Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

Slackware 15.0: 2023-258-01 Critical: Python3 TLS Bypass

slackware
Calendar Grey September 15, 2023
Dist Slackware Esm H88
The latest python3 updates for Slackware address a crucial vulnerability that impacts the security of the TLS handshake process and its validation.
New python3 packages are available for Slackware 15.0 and -current to fix a security issue

Summary

Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.18-i586-1_slack15.0.txz: Upgraded. This update fixes a security issue: Fixed an issue where instances of ssl.SSLSocket were vulnerable to a bypass of the TLS handshake and included protections (like certificate verification) and treating sent unencrypted data as if it were post-handshake TLS encrypted data. Security issue reported by Aapo Oksman; patch by Gregory P. Smith. For more information, see: https://www.cve.org/CVERecord?id=CVE-2023-40217 (* Security fix *)

Topics%20covered

Topics Covered

security advisory critical software update security fix Slackware python3 TLS bypass

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 15.0:
Updated package for Slackware x86_64 15.0:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 15.0 package: 1f27ad0aedfd56e9029c441c3a7ca7ba python3-3.9.18-i586-1_slack15.0.txz
Slackware x86_64 15.0 package: f1b9a59ddfdab0e92695bbb19b2fb19f python3-3.9.18-x86_64-1_slack15.0.txz
Slackware -current package: 2576205d5c3f3ef4b804462f62f2dfbe d/python3-3.9.18-i586-1.txz
Slackware x86_64 -current package: 02630cd98d0f1f4b81f2b71cf00d5cfa d/python3-3.9.18-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical software update security fix Slackware python3 TLS bypass

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg python3-3.9.18-i586-1_slack15.0.txz

Related News

Your message here