https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:42:10 +0000 https://vulnerability.circl.lu/vuln/cve-2024-0397 <p><strong>Affected:</strong> Python Software Foundation CPython, python_software_foundation cpython</p> <p>A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.</p> <p><strong>Affected:</strong> Python Software Foundation CPython, python_software_foundation cpython</p> <p>A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “cert_store_stats()” and “get_ca_certs()”. The race condition can be triggered if the methods are called at the same time as certificates are loaded into the SSLContext, such as during the TLS handshake with a certificate directory configured. This issue is fixed in CPython 3.10.14, 3.11.9, 3.12.3, and 3.13.0a5.</p> https://vulnerability.circl.lu/vuln/cve-2024-0397 https://vulnerability.circl.lu/vuln/usn-6928-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: python3.8, Ubuntu:22.04:LTS: python3.10</p> <p>It was discovered that the Python ssl module contained a memory race condition when handling the APIs to obtain the CA certificates and certificate store statistics. This could possibly result in applications obtaining wrong results, leading to various SSL issues. (CVE-2024-0397)</p> <p>It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered &#34;private&#34; or &#34;globally reachable&#34;. This could possibly result in applications applying incorrect security policies. (CVE-2024-4032)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: python3.8, Ubuntu:22.04:LTS: python3.10</p> <p>It was discovered that the Python ssl module contained a memory race condition when handling the APIs to obtain the CA certificates and certificate store statistics. This could possibly result in applications obtaining wrong results, leading to various SSL issues. (CVE-2024-0397)</p> <p>It was discovered that the Python ipaddress module contained incorrect information about which IP address ranges were considered &#34;private&#34; or &#34;globally reachable&#34;. This could possibly result in applications applying incorrect security policies. (CVE-2024-4032)</p> https://vulnerability.circl.lu/vuln/usn-6928-1