CVE catalog

CVE-2024-7592

Python vulnerabilities

[CVE catalog]

There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.

Severity
Medium · CVSS 4.8CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.30% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Version impact has not been established. The original provider fields are retained below.

Provider details and historical evidence
Original provider fields
{
  "package_releases": [
    {
      "name": "pypy3",
      "status": "fixed",
      "release": "sid",
      "version": "8.0.1+dfsg-1"
    },
    {
      "name": "pypy3",
      "status": "fixed",
      "release": "forky",
      "version": "8.0.1+dfsg-1"
    },
    {
      "name": "pypy3",
      "status": "fixed",
      "release": "trixie",
      "version": "7.3.19+dfsg-2"
    },
    {
      "name": "pypy3",
      "status": "vulnerable",
      "release": "bookworm",
      "version": "7.3.11+dfsg-2+deb12u3"
    },
    {
      "name": "python3.11",
      "status": "fixed",
      "release": "bookworm",
      "version": "3.11.2-6+deb12u8"
    },
    {
      "name": "python3.11",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "3.11.2-6+deb12u9"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "pypy3",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "7.3.18+dfsg-1"
    },
    {
      "bug": null,
      "name": "pypy3",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "7.3.18+dfsg-1"
    },
    {
      "bug": null,
      "name": "pypy3",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "7.3.18+dfsg-1"
    },
    {
      "bug": null,
      "name": "pypy3",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": ""
    },
    {
      "bug": null,
      "name": "python3.11",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "3.11.2-6+deb12u5"
    }
  ],
  "distribution_packages": [
    {
      "name": "pypy3",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "not yet fixed"
    },
    {
      "name": "python3.11",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.11.2-6+deb12u5"
    },
    {
      "name": "python3.12",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "idle-python3.12",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "libpython3.12-dev",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "libpython3.12-minimal",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "libpython3.12-stdlib",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "libpython3.12-testsuite",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "libpython3.12t64",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "python3.12-dev",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "python3.12-doc",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "python3.12-examples",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "python3.12-full",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "python3.12-minimal",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "python3.12-nopie",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "python3.12-venv",
      "distro": "ubuntu",
      "release": "noble",
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2"
    },
    {
      "name": "python3",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.10.15-r0"
            }
          ]
        }
      ],
      "release": "3.17",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.10.15-r0",
      "provider_record_id": "ALPINE-CVE-2024-7592"
    },
    {
      "name": "python3",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.11.10-r0"
            }
          ]
        }
      ],
      "release": "3.18",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.11.10-r0",
      "provider_record_id": "ALPINE-CVE-2024-7592"
    },
    {
      "name": "python3",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.11.10-r0"
            }
          ]
        }
      ],
      "release": "3.19",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.11.10-r0",
      "provider_record_id": "ALPINE-CVE-2024-7592"
    },
    {
      "name": "python3",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.12.6-r0"
            }
          ]
        }
      ],
      "release": "3.20",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.12.6-r0",
      "provider_record_id": "ALPINE-CVE-2024-7592"
    },
    {
