An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-debugUpgrade python2-pytestUpgrade python2-CythonUpgrade python2-virtualenvUpgrade python2-psycopg2Upgrade python2-noseUpgrade python2-coverageUpgrade python2-pluggyUpgrade python2-bsonUpgrade python2-develUpgrade python2-wheelUpgrade python2-libsUpgrade python2-docsUpgrade python2-funcsigsUpgrade python2-scipyUpgrade python2-PyMySQLUpgrade python2-ipaddressUpgrade python2-setuptools-wheelUpgrade python2-dnsUpgrade python2-pytest-mockUpgrade python2-docutilsUpgrade babelUpgrade python2-pyyamlUpgrade python-nose-docsUpgrade python2-mockUpgrade python2-sqlalchemyUpgrade python2-toolsUpgrade python2-pipUpgrade python2-babelUpgrade python2-rpm-macrosUpgrade python2-psycopg2-testsUpgrade python2Upgrade python2-markupsafeUpgrade python2-pyUpgrade python2-psycopg2-debugUpgrade python2-wheel-wheelUpgrade python2-backportsUpgrade python2-pymongo-gridfsUpgrade python2-numpy-docUpgrade python2-pygmentsUpgrade python2-attrsUpgrade python2-setuptoolsUpgrade python2-pip-wheelUpgrade python2-sixUpgrade python2-pytzUpgrade python2-setuptools_scmUpgrade python2-requestsUpgrade python2-urllib3Upgrade python2-lxmlUpgrade python2-backports-ssl_match_hostnameUpgrade python2-tkinterUpgrade python2-testUpgrade python2-pysocksUpgrade python-sqlalchemy-docUpgrade python2-docs-infoUpgrade python2-numpyUpgrade python2-numpy-f2pyUpgrade python2-idnaUpgrade python2-pymongoUpgrade python2-chardetUpgrade python-psycopg2-docUpgrade python2-jinja2 | May 31, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-debugUpgrade python-testUpgrade python-develUpgrade python3-tkinterUpgrade python-debuginfoUpgrade python3-debugUpgrade python3-testUpgrade python-libsUpgrade python3-libsUpgrade python-toolsUpgrade python3-develUpgrade python3-toolsUpgrade pythonUpgrade python3Upgrade tkinterUpgrade python3-debuginfo | Oct 27, 2023 | Aug 22, 2023 |
| Amazon_linux | — | Upgrade python27 | Nov 4, 2023 | Aug 22, 2023 |
| Debian | — | Upgrade pypy3Upgrade python3.9Upgrade python2.7 | Sep 22, 2023 | Aug 22, 2023 |
| F5 Big Ip | — | — | May 23, 2024 | Sep 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-libsUpgrade python-develUpgrade tkinterUpgrade python | Feb 12, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-unversioned-commandUpgrade python3-libsUpgrade python3Upgrade python3-testUpgrade python3-devel | Mar 13, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade python2-pyUpgrade python2-develUpgrade python2-chardetUpgrade python2-pytest-mockUpgrade python2-docs-infoUpgrade python2-pygmentsUpgrade python2-scipyUpgrade python2-pluggyUpgrade python2-requestsUpgrade python2-CythonUpgrade python2-setuptools_scmUpgrade python-sqlalchemy-docUpgrade python2-numpy-docUpgrade python2-jinja2Upgrade python2-numpyUpgrade python2-pip-wheelUpgrade python2-markupsafeUpgrade python2-pymongoUpgrade python2-babelUpgrade python2-noseUpgrade python2-libsUpgrade python2-PyMySQLUpgrade python2-setuptoolsUpgrade python2-tkinterUpgrade babelUpgrade python2-backportsUpgrade python2-funcsigsUpgrade python2-ipaddressUpgrade python2-virtualenvUpgrade python2-idnaUpgrade python2-lxmlUpgrade python2-pyyamlUpgrade python2-docutilsUpgrade python2-pytzUpgrade python2-toolsUpgrade python2-sqlalchemyUpgrade python2-wheelUpgrade python2-pysocksUpgrade python2-wheel-wheelUpgrade python-psycopg2-docUpgrade python2-setuptools-wheelUpgrade python2-attrsUpgrade python2-dnsUpgrade python2-bsonUpgrade python2-numpy-f2pyUpgrade python2-mockUpgrade python2-docsUpgrade python2-sixUpgrade python-nose-docsUpgrade python2-testUpgrade python2-pipUpgrade python2-backports-ssl_match_hostnameUpgrade python2-urllib3Upgrade python2-psycopg2-testsUpgrade python2-psycopg2-debugUpgrade python2-rpm-macrosUpgrade python2-psycopg2Upgrade python2-pytestUpgrade python2-pymongo-gridfsUpgrade python2-debugUpgrade python2-coverageUpgrade python2 | May 28, 2024 | Aug 22, 2023 |
| Redhat_linux | — | Upgrade python2-setuptools-wheelUpgrade python2-dnsUpgrade python2-coverageUpgrade python2-docsUpgrade python2-sqlalchemyUpgrade python2-virtualenvUpgrade python2-bsonUpgrade PyYAML-debugsourceUpgrade python2-pytest-mockUpgrade python2-CythonUpgrade python2-scipy-debuginfoUpgrade python2-funcsigsUpgrade python2-pytestUpgrade python2-ipaddressUpgrade python-nose-docsUpgrade python2-develUpgrade python-lxml-debugsourceUpgrade python2-docs-infoUpgrade python2-PyMySQLUpgrade python-coverage-debugsourceUpgrade python2-debugUpgrade python2-psycopg2-testsUpgrade python2-numpy-debuginfoUpgrade python2-pip-wheelUpgrade python2-numpyUpgrade python2-Cython-debuginfoUpgrade python2-docutilsUpgrade python2-libsUpgrade python-pymongo-debuginfoUpgrade python2-noseUpgrade python2-scipyUpgrade python2-pyyamlUpgrade Cython-debugsourceUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-psycopg2Upgrade python2-pymongo-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python2-debugsourceUpgrade python2-bson-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python2-pyUpgrade python2-toolsUpgrade babelUpgrade python2-attrsUpgrade python2-testUpgrade python2Upgrade python2-debuginfoUpgrade python2-lxmlUpgrade python2-setuptoolsUpgrade python2-lxml-debuginfoUpgrade python2-numpy-docUpgrade python2-psycopg2-debugUpgrade python2-babelUpgrade python2-numpy-f2pyUpgrade python2-pluggyUpgrade python2-backports-ssl_match_hostnameUpgrade python2-setuptools_scmUpgrade python2-urllib3Upgrade python2-wheelUpgrade python2-psycopg2-debuginfoUpgrade python2-pygmentsUpgrade python2-pytzUpgrade python2-pymongo-gridfsUpgrade python2-pymongoUpgrade python2-backportsUpgrade python2-pysocksUpgrade python2-wheel-wheelUpgrade python2-idnaUpgrade scipy-debugsourceUpgrade python2-pipUpgrade python2-chardetUpgrade python-psycopg2-docUpgrade python-sqlalchemy-docUpgrade python2-rpm-macrosNo solution existsUpgrade python-psycopg2-debugsourceUpgrade python2-tkinterUpgrade python2-coverage-debuginfoUpgrade python2-markupsafeUpgrade python2-mockUpgrade python-pymongo-debugsourceUpgrade python2-sixUpgrade python2-requestsUpgrade numpy-debugsourceUpgrade python2-jinja2 | May 23, 2024 | Aug 22, 2023 |
| Rocky_linux | — | Upgrade python2-psycopg2-debuginfoUpgrade python2-pyyamlUpgrade PyYAML-debugsourceUpgrade python2-scipy-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2-pymongoUpgrade python-lxml-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python2-coverage-debuginfoUpgrade python-psycopg2-docUpgrade python2-Cython-debuginfoUpgrade python2-numpyUpgrade python2-pyyaml-debuginfoUpgrade python2-numpy-f2pyUpgrade python2-backportsUpgrade numpy-debugsourceUpgrade python2-lxml-debuginfoUpgrade python2-bsonUpgrade python2-sqlalchemyUpgrade python2-coverageUpgrade python2Upgrade python2-CythonUpgrade python2-pymongo-gridfsUpgrade python2-psycopg2-testsUpgrade python2-psycopg2-debugUpgrade python2-testUpgrade python2-pymongo-debuginfoUpgrade python2-lxmlUpgrade python2-scipyUpgrade python2-psycopg2Upgrade python2-bson-debuginfoUpgrade python-psycopg2-debugsourceUpgrade scipy-debugsourceUpgrade python2-markupsafeUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-debuginfoUpgrade python2-toolsUpgrade python2-tkinterUpgrade python2-libsUpgrade python-pymongo-debuginfoUpgrade python2-develUpgrade python2-numpy-debuginfoUpgrade python-coverage-debugsourceUpgrade Cython-debugsourceUpgrade python2-debugUpgrade python2-debugsource | May 8, 2025 | Aug 22, 2023 |
| Suse | — | Upgrade python-doc-pdfUpgrade python-32bitUpgrade libpython2_7-1_0Upgrade python-demoUpgrade python-tkUpgrade libpython2_7-1_0-32bitUpgrade pythonUpgrade python-gdbmUpgrade python-docUpgrade python-base-32bitUpgrade python-baseUpgrade python-idleUpgrade python-cursesUpgrade python-xmlUpgrade python-devel | Oct 10, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade libpython2.7-stdlib (Ubuntu Pro)Upgrade libpython3.5 (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.8-minimal (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade libpython2.7 (Ubuntu Pro)Upgrade python3.6-minimal (Ubuntu Pro)Upgrade libpython3.5-stdlib (Ubuntu Pro)Upgrade python2.7-minimal (Ubuntu Pro)Upgrade python2.7 (Ubuntu Pro)Upgrade python2.7Upgrade python3.5 (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro) | Sep 18, 2023 | Aug 22, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub