Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 508
Alerts This Week
Warning Icon 1 508

Fedora 41: FEDORA-2024-6140989aaf Critical: Python3.9 Denial of Service Fix

fedora
Calendar Grey September 13, 2024
Scroller Fedora
Python 3.9 patch resolves CVE-2024-8088 in Fedora 41, tackling severe Denial of Service flaw resulting from harmful ZIP files.
Security fix for CVE-2024-8088

Summary

Python 3.9 package for developers.

This package exists to allow developers to test their code against an older

version of Python. This is not a full Python stack and if you wish to run

your applications with Python 3.9, see other distributions

that support it, such as CentOS or RHEL or older Fedora releases.

Update Information:

Security fix for CVE-2024-8088

Topics%20covered

Topics Covered

security advisory update Fedora Denial of Service python CVE-2024-8088

Change Log

* Fri Aug 23 2024 Charalampos Stratakis - 3.9.19-6 - Security fix for CVE-2024-8088 - Fixes: rhbz#2307466

References


[ 1 ] Bug #2307370 - CVE-2024-8088 python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service https://bugzilla.redhat.com/show_bug.cgi?id=2307370

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-6140989aaf' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: python3.9
Product: Fedora 41
Version: 3.9.19
Release: 6.fc41
URL: https://www.python.org/
Summary: Version 3.9 of the Python interpreter

Topics%20covered

Topics Covered

security advisory update Fedora Denial of Service python CVE-2024-8088

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.