An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-mockUpgrade python2-docsUpgrade python2-toolsUpgrade python2-babelUpgrade python2-debugUpgrade python2-pytestUpgrade python2-docutilsUpgrade python2-ipaddressUpgrade python2-bsonUpgrade python-nose-docsUpgrade python2-psycopg2Upgrade python2-PyMySQLUpgrade python2-funcsigsUpgrade python2-noseUpgrade python2-pluggyUpgrade python2-scipyUpgrade python2-CythonUpgrade python2-develUpgrade python2-setuptools-wheelUpgrade python2-coverageUpgrade python2-pytest-mockUpgrade python2-psycopg2-testsUpgrade python2-rpm-macrosUpgrade python2-pipUpgrade python2-dnsUpgrade python2-virtualenvUpgrade python2-sqlalchemyUpgrade python2-pyyamlUpgrade babelUpgrade python2-libsUpgrade python2-wheelUpgrade python2-chardetUpgrade python2-sixUpgrade python2-docs-infoUpgrade python2-psycopg2-debugUpgrade python2-attrsUpgrade python2-urllib3Upgrade python2-numpyUpgrade python2-pytzUpgrade python2-requestsUpgrade python2-pyUpgrade python2-pysocksUpgrade python2-jinja2Upgrade python2-numpy-f2pyUpgrade python2Upgrade python2-backports-ssl_match_hostnameUpgrade python2-backportsUpgrade python2-markupsafeUpgrade python2-testUpgrade python2-lxmlUpgrade python2-pygmentsUpgrade python2-setuptools_scmUpgrade python2-pymongo-gridfsUpgrade python-sqlalchemy-docUpgrade python2-wheel-wheelUpgrade python2-idnaUpgrade python2-tkinterUpgrade python2-numpy-docUpgrade python-psycopg2-docUpgrade python2-pymongoUpgrade python2-pip-wheelUpgrade python2-setuptools | May 31, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python3-toolsUpgrade python3-develUpgrade python3-libsUpgrade pythonUpgrade python-toolsUpgrade python3-debuginfoUpgrade tkinterUpgrade python3Upgrade python-libsUpgrade python3-debugUpgrade python-debuginfoUpgrade python-develUpgrade python-debugUpgrade python3-testUpgrade python-testUpgrade python3-tkinter | Oct 27, 2023 | Aug 22, 2023 |
| Amazon_linux | — | Upgrade python27 | Nov 4, 2023 | Aug 22, 2023 |
| Debian | — | Upgrade python2.7Upgrade python3.9Upgrade pypy3 | Sep 22, 2023 | Aug 22, 2023 |
| F5 Big Ip | — | — | May 23, 2024 | Sep 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade tkinterUpgrade pythonUpgrade python-develUpgrade python-libs | Feb 12, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-libsUpgrade python3-unversioned-commandUpgrade python3-develUpgrade python3-testUpgrade python3 | Mar 13, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade python2-dnsUpgrade python2-docsUpgrade python2-bsonUpgrade python2-wheel-wheelUpgrade python2-rpm-macrosUpgrade python2-pytestUpgrade python2-pymongo-gridfsUpgrade python2-attrsUpgrade python2-urllib3Upgrade python2-mockUpgrade python2-psycopg2-testsUpgrade python2-coverageUpgrade python2-psycopg2-debugUpgrade python2-debugUpgrade python2-wheelUpgrade python-nose-docsUpgrade python-psycopg2-docUpgrade python2-numpy-f2pyUpgrade python2Upgrade python2-sixUpgrade python2-testUpgrade python2-psycopg2Upgrade python2-setuptools-wheelUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pipUpgrade python2-pysocksUpgrade python2-CythonUpgrade python2-pluggyUpgrade python2-jinja2Upgrade python2-backportsUpgrade babelUpgrade python2-setuptools_scmUpgrade python2-pygmentsUpgrade python2-chardetUpgrade python-sqlalchemy-docUpgrade python2-tkinterUpgrade python2-setuptoolsUpgrade python2-PyMySQLUpgrade python2-libsUpgrade python2-requestsUpgrade python2-numpy-docUpgrade python2-pyUpgrade python2-noseUpgrade python2-docs-infoUpgrade python2-develUpgrade python2-pip-wheelUpgrade python2-numpyUpgrade python2-markupsafeUpgrade python2-scipyUpgrade python2-sqlalchemyUpgrade python2-docutilsUpgrade python2-babelUpgrade python2-pytest-mockUpgrade python2-pytzUpgrade python2-virtualenvUpgrade python2-pyyamlUpgrade python2-pymongoUpgrade python2-toolsUpgrade python2-lxmlUpgrade python2-ipaddressUpgrade python2-idnaUpgrade python2-funcsigs | May 28, 2024 | Aug 22, 2023 |
