Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Slackware 15.0: 2024-080-01 Moderate Python3 Security Update for Zipbomb

slackware
Calendar Grey March 20, 2024
Dist Slackware Esm H88
Updated python3 modules released for Slackware 15.0 to address vital security vulnerabilities and improve overall reliability.
New python3 packages are available for Slackware 15.0 and -current to fix security issues

Summary

Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.19-i586-1_slack15.0.txz: Upgraded. This update fixes security issues: bundled libexpat was updated to 2.6.0. zipfile is now protected from the "quoted-overlap" zipbomb. tempfile.TemporaryDirectory cleanup no longer dereferences symlinks when working around file system permission errors. For more information, see: https://pythoninsider.blogspot.com/2024/03/python-31014-3919-and-3819-is-now.html https://www.cve.org/CVERecord?id=CVE-2023-52425 https://www.cve.org/CVERecord?id=CVE-2024-0450 https://www.cve.org/CVERecord?id=CVE-2023-6597 (* Security fix *)

Topics%20covered

Topics Covered

security advisory security fix moderate severity Slackware file permissions python3 zipbomb

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 15.0:
Updated package for Slackware x86_64 15.0:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 15.0 package: 7081105ba6776152ac3b7106f1d39b18 python3-3.9.19-i586-1_slack15.0.txz
Slackware x86_64 15.0 package: 473fbc6c3cf937f8f9839113ade8afa8 python3-3.9.19-x86_64-1_slack15.0.txz
Slackware -current package: a59b0adbca9785605159767489cbe6e5 d/python3-3.9.19-i586-1.txz
Slackware x86_64 -current package: 3b7c17fff3d5f99e8cfae5880c8a8dbb d/python3-3.9.19-x86_64-1.txz

Topics%20covered

Topics Covered

security advisory security fix moderate severity Slackware file permissions python3 zipbomb

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg python3-3.9.19-i586-1_slack15.0.txz

Related News

Your message here