      "name": "python3",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.12.6-r0"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.12.6-r0",
      "provider_record_id": "ALPINE-CVE-2024-7592"
    },
    {
      "name": "python3",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.12.6-r0"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.12.6-r0",
      "provider_record_id": "ALPINE-CVE-2024-7592"
    },
    {
      "name": "python3",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.12.6-r0"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.12.6-r0",
      "provider_record_id": "ALPINE-CVE-2024-7592"
    },
    {
      "name": "python3",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.12.6-r0"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "fixed_version": "3.12.6-r0",
      "provider_record_id": "ALPINE-CVE-2024-7592"
    },
    {
      "name": "python2.7",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.18-13ubuntu1.2+esm2"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "2.7.18-8build1",
        "2.7.18-13",
        "2.7.18-13ubuntu1",
        "2.7.18-13ubuntu1.1",
        "2.7.18-13ubuntu1.1+esm2",
        "2.7.18-13ubuntu1.2",
        "2.7.18-13ubuntu1.2+esm1"
      ],
      "ecosystem": "deb",
      "fixed_version": "2.7.18-13ubuntu1.2+esm2",
      "provider_record_id": "UBUNTU-CVE-2024-7592"
    },
    {
      "name": "python3.5",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.5.2-2ubuntu0~16.04.13+esm14"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.5.0-3",
        "3.5.0-3ubuntu1",
        "3.5.1~rc1-2ubuntu1",
        "3.5.1-1",
        "3.5.1-2",
        "3.5.1-3",
        "3.5.1-5",
        "3.5.1-6ubuntu1",
        "3.5.1-6ubuntu2",
        "3.5.1-9ubuntu1",
        "3.5.1-10",
        "3.5.2-2~16.01",
        "3.5.2-2~16.04",
        "3.5.2-2ubuntu0~16.04.1",
        "3.5.2-2ubuntu0~16.04.2",
        "3.5.2-2ubuntu0~16.04.3",
        "3.5.2-2ubuntu0~16.04.4",
        "3.5.2-2ubuntu0~16.04.5",
        "3.5.2-2ubuntu0~16.04.8",
        "3.5.2-2ubuntu0~16.04.9",
        "3.5.2-2ubuntu0~16.04.10",
        "3.5.2-2ubuntu0~16.04.11",
        "3.5.2-2ubuntu0~16.04.12",
        "3.5.2-2ubuntu0~16.04.13",
        "3.5.2-2ubuntu0~16.04.13+esm1",
        "3.5.2-2ubuntu0~16.04.13+esm2",
        "3.5.2-2ubuntu0~16.04.13+esm3",
        "3.5.2-2ubuntu0~16.04.13+esm5",
        "3.5.2-2ubuntu0~16.04.13+esm6",
        "3.5.2-2ubuntu0~16.04.13+esm7",
        "3.5.2-2ubuntu0~16.04.13+esm8",
        "3.5.2-2ubuntu0~16.04.13+esm9",
        "3.5.2-2ubuntu0~16.04.13+esm10",
        "3.5.2-2ubuntu0~16.04.13+esm11",
        "3.5.2-2ubuntu0~16.04.13+esm12",
        "3.5.2-2ubuntu0~16.04.13+esm13"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.5.2-2ubuntu0~16.04.13+esm14",
      "provider_record_id": "UBUNTU-CVE-2024-7592"
    },
    {
      "name": "python3.4",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.4~b1-0ubuntu3",
        "3.4~b1-4ubuntu4",
        "3.4~b1-4ubuntu6",
        "3.4~b1-5ubuntu2",
        "3.4~b2-1",
        "3.4~b3-1ubuntu1",
        "3.4~rc1-1build1",
        "3.4~rc2-1",
        "3.4~rc3-0ubuntu1",
        "3.4.0-1",
        "3.4.0-2ubuntu1",
        "3.4.0-2ubuntu1.1",
        "3.4.3-1ubuntu1~14.04.1",
        "3.4.3-1ubuntu1~14.04.3",
        "3.4.3-1ubuntu1~14.04.4",
        "3.4.3-1ubuntu1~14.04.5",
        "3.4.3-1ubuntu1~14.04.6",
        "3.4.3-1ubuntu1~14.04.7",
        "3.4.3-1ubuntu1~14.04.7+esm2",
        "3.4.3-1ubuntu1~14.04.7+esm4",
        "3.4.3-1ubuntu1~14.04.7+esm6",
        "3.4.3-1ubuntu1~14.04.7+esm7",
        "3.4.3-1ubuntu1~14.04.7+esm8",
        "3.4.3-1ubuntu1~14.04.7+esm10",
        "3.4.3-1ubuntu1~14.04.7+esm11",
        "3.4.3-1ubuntu1~14.04.7+esm12",
        "3.4.3-1ubuntu1~14.04.7+esm13",
        "3.4.3-1ubuntu1~14.04.7+esm14",
        "3.4.3-1ubuntu1~14.04.7+esm15",
        "3.4.3-1ubuntu1~14.04.7+esm16",
        "3.4.3-1ubuntu1~14.04.7+esm17",
        "3.4.3-1ubuntu1~14.04.7+esm19",
        "3.4.3-1ubuntu1~14.04.7+esm20",
        "3.4.3-1ubuntu1~14.04.7+esm21"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2024-7592"
    },
    {
      "name": "python3.6",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.6.3-1ubuntu1",
        "3.6.4~rc1-1",
        "3.6.4~rc1-2",
        "3.6.4-1",
        "3.6.4-2",
        "3.6.4-3build1",
        "3.6.4-4",
        "3.6.5~rc1-1",
        "3.6.5-3",
        "3.6.6-1~18.04",
        "3.6.7-1~18.04",
        "3.6.8-1~18.04.1",
        "3.6.8-1~18.04.2",
        "3.6.8-1~18.04.3",
        "3.6.9-1~18.04",
        "3.6.9-1~18.04ubuntu1",
        "3.6.9-1~18.04ubuntu1.1",
        "3.6.9-1~18.04ubuntu1.3",
        "3.6.9-1~18.04ubuntu1.4",
        "3.6.9-1~18.04ubuntu1.6",
        "3.6.9-1~18.04ubuntu1.7",
        "3.6.9-1~18.04ubuntu1.8",
        "3.6.9-1~18.04ubuntu1.9",
        "3.6.9-1~18.04ubuntu1.10",
        "3.6.9-1~18.04ubuntu1.12",
        "3.6.9-1~18.04ubuntu1.13",
        "3.6.9-1~18.04ubuntu1.13+esm1",
        "3.6.9-1~18.04ubuntu1.13+esm2",
        "3.6.9-1~18.04ubuntu1.13+esm3",
        "3.6.9-1~18.04ubuntu1.13+esm4",
        "3.6.9-1~18.04ubuntu1.13+esm5",
        "3.6.9-1~18.04ubuntu1.13+esm6",
        "3.6.9-1~18.04ubuntu1.13+esm7",
        "3.6.9-1~18.04ubuntu1.13+esm8",
        "3.6.9-1~18.04ubuntu1.13+esm9",
        "3.6.9-1~18.04ubuntu1.13+esm10"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2024-7592"
    },
    {
      "name": "python3.7",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.7.0~a2-1",
        "3.7.0~a3-1",
        "3.7.0~a3-2",
        "3.7.0~a3-3",
        "3.7.0~a4-1",
        "3.7.0~b1-1",
        "3.7.0~b1-1build1",
        "3.7.0~b2-1",
        "3.7.0~b3-1",
        "3.7.0-1~18.04",
        "3.7.1-1~18.04",
        "3.7.3-2~18.04.1",
        "3.7.5-2~18.04",
        "3.7.5-2~18.04.4",
        "3.7.5-2ubuntu1~18.04.2",
        "3.7.5-2ubuntu1~18.04.2+esm1",
        "3.7.5-2ubuntu1~18.04.2+esm2",
        "3.7.5-2ubuntu1~18.04.2+esm3",
        "3.7.5-2ubuntu1~18.04.2+esm4",
        "3.7.5-2ubuntu1~18.04.2+esm5",
        "3.7.5-2ubuntu1~18.04.2+esm6",
        "3.7.5-2ubuntu1~18.04.2+esm7",
        "3.7.5-2ubuntu1~18.04.2+esm8",
        "3.7.5-2ubuntu1~18.04.2+esm9",
        "3.7.5-2ubuntu1~18.04.2+esm10",
        "3.7.5-2ubuntu1~18.04.2+esm11"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2024-7592"
    },
    {
      "name": "python3.8",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.8.0-3~18.04",
        "3.8.0-3~18.04.1",
        "3.8.0-3ubuntu1~18.04.2",
        "3.8.0-3ubuntu1~18.04.2+esm1",
        "3.8.0-3ubuntu1~18.04.2+esm2",
        "3.8.0-3ubuntu1~18.04.2+esm3",
        "3.8.0-3ubuntu1~18.04.2+esm4",
        "3.8.0-3ubuntu1~18.04.2+esm5",
        "3.8.0-3ubuntu1~18.04.2+esm6",
        "3.8.0-3ubuntu1~18.04.2+esm7",
        "3.8.0-3ubuntu1~18.04.2+esm8",
        "3.8.0-3ubuntu1~18.04.2+esm9",
        "3.8.0-3ubuntu1~18.04.2+esm10",
        "3.8.0-3ubuntu1~18.04.2+esm11"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2024-7592"
    },
    {
      "name": "python3.8",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.8.10-0ubuntu1~20.04.12"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "3.8.0-1",
        "3.8.0-2",
        "3.8.0-3",
        "3.8.0-4",
        "3.8.0-5",
        "3.8.1-2ubuntu3",
        "3.8.2~rc1-1ubuntu1",
        "3.8.2-1",
        "3.8.2-1ubuntu1",
        "3.8.2-1ubuntu1.1",
        "3.8.2-1ubuntu1.2",
        "3.8.5-1~20.04",
        "3.8.5-1~20.04.2",
        "3.8.5-1~20.04.3",
        "3.8.10-0ubuntu1~20.04",
        "3.8.10-0ubuntu1~20.04.1",
        "3.8.10-0ubuntu1~20.04.2",
        "3.8.10-0ubuntu1~20.04.4",
        "3.8.10-0ubuntu1~20.04.5",
        "3.8.10-0ubuntu1~20.04.6",
        "3.8.10-0ubuntu1~20.04.7",
        "3.8.10-0ubuntu1~20.04.8",
        "3.8.10-0ubuntu1~20.04.9",
        "3.8.10-0ubuntu1~20.04.10",
        "3.8.10-0ubuntu1~20.04.11"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.8.10-0ubuntu1~20.04.12",
      "provider_record_id": "UBUNTU-CVE-2024-7592"
    },
    {
      "name": "python3.9",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.9.0~rc1-1~20.04",
        "3.9.0-5~20.04",
        "3.9.5-3~20.04.1",
        "3.9.5-3ubuntu0~20.04.1",
        "3.9.5-3ubuntu0~20.04.1+esm1",
        "3.9.5-3ubuntu0~20.04.1+esm2",
        "3.9.5-3ubuntu0~20.04.1+esm3",
        "3.9.5-3ubuntu0~20.04.1+esm4",
        "3.9.5-3ubuntu0~20.04.1+esm5",
        "3.9.5-3ubuntu0~20.04.1+esm6",
        "3.9.5-3ubuntu0~20.04.1+esm7",
        "3.9.5-3ubuntu0~20.04.1+esm8",
        "3.9.5-3ubuntu0~20.04.1+esm9",
        "3.9.5-3ubuntu0~20.04.1+esm10",
        "3.9.5-3ubuntu0~20.04.1+esm11"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2024-7592"
    },
    {
      "name": "python3.10",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.10.12-1~22.04.6"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "3.10.0-2",
