Search for packages
Package details: pkg:deb/debian/python3.11@3.11.2-6%2Bdeb12u2
purl pkg:deb/debian/python3.11@3.11.2-6%2Bdeb12u2
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 2.2
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-u5e1-ny7x-aaab
Aliases:
CVE-2024-0397
A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.
3.11.2-6+deb12u3
Affected by 0 other vulnerabilities.
3.11.2-6+deb12u4
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-10-11T03:17:41.081058+00:00 Debian Importer Affected by VCID-u5e1-ny7x-aaab https://security-tracker.debian.org/tracker/data/json 34.0.2
2024-09-20T07:29:43.252265+00:00 Debian Importer Affected by VCID-u5e1-ny7x-aaab https://security-tracker.debian.org/tracker/data/json 34.0.1