Stay Secure with the Latest Linux Advisories

security advisoryFedoraupdate information

Fedora 39: 2024-7008b2fedf Moderate: Python3 Memory Race Condition

Add patch for CVE-2024-8088. Update to python-3.11.9. Backport fix for CVE-2024-6923.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-7008b2fedf 2024-09-06 03:52:10.864348 -------------------------------------------------------------------------------- Name : mingw-python3 Product : Fedora 39 Version : 3.11.9 Release : 2.fc39 URL : https://www.python.org/ Summary : MinGW Windows python3 Description : MinGW Windows python3 -------------------------------------------------------------------------------- Update Information: Add patch for CVE-2024-8088. Update to python-3.11.9. Backport fix for CVE-2024-6923. -------------------------------------------------------------------------------- ChangeLog: * Wed Aug 28 2024 Sandro Mani - 3.11.9-2 - Backport patch for CVE-2024-8088 * Mon Aug 26 2024 Sandro Mani - 3.11.9-1 - Update to 3.11.9 * Thu Jul 18 2024 Fedora Release Engineering - 3.11.8-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2301903 - CVE-2024-0397 mingw-python3: Memory race condition in ssl.SSLContext certificate store methods [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2301903 [ 2 ] Bug #2303155 - CVE-2024-6923 mingw-python3: email module doesn't properly quotes newlines in email headers, allowing header injection [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2303155 [ 3 ] Bug #2307457 - CVE-2024-8088 mingw-python3: From NVD collector [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2307457 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-7008b2fedf' at the command line. For more information, refer to the dnf documentationavailable at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . The recent upgrade of mingw-python3 within Fedora 39 brings essential patches and backports addressing known problems. Discover further details.. mingw-python3, Fedora updates, security patches, threat fixes, CVE issues. . LinuxSecurity.com Team

Sep 06, 2024 Fedora