        "3.10.0-3",
        "3.10.0-4",
        "3.10.0-5",
        "3.10.0-5build1",
        "3.10.1-1",
        "3.10.1-2",
        "3.10.2-1",
        "3.10.2-5",
        "3.10.2-7",
        "3.10.3-1",
        "3.10.4-3",
        "3.10.4-3ubuntu0.1",
        "3.10.6-1~22.04",
        "3.10.6-1~22.04.1",
        "3.10.6-1~22.04.2",
        "3.10.6-1~22.04.2ubuntu1",
        "3.10.6-1~22.04.2ubuntu1.1",
        "3.10.12-1~22.04.2",
        "3.10.12-1~22.04.3",
        "3.10.12-1~22.04.4",
        "3.10.12-1~22.04.5"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.10.12-1~22.04.6",
      "provider_record_id": "UBUNTU-CVE-2024-7592"
    },
    {
      "name": "python3.11",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "3.11.0~rc1-1~22.04",
        "3.11.0~rc1-1~22.04.1~esm1",
        "3.11.0~rc1-1~22.04.1~esm2",
        "3.11.0~rc1-1~22.04.1~esm3",
        "3.11.0~rc1-1~22.04.1~esm4",
        "3.11.0~rc1-1~22.04.1~esm5",
        "3.11.0~rc1-1~22.04.1~esm6",
        "3.11.0~rc1-1~22.04.1~esm7",
        "3.11.0~rc1-1~22.04.1~esm8",
        "3.11.0~rc1-1~22.04.1~esm9",
        "3.11.0~rc1-1~22.04.1",
        "3.11.0~rc1-1~22.04.1+esm1",
        "3.11.0~rc1-1~22.04.1+esm2"
      ],
      "ecosystem": "deb",
      "fixed_version": "",
      "provider_record_id": "UBUNTU-CVE-2024-7592"
    },
    {
      "name": "python3.12",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.12.3-1ubuntu0.2"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "3.12.0-1",
        "3.12.0-5",
        "3.12.0-6",
        "3.12.0-7",
        "3.12.1-2",
        "3.12.2-1",
        "3.12.2-4build3",
        "3.12.2-4build4",
        "3.12.2-5ubuntu3",
        "3.12.3-1",
        "3.12.3-1ubuntu0.1"
      ],
      "ecosystem": "deb",
      "fixed_version": "3.12.3-1ubuntu0.2",
      "provider_record_id": "UBUNTU-CVE-2024-7592"
    },
    {
      "name": "python",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.18-33.66.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server ltss extended security 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "2.7.18-33.66.1",
      "provider_record_id": "SUSE-SU-2026:0802-1"
    },
    {
      "name": "python-base",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.18-33.66.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server ltss extended security 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "2.7.18-33.66.1",
      "provider_record_id": "SUSE-SU-2026:0802-1"
    },
    {
      "name": "python-doc",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.18-33.66.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server ltss extended security 12 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "2.7.18-33.66.1",
      "provider_record_id": "SUSE-SU-2026:0802-1"
    },
    {
      "name": "python",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.18-150000.105.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "2.7.18-150000.105.1",
      "provider_record_id": "SUSE-SU-2026:0774-1"
    },
    {
      "name": "python-base",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.18-150000.105.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp7",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "2.7.18-150000.105.1",
      "provider_record_id": "SUSE-SU-2026:0774-1"
    },
    {
      "name": "python",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.18-150000.105.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "2.7.18-150000.105.1",
      "provider_record_id": "SUSE-SU-2026:0774-1"
    },
    {
      "name": "python-base",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.18-150000.105.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "2.7.18-150000.105.1",
      "provider_record_id": "SUSE-SU-2026:0774-1"
    },
    {
      "name": "python-doc",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.7.18-150000.105.1"
            }
          ]
        }
      ],
      "release": "leap 15.6",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "2.7.18-150000.105.1",
      "provider_record_id": "SUSE-SU-2026:0774-1"
    },
    {
      "name": "python39",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.9.20-2.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "fixed_version": "3.9.20-2.1",
      "provider_record_id": "OPENSUSE-SU-2024:14352-1"
    }
  ]
}

