An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-rpm-macrosUpgrade python2-PyMySQLUpgrade python2-pytestUpgrade python2-wheelUpgrade python2-coverageUpgrade python2-develUpgrade python2-docsUpgrade python2-ipaddressUpgrade python2-noseUpgrade python2-mockUpgrade python2-psycopg2-testsUpgrade python2-libsUpgrade python2-bsonUpgrade python2-funcsigsUpgrade python2-docutilsUpgrade python2-babelUpgrade python2-pluggyUpgrade python2-CythonUpgrade python2-sqlalchemyUpgrade python2-setuptools-wheelUpgrade python2-scipyUpgrade python2-psycopg2Upgrade python2-pipUpgrade babelUpgrade python2-debugUpgrade python2-dnsUpgrade python2-virtualenvUpgrade python2-pytest-mockUpgrade python2-pyyamlUpgrade python-nose-docsUpgrade python2-toolsUpgrade python2-pytzUpgrade python2-urllib3Upgrade python2-pip-wheelUpgrade python2-numpy-docUpgrade python2-sixUpgrade python-psycopg2-docUpgrade python2-jinja2Upgrade python2-pymongoUpgrade python2-idnaUpgrade python2-pymongo-gridfsUpgrade python-sqlalchemy-docUpgrade python2-attrsUpgrade python2-chardetUpgrade python2-psycopg2-debugUpgrade python2-wheel-wheelUpgrade python2Upgrade python2-backports-ssl_match_hostnameUpgrade python2-markupsafeUpgrade python2-lxmlUpgrade python2-backportsUpgrade python2-testUpgrade python2-tkinterUpgrade python2-docs-infoUpgrade python2-numpyUpgrade python2-pysocksUpgrade python2-numpy-f2pyUpgrade python2-pygmentsUpgrade python2-requestsUpgrade python2-pyUpgrade python2-setuptoolsUpgrade python2-setuptools_scm | May 31, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python3-tkinterUpgrade python-debuginfoUpgrade python-libsUpgrade python-testUpgrade python3-testUpgrade python-debugUpgrade python-develUpgrade python3-debugUpgrade pythonUpgrade tkinterUpgrade python3-develUpgrade python3Upgrade python3-libsUpgrade python3-toolsUpgrade python-toolsUpgrade python3-debuginfo | Oct 27, 2023 | Aug 22, 2023 |
| Amazon_linux | — | Upgrade python27 | Nov 4, 2023 | Aug 22, 2023 |
| Debian | — | Upgrade pypy3Upgrade python3.9Upgrade python2.7 | Sep 22, 2023 | Aug 22, 2023 |
| F5 Big Ip | — | — | May 23, 2024 | Sep 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade pythonUpgrade tkinterUpgrade python-libsUpgrade python-devel | Feb 12, 2024 | Aug 22, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3Upgrade python3-testUpgrade python3-develUpgrade python3-libsUpgrade python3-unversioned-command | Mar 13, 2024 | Aug 22, 2023 |
| Oracle_linux | — | Upgrade python2Upgrade python2-sixUpgrade python-psycopg2-docUpgrade python2-setuptools-wheelUpgrade python2-pipUpgrade python2-pysocksUpgrade python2-wheelUpgrade python2-testUpgrade python2-mockUpgrade python2-numpy-f2pyUpgrade python2-psycopg2-debugUpgrade python2-urllib3Upgrade python-nose-docsUpgrade python2-debugUpgrade python2-psycopg2Upgrade python2-pymongo-gridfsUpgrade python2-rpm-macrosUpgrade python2-coverageUpgrade python2-wheel-wheelUpgrade python2-attrsUpgrade python2-docsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-psycopg2-testsUpgrade python2-bsonUpgrade python2-pytestUpgrade python2-dnsUpgrade python2-pygmentsUpgrade python2-babelUpgrade python-sqlalchemy-docUpgrade python2-toolsUpgrade python2-pyyamlUpgrade python2-pytzUpgrade python2-noseUpgrade python2-CythonUpgrade python2-pluggyUpgrade python2-numpy-docUpgrade python2-requestsUpgrade python2-jinja2Upgrade python2-chardetUpgrade python2-pymongoUpgrade python2-pytest-mockUpgrade python2-PyMySQLUpgrade babelUpgrade python2-tkinterUpgrade python2-setuptoolsUpgrade python2-libsUpgrade python2-ipaddressUpgrade python2-idnaUpgrade python2-funcsigsUpgrade python2-backportsUpgrade python2-setuptools_scmUpgrade python2-pyUpgrade python2-develUpgrade python2-docs-infoUpgrade python2-markupsafeUpgrade python2-scipyUpgrade python2-pip-wheelUpgrade python2-numpyUpgrade python2-virtualenvUpgrade python2-lxmlUpgrade python2-sqlalchemyUpgrade python2-docutils | May 28, 2024 | Aug 22, 2023 |
