm python3.12-libs-0:3.12.1-4.el9_4.4.aarch64.rpm python3.12-tkinter-0:3.12.1-4.el9_4.4.aarch64.rpm

Rocky Linux 9 x86_64 - CRB

python3.12-0:3.12.1-4.el9_4.4.i686.rpm python3.12-0:3.12.1-4.el9_4.4.src.rpm python3.12-debug-0:3.12.1-4.el9_4.4.i686.rpm python3.12-debug-0:3.12.1-4.el9_4.4.x86_64.rpm python3.12-idle-0:3.12.1-4.el9_4.4.i686.rpm python3.12-idle-0:3.12.1-4.el9_4.4.x86_64.rpm python3.12-test-0:3.12.1-4.el9_4.4.i686.rpm python3.12-test-0:3.12.1-4.el9_4.4.x86_64.rpm python3.12-tkinter-0:3.12.1-4.el9_4.4.i686.rpm

Rocky Linux 9 ppc64le - AppStream

python3.12-0:3.12.1-4.el9_4.4.ppc64le.rpm python3.12-0:3.12.1-4.el9_4.4.src.rpm python3.12-debuginfo-0:3.12.1-4.el9_4.4.ppc64le.rpm python3.12-debugsource-0:3.12.1-4.el9_4.4.ppc64le.rpm python3.12-devel-0:3.12.1-4.el9_4.4.ppc64le.rpm python3.12-libs-0:3.12.1-4.el9_4.4.ppc64le.rpm python3.12-tkinter-0:3.12.1-4.el9_4.4.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

python3.12-0:3.12.1-4.el9_4.4.s390x.rpm python3.12-0:3.12.1-4.el9_4.4.src.rpm python3.12-debuginfo-0:3.12.1-4.el9_4.4.s390x.rpm python3.12-debugsource-0:3.12.1-4.el9_4.4.s390x.rpm python3.12-devel-0:3.12.1-4.el9_4.4.s390x.rpm python3.12-libs-0:3.12.1-4.el9_4.4.s390x.rpm python3.12-tkinter-0:3.12.1-4.el9_4.4.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

python3.12-0:3.12.1-4.el9_4.4.src.rpm python3.12-0:3.12.1-4.el9_4.4.x86_64.rpm python3.12-debuginfo-0:3.12.1-4.el9_4.4.x86_64.rpm python3.12-debugsource-0:3.12.1-4.el9_4.4.x86_64.rpm python3.12-devel-0:3.12.1-4.el9_4.4.i686.rpm python3.12-devel-0:3.12.1-4.el9_4.4.x86_64.rpm python3.12-libs-0:3.12.1-4.el9_4.4.i686.rpm python3.12-libs-0:3.12.1-4.el9_4.4.x86_64.rpm python3.12-tkinter-0:3.12.1-4.el9_4.4.x86_64.rpm

Rocky Linux 9 aarch64 - CRB

python3.12-0:3.12.1-4.el9_4.4.src.rpm python3.12-debug-0:3.12.1-4.el9_4.4.aarch64.rpm python3.12-idle-0:3.12.1-4.el9_4.4.aarch64.rpm python3.12-test-0:3.12.1-4.el9_4.4.aarch64.rpm

Rocky Linux 9 s390x - CRB

python3.12-0:3.12.1-4.el9_4.4.src.rpm python3.12-debug-0:3.12.1-4.el9_4.4.s390x.rpm python3.12-idle-0:3.12.1-4.el9_4.4.s390x.rpm python3.12-test-0:3.12.1-4.el9_4.4.s390x.rpm

Rocky Linux 9 ppc64le - CRB

python3.12-0:3.12.1-4.el9_4.4.src.rpm python3.12-debug-0:3.12.1-4.el9_4.4.ppc64le.rpm python3.12-idle-0:3.12.1-4.el9_4.4.ppc64le.rpm python3.12-test-0:3.12.1-4.el9_4.4.ppc64le.rpm