RLSA-2024:3466

Important: python39:3.9 and python39-devel:3.9 security update

No scoreFix available

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

python39:3.9/python39: python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
python39:3.9/python39: python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)
python39:3.9/python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

What each source reports

OSV No score

Important: python39:3.9 and python39-devel:3.9 security update

Security Fix(es):

python39:3.9/python39: python: Path traversal on tempfile.TemporaryDirectory (CVE-2023-6597)
python39:3.9/python39: python: The zipfile module is vulnerable to zip-bombs leading to denial of service (CVE-2024-0450)
python39:3.9/python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2024:3466
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`Cython` Rocky Linux:8	before 0:0.29.21-5.module+el8.10.0+1582+bc278001	0:0.29.21-5.module+el8.10.0+1582+bc278001
`mod_wsgi` Rocky Linux:8	before 0:4.7.1-7.module+el8.10.0+1582+bc278001	0:4.7.1-7.module+el8.10.0+1582+bc278001
`numpy` Rocky Linux:8	before 0:1.19.4-3.module+el8.10.0+1582+bc278001	0:1.19.4-3.module+el8.10.0+1582+bc278001
`pybind11` Rocky Linux:8	before 0:2.7.1-1.module+el8.9.0+1357+a3b80af7	0:2.7.1-1.module+el8.9.0+1357+a3b80af7
`pytest` Rocky Linux:8	before 0:6.0.2-2.module+el8.10.0+1582+bc278001	0:6.0.2-2.module+el8.10.0+1582+bc278001
`python39` Rocky Linux:8	before 0:3.9.19-1.module+el8.10.0+1809+41195054	0:3.9.19-1.module+el8.10.0+1809+41195054
`python3x-pip` Rocky Linux:8	before 0:20.2.4-9.module+el8.10.0+1721+e52d6351	0:20.2.4-9.module+el8.10.0+1721+e52d6351
`python3x-pyparsing` Rocky Linux:8	before 0:2.4.7-5.module+el8.10.0+1582+bc278001	0:2.4.7-5.module+el8.10.0+1582+bc278001
`python3x-setuptools` Rocky Linux:8	before 0:50.3.2-5.module+el8.10.0+1582+bc278001	0:50.3.2-5.module+el8.10.0+1582+bc278001
`python3x-six` Rocky Linux:8	before 0:1.15.0-3.module+el8.10.0+1582+bc278001	0:1.15.0-3.module+el8.10.0+1582+bc278001

Show 24 moreShow less

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

RLSA-2024:3466 is a vulnerability with no CVSS score yet in python39, published June 14, 2024. No source lists public exploit code. Fixed in Cython 0:0.29.21-5.module+el8.10.0+1582+bc278001.

Package	Affected	Fixed
`python-attrs` Rocky Linux:8	before 0:20.3.0-2.module+el8.10.0+1582+bc278001	0:20.3.0-2.module+el8.10.0+1582+bc278001
`python-cffi` Rocky Linux:8	before 0:1.14.3-2.module+el8.10.0+1582+bc278001	0:1.14.3-2.module+el8.10.0+1582+bc278001
`python-chardet` Rocky Linux:8	before 0:3.0.4-19.module+el8.10.0+1582+bc278001	0:3.0.4-19.module+el8.10.0+1582+bc278001
`python-cryptography` Rocky Linux:8	before 0:3.3.1-3.module+el8.10.0+1697+7e517775	0:3.3.1-3.module+el8.10.0+1697+7e517775
`python-idna` Rocky Linux:8	before 0:2.10-4.module+el8.10.0+1809+41195054	0:2.10-4.module+el8.10.0+1809+41195054
`python-iniconfig` Rocky Linux:8	before 0:1.1.1-2.module+el8.9.0+1332+dd574197	0:1.1.1-2.module+el8.9.0+1332+dd574197
`python-lxml` Rocky Linux:8	before 0:4.6.5-1.module+el8.10.0+1582+bc278001	0:4.6.5-1.module+el8.10.0+1582+bc278001
`python-more-itertools` Rocky Linux:8	before 0:8.5.0-2.module+el8.10.0+1582+bc278001	0:8.5.0-2.module+el8.10.0+1582+bc278001
`python-packaging` Rocky Linux:8	before 0:20.4-4.module+el8.10.0+1582+bc278001	0:20.4-4.module+el8.10.0+1582+bc278001
`python-pluggy` Rocky Linux:8	before 0:0.13.1-3.module+el8.10.0+1582+bc278001	0:0.13.1-3.module+el8.10.0+1582+bc278001
`python-ply` Rocky Linux:8	before 0:3.11-10.module+el8.10.0+1582+bc278001	0:3.11-10.module+el8.10.0+1582+bc278001
`python-psutil` Rocky Linux:8	before 0:5.8.0-4.module+el8.9.0+1357+a3b80af7	0:5.8.0-4.module+el8.9.0+1357+a3b80af7
`python-psycopg2` Rocky Linux:8	before 0:2.8.6-3.module+el8.10.0+1660+b5b6f004	0:2.8.6-3.module+el8.10.0+1660+b5b6f004
`python-py` Rocky Linux:8	before 0:1.10.0-1.module+el8.10.0+1582+bc278001	0:1.10.0-1.module+el8.10.0+1582+bc278001
`python-pycparser` Rocky Linux:8	before 0:2.20-3.module+el8.10.0+1582+bc278001	0:2.20-3.module+el8.10.0+1582+bc278001
`python-PyMySQL` Rocky Linux:8	before 0:0.10.1-2.module+el8.10.0+1582+bc278001	0:0.10.1-2.module+el8.10.0+1582+bc278001
`python-pysocks` Rocky Linux:8	before 0:1.7.1-4.module+el8.10.0+1582+bc278001	0:1.7.1-4.module+el8.10.0+1582+bc278001
`python-requests` Rocky Linux:8	before 0:2.25.0-3.module+el8.10.0+1582+bc278001	0:2.25.0-3.module+el8.10.0+1582+bc278001
`python-toml` Rocky Linux:8	before 0:0.10.1-5.module+el8.9.0+1332+dd574197	0:0.10.1-5.module+el8.9.0+1332+dd574197
`python-urllib3` Rocky Linux:8	before 0:1.25.10-5.module+el8.10.0+1545+03246da9	0:1.25.10-5.module+el8.10.0+1545+03246da9
`python-wcwidth` Rocky Linux:8	before 0:0.2.5-3.module+el8.10.0+1582+bc278001	0:0.2.5-3.module+el8.10.0+1582+bc278001
`python-wheel` Rocky Linux:8	before 1:0.35.1-4.module+el8.10.0+1582+bc278001	1:0.35.1-4.module+el8.10.0+1582+bc278001
`PyYAML` Rocky Linux:8	before 0:5.4.1-1.module+el8.10.0+1582+bc278001	0:5.4.1-1.module+el8.10.0+1582+bc278001
`scipy` Rocky Linux:8	before 0:1.5.4-5.module+el8.10.0+1582+bc278001	0:1.5.4-5.module+el8.10.0+1582+bc278001