| Redhat_linux | — | Upgrade python2-dnsUpgrade python2-psycopg2-testsUpgrade python2-sqlalchemyUpgrade babelUpgrade python2-scipyUpgrade python2-numpy-debuginfoUpgrade python2-toolsUpgrade python-nose-docsUpgrade python2-noseUpgrade python2-pytest-mockUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-develUpgrade python2-bson-debuginfoUpgrade python2-ipaddressUpgrade PyYAML-debugsourceUpgrade python2-numpyUpgrade python-psycopg2-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-bsonUpgrade python2-pytestUpgrade python-lxml-debugsourceUpgrade python2-CythonUpgrade python2-debugUpgrade python2-funcsigsUpgrade python2-docs-infoUpgrade python2-pyyamlUpgrade Cython-debugsourceUpgrade python2-psycopg2Upgrade python2-PyMySQLUpgrade python2-debugsourceUpgrade python2-pymongo-debuginfoUpgrade python2-docsUpgrade python2-pyyaml-debuginfoUpgrade python2-virtualenvUpgrade python2-pyUpgrade python-pymongo-debuginfoUpgrade python2-setuptools-wheelUpgrade python2-coverageUpgrade python2-docutilsUpgrade python2-pip-wheelUpgrade python-coverage-debugsourceUpgrade python2-Cython-debuginfoUpgrade python2-libsUpgrade python2-urllib3Upgrade python2-markupsafeUpgrade python-psycopg2-docUpgrade python2-pysocksUpgrade python2-lxml-debuginfoUpgrade python2-pygmentsUpgrade python2-tkinterUpgrade python2-rpm-macrosUpgrade python2-coverage-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python-sqlalchemy-docUpgrade python-psycopg2-debugsourceUpgrade python2-debuginfoUpgrade python2Upgrade python2-testUpgrade python2-pipUpgrade python2-wheel-wheelUpgrade python2-numpy-docUpgrade python2-backportsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pluggyUpgrade python2-wheelUpgrade python2-setuptools_scmUpgrade python2-pytzUpgrade python2-idnaUpgrade python2-numpy-f2pyUpgrade python2-psycopg2-debugUpgrade python2-setuptoolsUpgrade python2-babelUpgrade python2-pymongo-gridfsUpgrade python2-lxmlUpgrade python2-sixUpgrade python2-attrsUpgrade scipy-debugsourceUpgrade python2-requestsUpgrade python2-jinja2No solution existsUpgrade python-pymongo-debugsourceUpgrade python2-pymongoUpgrade python2-mockUpgrade numpy-debugsourceUpgrade python2-chardet | May 23, 2024 | Aug 22, 2023 |
| Rocky_linux | — | Upgrade python2-coverage-debuginfoUpgrade python2-pymongoUpgrade python2-backportsUpgrade python-pymongo-debugsourceUpgrade python2-pyyamlUpgrade python2-lxml-debuginfoUpgrade python2-numpy-f2pyUpgrade numpy-debugsourceUpgrade python2-Cython-debuginfoUpgrade python-psycopg2-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python2-numpyUpgrade python2-pyyaml-debuginfoUpgrade python-psycopg2-docUpgrade PyYAML-debugsourceUpgrade python2-scipy-debuginfoUpgrade python-lxml-debugsourceUpgrade Cython-debugsourceUpgrade python2-toolsUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-debuginfoUpgrade scipy-debugsourceUpgrade python2-tkinterUpgrade python2-libsUpgrade python2-pymongo-gridfsUpgrade python2-scipyUpgrade python2-lxmlUpgrade python-psycopg2-debugsourceUpgrade python2-CythonUpgrade python2-psycopg2Upgrade python-pymongo-debuginfoUpgrade python2-develUpgrade python2-numpy-debuginfoUpgrade python-coverage-debugsourceUpgrade python2-testUpgrade python2-pymongo-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-psycopg2-debugUpgrade python2-bson-debuginfoUpgrade python2-bsonUpgrade python2-debugsourceUpgrade python2-debugUpgrade python2-coverageUpgrade python2Upgrade python2-sqlalchemyUpgrade python2-markupsafe | May 8, 2025 | Aug 22, 2023 |
| Suse | — | Upgrade python-develUpgrade python-xmlUpgrade python-cursesUpgrade libpython2_7-1_0-32bitUpgrade python-demoUpgrade python-tkUpgrade python-docUpgrade python-baseUpgrade python-idleUpgrade python-32bitUpgrade python-doc-pdfUpgrade pythonUpgrade libpython2_7-1_0Upgrade python-base-32bitUpgrade python-gdbm | Oct 10, 2023 | Aug 22, 2023 |
| Ubuntu | — | Upgrade python2.7 (Ubuntu Pro)Upgrade python3.7 (Ubuntu Pro)Upgrade python3.6-minimal (Ubuntu Pro)Upgrade python2.7Upgrade python2.7-minimal (Ubuntu Pro)Upgrade libpython3.5-stdlib (Ubuntu Pro)Upgrade libpython2.7 (Ubuntu Pro)Upgrade python3.5 (Ubuntu Pro)Upgrade libpython3.5 (Ubuntu Pro)Upgrade python3.7-minimal (Ubuntu Pro)Upgrade python3.6 (Ubuntu Pro)Upgrade python3.8 (Ubuntu Pro)Upgrade libpython2.7-stdlib (Ubuntu Pro)Upgrade python3.5-minimal (Ubuntu Pro)Upgrade python3.8-minimal (Ubuntu Pro) | Sep 18, 2023 | Aug 22, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub