Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Fedora 31: FEDORA-2021-f5a2ef6bbd Essential Vulnerability Resolution

fedora
Calendar Grey March 13, 2020
Dist Fedora Esm H88
Crucial updates have been made to the python3-typed_ast package in Fedora to rectify serious security flaws, enhancing system protection.
Fixes for CVE-2019-19274 and CVE-2019-19275

Summary

A fork of the ast module with type annotations. This package is based on the ast modules from Python 2 and 3,

and has been extended with support for type comments and type annotations

as supported in Python 3.6.

Fixes for CVE-2019-19274 and CVE-2019-19275

* Fri Jul 26 2019 Fedora Release Engineering - 1.4.0-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

* Tue Jun 11 2019 Gwyn Ciesla - 1.4.0-1

- 1.4.0.

* Wed May 15 2019 Gwyn Ciesla - 1.3.5-1

- 1.3.5.

* Tue May 14 2019 Gwyn Ciesla - 1.3.1-2

- Fix 3.8 FTBFS.

[ 1 ] Bug #1810594 - CVE-2019-19274 python3-typed_ast: out-of-bounds read in handle_keywordonly_args() function [fedora-30]

https://bugzilla.redhat.com/show_bug.cgi?id=1810594

[ 2 ] Bug #1810598 - CVE-2019-19275 python3-typed_ast: out-of-bounds read in ast_for_arguments() function [fedora-30]

https://bugzilla.redhat.com/show_bug.cgi?id=1810598

su -c 'dnf upgrade --advisory FEDORA-2020-9b3dabc21c' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 30
Version: 1.4.0
Release: 2.fc30
Summary: A fork of the ast module with type annotations

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here