AIX Open Source

AIX Open Source

Share your experiences and connect with fellow developers to discover how to build and manage open source software for the AIX operating system

 View Only

  • 1.  Vulnerable to CVE-2024-4032 and CVE-2024-37891

    Posted Tue July 02, 2024 12:35 PM

    Hi Team, we have 2 new vulnerablities found

    CVE-2024-4032 (urllib3)
    CVE-2024-37891 (cPython)

    Wondering if there is something in the scope to resolve this? Please let me know

    Thanks in advance!



    ------------------------------
    Pablo Daniel Zuñiga TREJO
    ------------------------------


  • 2.  RE: Vulnerable to CVE-2024-4032 and CVE-2024-37891

    Posted Wed July 03, 2024 01:56 AM

    There is no new release of python which has the fix for CVE-2024-4032. 
    We will update urllib3 to 2.2.2 (CVE-2024-37891) in couple of weeks. 



    ------------------------------
    Ayappan P
    ------------------------------

    Original Message


  • 3.  RE: Vulnerable to CVE-2024-4032 and CVE-2024-37891

    Posted Wed July 03, 2024 10:41 AM

    Thank you for the quick response Ayappan!

    Sounds good, I will wait for new urllib3, thanks again.



    ------------------------------
    Pablo Daniel Zuñiga TREJO
    ------------------------------

    Original Message