Publisher notes

[bookworm] pypy3: Minor issue

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · all · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · all · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · all · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · all · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • [libpython3.11]Unknown

    Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · amd64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · arm64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · amd64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · arm64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · amd64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · arm64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · amd64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · arm64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · amd64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · arm64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · all · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · all · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · all · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · all · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • [pypy3]Unknown
    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · amd64 · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

    • 7.3.11+dfsg-2+deb12u3 · arm64 · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

  • [pypy3-dev]Unknown

    Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

  • [pypy3-doc]Unknown

    Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

  • [pypy3-lib]Unknown

    Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · amd64 · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

    • 7.3.11+dfsg-2+deb12u3 · arm64 · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

  • Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

  • [pypy3-tk]Unknown

    Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · amd64 · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

    • 7.3.11+dfsg-2+deb12u3 · arm64 · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

  • [pypy3-venv]Unknown

    Source package: [pypy3]

    Details (2)
    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

    • 7.3.11+dfsg-2+deb12u3 · all · bookworm

      Affected

      usn · pypy3 · debian · bookworm; usn · pypy3 · debian · 12

  • [python3.11]Unknown
    Details (4)
    • 3.11.2-6+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · amd64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · arm64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · amd64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · arm64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · amd64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · arm64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · all · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · all · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · all · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · all · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · all · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · all · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · all · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · all · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

  • Source package: [python3.11]

    Details (4)
    • 3.11.2-6+deb12u8 · amd64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u8 · arm64 · bookworm

      Fixed · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · amd64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

    • 3.11.2-6+deb12u3 · arm64 · bookworm-security

      Affected · Fixed: 3.11.2-6+deb12u5

      usn · python3.11 · debian · bookworm; usn · python3.11 · debian · 12

Next results

Observed:

References