| Redhat_linux | — | Upgrade python2-pysocksUpgrade python2-mockUpgrade python2-numpy-f2pyUpgrade python2-backportsUpgrade python2-lxmlUpgrade python2-coverage-debuginfoUpgrade python2-wheel-wheelUpgrade python2-pytzUpgrade python2-setuptoolsUpgrade python2-setuptools_scmUpgrade python2-urllib3Upgrade python2-pymongo-gridfsUpgrade python2-pluggyUpgrade python2-babelUpgrade python2-backports-ssl_match_hostnameUpgrade python-psycopg2-docUpgrade python2-numpy-docUpgrade numpy-debugsourceUpgrade python2-jinja2Upgrade python2-pipUpgrade python2-requestsUpgrade python2-chardetUpgrade python2-wheelUpgrade python2-psycopg2-debuginfoUpgrade python2-sixUpgrade python2-idnaUpgrade python2-testUpgrade python2-tkinterUpgrade python2-rpm-macrosUpgrade python2Upgrade python2-attrsUpgrade python2-pygmentsUpgrade scipy-debugsourceUpgrade python-psycopg2-debugsourceUpgrade python2-lxml-debuginfoUpgrade python-pymongo-debugsourceNo solution existsUpgrade python2-debuginfoUpgrade python2-pymongoUpgrade python-sqlalchemy-docUpgrade python2-psycopg2-debugUpgrade python2-markupsafeUpgrade python2-docsUpgrade python2-libsUpgrade python2-scipy-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-develUpgrade python-nose-docsUpgrade python2-ipaddressUpgrade python2-virtualenvUpgrade python2-pytestUpgrade python-coverage-debugsourceUpgrade python2-Cython-debuginfoUpgrade python2-setuptools-wheelUpgrade Cython-debugsourceUpgrade python2-dnsUpgrade python-psycopg2-debuginfoUpgrade python2-coverageUpgrade python2-psycopg2-debug-debuginfoUpgrade python-pymongo-debuginfoUpgrade python2-pytest-mockUpgrade python2-psycopg2Upgrade python2-pyyaml-debuginfoUpgrade python2-numpyUpgrade python2-numpy-debuginfoUpgrade python2-pyyamlUpgrade python2-noseUpgrade python2-debugUpgrade python2-bson-debuginfoUpgrade python2-debugsourceUpgrade PyYAML-debugsourceUpgrade python2-CythonUpgrade python2-funcsigsUpgrade python2-bsonUpgrade python-lxml-debugsourceUpgrade python2-docs-infoUpgrade python2-sqlalchemyUpgrade python2-pip-wheelUpgrade python2-PyMySQLUpgrade python2-toolsUpgrade python2-scipyUpgrade babelUpgrade python2-pyUpgrade python2-pymongo-debuginfoUpgrade python2-docutils | May 23, 2024 | Aug 22, 2023 |
| Rocky_linux | — | Upgrade python-psycopg2-debuginfoUpgrade python2-numpyUpgrade python2-pymongoUpgrade python2-backportsUpgrade python2-lxml-debuginfoUpgrade python2-numpy-f2pyUpgrade python2-pyyamlUpgrade PyYAML-debugsourceUpgrade python2-scipy-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade numpy-debugsourceUpgrade python-pymongo-debugsourceUpgrade python-psycopg2-docUpgrade python-lxml-debugsourceUpgrade python2-psycopg2-debuginfoUpgrade python2-coverage-debuginfoUpgrade python2-Cython-debuginfoUpgrade python2-scipyUpgrade python2-debugUpgrade python2-debugsourceUpgrade python2-coverageUpgrade python2-lxmlUpgrade scipy-debugsourceUpgrade python2-psycopg2Upgrade python-psycopg2-debugsourceUpgrade Cython-debugsourceUpgrade python-coverage-debugsourceUpgrade python2-toolsUpgrade python2-numpy-debuginfoUpgrade python2-develUpgrade python2-libsUpgrade python2Upgrade python2-bsonUpgrade python2-bson-debuginfoUpgrade python2-testUpgrade python2-psycopg2-debugUpgrade python2-pymongo-gridfsUpgrade python-pymongo-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-debuginfoUpgrade python2-CythonUpgrade python2-markupsafeUpgrade python2-tkinterUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-sqlalchemy | May 8, 2025 | Aug 22, 2023 |
| Suse | — | Upgrade python-cursesUpgrade python-develUpgrade python-xmlUpgrade libpython2_7-1_0Upgrade python-base-32bitUpgrade python-tkUpgrade python-docUpgrade python-gdbmUpgrade libpython2_7-1_0-32bitUpgrade python-demoUpgrade python-idleUpgrade python-baseUpgrade python-doc-pdfUpgrade python-32bitUpgrade python | Oct 10, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade python2.7-minimal (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade libpython3.5-stdlib (Ubuntu Pro)Upgrade libpython2.7 (Ubuntu Pro)Upgrade python3.5 (Ubuntu Pro)Upgrade python2.7Upgrade python2.7 (Ubuntu Pro)Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade libpython2.7-stdlib (Ubuntu Pro)Upgrade python3.8-minimal (Ubuntu Pro)Upgrade libpython3.5 (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro) | Sep 18, 2023 | Aug 22, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub