Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 2 articles for you...
217
security advisorysecurity issuemoderate severityOracle Linux 9 ELSA-2024-8446 moderate: Python update for security fix
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2024-8446 http://linux.oracle.com/errata/ELSA-2024-8446.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: x86_64: python-unversioned-command-3.9.18-3.el9_4.6.noarch.rpm python3-3.9.18-3.el9_4.6.x86_64.rpm python3-devel-3.9.18-3.el9_4.6.i686.rpm python3-devel-3.9.18-3.el9_4.6.x86_64.rpm python3-libs-3.9.18-3.el9_4.6.i686.rpm python3-libs-3.9.18-3.el9_4.6.x86_64.rpm python3-tkinter-3.9.18-3.el9_4.6.x86_64.rpm python3-3.9.18-3.el9_4.6.i686.rpm python3-debug-3.9.18-3.el9_4.6.i686.rpm python3-debug-3.9.18-3.el9_4.6.x86_64.rpm python3-idle-3.9.18-3.el9_4.6.i686.rpm python3-idle-3.9.18-3.el9_4.6.x86_64.rpm python3-test-3.9.18-3.el9_4.6.i686.rpm python3-test-3.9.18-3.el9_4.6.x86_64.rpm python3-tkinter-3.9.18-3.el9_4.6.i686.rpm aarch64: python-unversioned-command-3.9.18-3.el9_4.6.noarch.rpm python3-3.9.18-3.el9_4.6.aarch64.rpm python3-devel-3.9.18-3.el9_4.6.aarch64.rpm python3-libs-3.9.18-3.el9_4.6.aarch64.rpm python3-tkinter-3.9.18-3.el9_4.6.aarch64.rpm python3-debug-3.9.18-3.el9_4.6.aarch64.rpm python3-idle-3.9.18-3.el9_4.6.aarch64.rpm python3-test-3.9.18-3.el9_4.6.aarch64.rpm SRPMS: http://oss.oracle.com/ol9/SRPMS-updates//python3.9-3.9.18-3.el9_4.6.src.rpm Related CVEs: CVE-2024-6232 Description of changes: [3.9.18-3.6] - Fix: CVE-2024-6232 - Resolves: RHEL-57421 _______________________________________________ El-errata mailing list
Oct 25, 2024
Oracle
100
security advisorysoftware patchmoderate severitySUSE Linux Enterprise: 2024:0437-1 Moderate Python Email Parsing Fix
* bsc#1210638 Cross-References: * CVE-2023-27043 . # Security update for python Announcement ID: SUSE-SU-2024:0437-1 Rating: moderate References: * bsc#1210638 Cross-References: * CVE-2023-27043 CVSS scores: * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 * SUSE Linux Enterprise Workstation Extension 12 12-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python fixes the following issues: * CVE-2023-27043: Fixed incorrectly parses e-mail addresses which contain a special character (bsc#1210638). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-437=1 * SUSE Linux Enterprise Server 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-437=1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-437=1 * SUSE Linux Enterprise Workstation Extension 12 12-SP5 zypper in -t patch SUSE-SLE-WE-12-SP5-2024-437=1 ## Package List: * SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64) * python-debuginfo-2.7.18-33.29.1 * python-tk-debuginfo-2.7.18-33.29.1 * libpython2_7-1_0-2.7.18-33.29.1 * python-gdbm-2.7.18-33.29.1 * python-curses-debuginfo-2.7.18-33.29.1 * python-devel-2.7.18-33.29.1 * python-base-debuginfo-2.7.18-33.29.1 * python-gdbm-debuginfo-2.7.18-33.29.1 * libpython2_7-1_0-debuginfo-2.7.18-33.29.1 * python-demo-2.7.18-33.29.1 *python-tk-2.7.18-33.29.1 * python-debugsource-2.7.18-33.29.1 * python-xml-2.7.18-33.29.1 * python-2.7.18-33.29.1 * python-base-debugsource-2.7.18-33.29.1 * python-xml-debuginfo-2.7.18-33.29.1 * python-base-2.7.18-33.29.1 * python-curses-2.7.18-33.29.1 * python-idle-2.7.18-33.29.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (noarch) * python-doc-2.7.18-33.29.1 * python-doc-pdf-2.7.18-33.29.1 * SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64) * python-base-32bit-2.7.18-33.29.1 * python-base-debuginfo-32bit-2.7.18-33.29.1 * libpython2_7-1_0-32bit-2.7.18-33.29.1 * python-debuginfo-32bit-2.7.18-33.29.1 * python-32bit-2.7.18-33.29.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.29.1 * SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64) * python-debuginfo-2.7.18-33.29.1 * python-tk-debuginfo-2.7.18-33.29.1 * libpython2_7-1_0-2.7.18-33.29.1 * python-gdbm-2.7.18-33.29.1 * python-curses-debuginfo-2.7.18-33.29.1 * python-devel-2.7.18-33.29.1 * python-base-debuginfo-2.7.18-33.29.1 * python-gdbm-debuginfo-2.7.18-33.29.1 * libpython2_7-1_0-debuginfo-2.7.18-33.29.1 * python-demo-2.7.18-33.29.1 * python-tk-2.7.18-33.29.1 * python-debugsource-2.7.18-33.29.1 * python-xml-2.7.18-33.29.1 * python-2.7.18-33.29.1 * python-base-debugsource-2.7.18-33.29.1 * python-xml-debuginfo-2.7.18-33.29.1 * python-base-2.7.18-33.29.1 * python-curses-2.7.18-33.29.1 * python-idle-2.7.18-33.29.1 * SUSE Linux Enterprise Server 12 SP5 (noarch) * python-doc-2.7.18-33.29.1 * python-doc-pdf-2.7.18-33.29.1 * SUSE Linux Enterprise Server 12 SP5 (s390x x86_64) * python-base-32bit-2.7.18-33.29.1 * python-base-debuginfo-32bit-2.7.18-33.29.1 * libpython2_7-1_0-32bit-2.7.18-33.29.1 * python-debuginfo-32bit-2.7.18-33.29.1 * python-32bit-2.7.18-33.29.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.29.1 * SUSE Linux Enterprise Server for SAPApplications 12 SP5 (ppc64le x86_64) * python-debuginfo-2.7.18-33.29.1 * python-tk-debuginfo-2.7.18-33.29.1 * libpython2_7-1_0-2.7.18-33.29.1 * python-gdbm-2.7.18-33.29.1 * python-curses-debuginfo-2.7.18-33.29.1 * python-devel-2.7.18-33.29.1 * python-base-debuginfo-2.7.18-33.29.1 * python-gdbm-debuginfo-2.7.18-33.29.1 * python-xml-debuginfo-2.7.18-33.29.1 * libpython2_7-1_0-debuginfo-2.7.18-33.29.1 * python-demo-2.7.18-33.29.1 * python-tk-2.7.18-33.29.1 * python-xml-2.7.18-33.29.1 * python-2.7.18-33.29.1 * python-base-debugsource-2.7.18-33.29.1 * python-debugsource-2.7.18-33.29.1 * python-base-2.7.18-33.29.1 * python-curses-2.7.18-33.29.1 * python-idle-2.7.18-33.29.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (noarch) * python-doc-2.7.18-33.29.1 * python-doc-pdf-2.7.18-33.29.1 * SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64) * python-base-32bit-2.7.18-33.29.1 * python-base-debuginfo-32bit-2.7.18-33.29.1 * libpython2_7-1_0-32bit-2.7.18-33.29.1 * python-debuginfo-32bit-2.7.18-33.29.1 * python-32bit-2.7.18-33.29.1 * libpython2_7-1_0-debuginfo-32bit-2.7.18-33.29.1 * SUSE Linux Enterprise Workstation Extension 12 12-SP5 (x86_64) * python-base-debuginfo-2.7.18-33.29.1 * python-base-debugsource-2.7.18-33.29.1 * python-devel-2.7.18-33.29.1 ## References: * https://www.suse.com/security/cve/CVE-2023-27043.html * https://bugzilla.suse.com/show_bug.cgi?id=1210638 . This announcement highlights a significant enhancement for Java that focuses on CVE-2023-29015 concerning network security in multiple Fedora distributions.. Python Update, SUSE Security, Email Parsing Issues, Software Patch Update. . LinuxSecurity.com Team
Feb 08, 2024
SuSE
100
security advisorymoderate severitytiming attackSUSE: 2023:4220-1 Moderate: Python Timing Side Channel Threat
* bsc#1210638 * bsc#1214685 * bsc#1214691 Cross-References: . # Security update for python Announcement ID: SUSE-SU-2023:4220-1 Rating: moderate References: * bsc#1210638 * bsc#1214685 * bsc#1214691 Cross-References: * CVE-2022-48565 * CVE-2022-48566 * CVE-2023-27043 CVSS scores: * CVE-2022-48565 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L * CVE-2022-48565 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48566 ( SUSE ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N * CVE-2022-48566 ( NVD ): 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N * CVE-2023-27043 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N * CVE-2023-27043 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for python fixes the following issues: * CVE-2022-48566: Fixed a potential timing side channel due to inadequate checking during HMAC comparison (bsc#1214691). ## Patch Instructions: To install this SUSE update use the SUSErecommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4220=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4220=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-4220=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4220=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4220=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-4220=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4220=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python-xml-2.7.18-150000.57.1 * python-demo-2.7.18-150000.57.1 * python-idle-2.7.18-150000.57.1 * python-tk-2.7.18-150000.57.1 * python-debuginfo-2.7.18-150000.57.1 * python-base-2.7.18-150000.57.1 * python-devel-2.7.18-150000.57.1 * python-curses-2.7.18-150000.57.1 * python-gdbm-2.7.18-150000.57.1 * python-gdbm-debuginfo-2.7.18-150000.57.1 * python-tk-debuginfo-2.7.18-150000.57.1 * python-base-debugsource-2.7.18-150000.57.1 * python-xml-debuginfo-2.7.18-150000.57.1 * python-debugsource-2.7.18-150000.57.1 * libpython2_7-1_0-2.7.18-150000.57.1 * python-curses-debuginfo-2.7.18-150000.57.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.57.1 * python-2.7.18-150000.57.1 * python-base-debuginfo-2.7.18-150000.57.1 * openSUSE Leap 15.4 (x86_64) * libpython2_7-1_0-32bit-2.7.18-150000.57.1 * python-32bit-debuginfo-2.7.18-150000.57.1 * python-base-32bit-debuginfo-2.7.18-150000.57.1 * libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.57.1 * python-32bit-2.7.18-150000.57.1 *python-base-32bit-2.7.18-150000.57.1 * openSUSE Leap 15.4 (noarch) * python-doc-pdf-2.7.18-150000.57.1 * python-doc-2.7.18-150000.57.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-xml-2.7.18-150000.57.1 * python-demo-2.7.18-150000.57.1 * python-idle-2.7.18-150000.57.1 * python-tk-2.7.18-150000.57.1 * python-debuginfo-2.7.18-150000.57.1 * python-base-2.7.18-150000.57.1 * python-devel-2.7.18-150000.57.1 * python-curses-2.7.18-150000.57.1 * python-gdbm-2.7.18-150000.57.1 * python-gdbm-debuginfo-2.7.18-150000.57.1 * python-tk-debuginfo-2.7.18-150000.57.1 * python-base-debugsource-2.7.18-150000.57.1 * python-xml-debuginfo-2.7.18-150000.57.1 * python-debugsource-2.7.18-150000.57.1 * libpython2_7-1_0-2.7.18-150000.57.1 * python-curses-debuginfo-2.7.18-150000.57.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.57.1 * python-2.7.18-150000.57.1 * python-base-debuginfo-2.7.18-150000.57.1 * openSUSE Leap 15.5 (x86_64) * libpython2_7-1_0-32bit-2.7.18-150000.57.1 * python-32bit-debuginfo-2.7.18-150000.57.1 * python-base-32bit-debuginfo-2.7.18-150000.57.1 * libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.57.1 * python-32bit-2.7.18-150000.57.1 * python-base-32bit-2.7.18-150000.57.1 * openSUSE Leap 15.5 (noarch) * python-doc-pdf-2.7.18-150000.57.1 * python-doc-2.7.18-150000.57.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * python-base-debugsource-2.7.18-150000.57.1 * python-devel-2.7.18-150000.57.1 * python-base-debuginfo-2.7.18-150000.57.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * python-xml-2.7.18-150000.57.1 * python-debuginfo-2.7.18-150000.57.1 * python-base-2.7.18-150000.57.1 * python-devel-2.7.18-150000.57.1 * python-curses-2.7.18-150000.57.1 * python-gdbm-2.7.18-150000.57.1 * python-gdbm-debuginfo-2.7.18-150000.57.1 * python-base-debugsource-2.7.18-150000.57.1 * python-xml-debuginfo-2.7.18-150000.57.1 * python-debugsource-2.7.18-150000.57.1 * libpython2_7-1_0-2.7.18-150000.57.1 * python-curses-debuginfo-2.7.18-150000.57.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.57.1 * python-2.7.18-150000.57.1 * python-base-debuginfo-2.7.18-150000.57.1 * SUSE Manager Proxy 4.2 (x86_64) * python-debuginfo-2.7.18-150000.57.1 * python-base-2.7.18-150000.57.1 * python-base-debugsource-2.7.18-150000.57.1 * python-debugsource-2.7.18-150000.57.1 * libpython2_7-1_0-2.7.18-150000.57.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.57.1 * python-2.7.18-150000.57.1 * python-base-debuginfo-2.7.18-150000.57.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * python-debuginfo-2.7.18-150000.57.1 * python-base-2.7.18-150000.57.1 * python-base-debugsource-2.7.18-150000.57.1 * python-debugsource-2.7.18-150000.57.1 * libpython2_7-1_0-2.7.18-150000.57.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.57.1 * python-2.7.18-150000.57.1 * python-base-debuginfo-2.7.18-150000.57.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * python-xml-2.7.18-150000.57.1 * python-debuginfo-2.7.18-150000.57.1 * python-base-2.7.18-150000.57.1 * python-devel-2.7.18-150000.57.1 * python-curses-2.7.18-150000.57.1 * python-gdbm-2.7.18-150000.57.1 * python-gdbm-debuginfo-2.7.18-150000.57.1 * python-base-debugsource-2.7.18-150000.57.1 * python-xml-debuginfo-2.7.18-150000.57.1 * python-debugsource-2.7.18-150000.57.1 * libpython2_7-1_0-2.7.18-150000.57.1 * python-curses-debuginfo-2.7.18-150000.57.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.57.1 * python-2.7.18-150000.57.1 * python-base-debuginfo-2.7.18-150000.57.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48565.html * https://www.suse.com/security/cve/CVE-2022-48566.html * https://www.suse.com/security/cve/CVE-2023-27043.html * https://bugzilla.suse.com/show_bug.cgi?id=1210638 * https://bugzilla.suse.com/show_bug.cgi?id=1214685 *https://bugzilla.suse.com/show_bug.cgi?id=1214691 . An essential patch rollout for Python on SUSE tackles several security flaws to enhance system protection.. SUSE Python Update, OpenSUSE Security, Timing Issue Fix. . LinuxSecurity.com Team
Oct 26, 2023
SuSE
98
security advisorysecurity updateimportantRHEL 8: RHSA-2023-5463-01 Important: Python3.11 TLS Handshake Issue
An update for python3.11 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ===================================================================== Red Hat Security Advisory Synopsis: Important: python3.11 security update Advisory ID: RHSA-2023:5463-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:5463 Issue date: 2023-10-05 CVE Names: CVE-2023-40217 ===================================================================== 1. Summary: An update for python3.11 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 Red Hat Enterprise Linux CRB (v. 8) - aarch64, ppc64le, s390x, x86_64 3. Description: Python is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. Security Fix(es): * python: TLS handshake bypass (CVE-2023-40217) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed(https://bugzilla.redhat.com/): 2235789 - CVE-2023-40217 python: TLS handshake bypass 6. Package List: Red Hat Enterprise Linux AppStream (v. 8): Source: python3.11-3.11.2-2.el8_8.2.src.rpm aarch64: python3.11-3.11.2-2.el8_8.2.aarch64.rpm python3.11-debuginfo-3.11.2-2.el8_8.2.aarch64.rpm python3.11-debugsource-3.11.2-2.el8_8.2.aarch64.rpm python3.11-devel-3.11.2-2.el8_8.2.aarch64.rpm python3.11-libs-3.11.2-2.el8_8.2.aarch64.rpm python3.11-tkinter-3.11.2-2.el8_8.2.aarch64.rpm noarch: python3.11-rpm-macros-3.11.2-2.el8_8.2.noarch.rpm ppc64le: python3.11-3.11.2-2.el8_8.2.ppc64le.rpm python3.11-debuginfo-3.11.2-2.el8_8.2.ppc64le.rpm python3.11-debugsource-3.11.2-2.el8_8.2.ppc64le.rpm python3.11-devel-3.11.2-2.el8_8.2.ppc64le.rpm python3.11-libs-3.11.2-2.el8_8.2.ppc64le.rpm python3.11-tkinter-3.11.2-2.el8_8.2.ppc64le.rpm s390x: python3.11-3.11.2-2.el8_8.2.s390x.rpm python3.11-debuginfo-3.11.2-2.el8_8.2.s390x.rpm python3.11-debugsource-3.11.2-2.el8_8.2.s390x.rpm python3.11-devel-3.11.2-2.el8_8.2.s390x.rpm python3.11-libs-3.11.2-2.el8_8.2.s390x.rpm python3.11-tkinter-3.11.2-2.el8_8.2.s390x.rpm x86_64: python3.11-3.11.2-2.el8_8.2.x86_64.rpm python3.11-debuginfo-3.11.2-2.el8_8.2.i686.rpm python3.11-debuginfo-3.11.2-2.el8_8.2.x86_64.rpm python3.11-debugsource-3.11.2-2.el8_8.2.i686.rpm python3.11-debugsource-3.11.2-2.el8_8.2.x86_64.rpm python3.11-devel-3.11.2-2.el8_8.2.i686.rpm python3.11-devel-3.11.2-2.el8_8.2.x86_64.rpm python3.11-libs-3.11.2-2.el8_8.2.i686.rpm python3.11-libs-3.11.2-2.el8_8.2.x86_64.rpm python3.11-tkinter-3.11.2-2.el8_8.2.x86_64.rpm Red Hat Enterprise Linux CRB (v.8): aarch64: python3.11-debug-3.11.2-2.el8_8.2.aarch64.rpm python3.11-debuginfo-3.11.2-2.el8_8.2.aarch64.rpm python3.11-debugsource-3.11.2-2.el8_8.2.aarch64.rpm python3.11-idle-3.11.2-2.el8_8.2.aarch64.rpm python3.11-test-3.11.2-2.el8_8.2.aarch64.rpm ppc64le: python3.11-debug-3.11.2-2.el8_8.2.ppc64le.rpm python3.11-debuginfo-3.11.2-2.el8_8.2.ppc64le.rpm python3.11-debugsource-3.11.2-2.el8_8.2.ppc64le.rpm python3.11-idle-3.11.2-2.el8_8.2.ppc64le.rpm python3.11-test-3.11.2-2.el8_8.2.ppc64le.rpm s390x: python3.11-debug-3.11.2-2.el8_8.2.s390x.rpm python3.11-debuginfo-3.11.2-2.el8_8.2.s390x.rpm python3.11-debugsource-3.11.2-2.el8_8.2.s390x.rpm python3.11-idle-3.11.2-2.el8_8.2.s390x.rpm python3.11-test-3.11.2-2.el8_8.2.s390x.rpm x86_64: python3.11-3.11.2-2.el8_8.2.i686.rpm python3.11-debug-3.11.2-2.el8_8.2.i686.rpm python3.11-debug-3.11.2-2.el8_8.2.x86_64.rpm python3.11-debuginfo-3.11.2-2.el8_8.2.i686.rpm python3.11-debuginfo-3.11.2-2.el8_8.2.x86_64.rpm python3.11-debugsource-3.11.2-2.el8_8.2.i686.rpm python3.11-debugsource-3.11.2-2.el8_8.2.x86_64.rpm python3.11-idle-3.11.2-2.el8_8.2.i686.rpm python3.11-idle-3.11.2-2.el8_8.2.x86_64.rpm python3.11-test-3.11.2-2.el8_8.2.i686.rpm python3.11-test-3.11.2-2.el8_8.2.x86_64.rpm python3.11-tkinter-3.11.2-2.el8_8.2.i686.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2023-40217 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2023 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIcBAEBCAAGBQJlHtXQAAoJENzjgjWX9erEOhsP/ReoNfsCP0hmC7S3cjL6i8Lj Ts3DyJiC3CXlMxxNUFkh27nnqSIRvSXxb/dEu/D7+zDDw7cpecXUqNA5pvikTDcj iAGVhLygOLtqzYuEqtX1BxOydIsP4jEK8e3PTs/TzgNmIhBqwoOWk/q7MCe84m1+ DMoK38WHWmpIQAuQy+icogCy3PLqXuvCzeKcQPYEiyoBfT9a6xJ5EiCEGsJzSOkx G5GoSfnLniUsBpWsXvz6bW9eJxSAmZ5Sv2UY4m0aHbTkEv/Tc+VBlR+wQoOQBIcy HHoXmhDSh8OzJejzyyupP6JB6R7NqKfEg/LG7xuD6k3c4nBYAPcvcyl/fijSAmw4 qs8S4Waeee50T8cODB5PSwkSZwVhfCuF3o9OpciXRbWwO/4cGgM2p7vFfeH57cGT hbFkXGA/4B3kVZChLuFQH/TpBtDH2VDCDlo5ct9hszZSkU9HuXkClVxscUWVB6VK UkTxgKaK6tzuQwJaWq+xXif3jGULtDbqCbWVKPb/Omp4nFlMYDwJBaW5gLkzwAK/ DcD9uTOv1HosLlTT9aj6pbb70Bu5JMyEmSla7pzFCStbgh6EFIodhnF1i3GrNrZd RODlCuY3h5YXGpzMNxjTzFvkyWMbnlvpdDi8mzTIHi0z22Jd9BcNLNd27Q5HOraT 48GSuHvaS3JTTfyBwjlE =uuGk -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Oct 05, 2023
•Important
Red Hat
217
security advisorycritical updatesecurity patchOracle Linux 7 ELSA-2023-3555 Critical: Python Security Patch
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2023-3555 https://linux.oracle.com/errata/ELSA-2023-3555.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: python-2.7.5-93.0.1.el7_9.x86_64.rpm python-debug-2.7.5-93.0.1.el7_9.x86_64.rpm python-devel-2.7.5-93.0.1.el7_9.x86_64.rpm python-libs-2.7.5-93.0.1.el7_9.i686.rpm python-libs-2.7.5-93.0.1.el7_9.x86_64.rpm python-test-2.7.5-93.0.1.el7_9.x86_64.rpm python-tools-2.7.5-93.0.1.el7_9.x86_64.rpm tkinter-2.7.5-93.0.1.el7_9.x86_64.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates//python-2.7.5-93.0.1.el7_9.src.rpm Related CVEs: CVE-2023-24329 Description of changes: [2.7.5-93.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-93] - Fix for CVE-2023-24329 Resolves: rhbz#2173917 _______________________________________________ El-errata mailing list
Jun 22, 2023
•Critical
Oracle
202
security advisorynetwork threatopenSUSEopenSUSE 15.3: 2021:2817-1 Moderate: AWS-CLI Python CRLF Injection
An update that solves one vulnerability, contains two features and has 6 fixes is now available. . openSUSE Security Update: Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2021:2817-1 Rating: moderate References: #1102408 #1138715 #1138746 #1176389 #1177120 #1182421 #1182422 ECO-3352 PM-2485 Cross-References: CVE-2020-26137 CVSS scores: CVE-2020-26137 (NVD) : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2020-26137 (SUSE): 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N Affected Products: openSUSE Leap 15.3 ______________________________________________________________________________ An update that solves one vulnerability, contains two features and has 6 fixes is now available. Description: This patch updates the Python AWS SDK stack in SLE 15: General: # aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-boto3 - Version updated to upstream release 1.17.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-botocore - Version updated to upstream release 1.20.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-urllib3 - Version updated to upstream release 1.25.10 For a detailed list of all changes, please refer to the changelog file of this package. # python-service_identity - Added this new package to resolve runtime dependencies for other packages. Version: 18.1.0 # python-trustme - Added this new package to resolve runtime dependencies for other packages. Version: 0.6.0 Security fixes: # python-urllib3: - CVE-2020-26137:urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.3: zypper in -t patch openSUSE-SLE-15.3-2021-2817=1 Package List: - openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64): python-cffi-debuginfo-1.13.2-3.2.5 python-cffi-debugsource-1.13.2-3.2.5 python-cryptography-debuginfo-2.8-10.1 python-cryptography-debugsource-2.8-10.1 python2-cffi-1.13.2-3.2.5 python2-cffi-debuginfo-1.13.2-3.2.5 python2-cryptography-2.8-10.1 python2-cryptography-debuginfo-2.8-10.1 python3-cffi-1.13.2-3.2.5 python3-cffi-debuginfo-1.13.2-3.2.5 python3-cryptography-2.8-10.1 python3-cryptography-debuginfo-2.8-10.1 - openSUSE Leap 15.3 (noarch): aws-cli-1.19.9-26.1 python2-asn1crypto-0.24.0-3.2.1 python2-boto3-1.17.9-19.1 python2-botocore-1.20.9-33.1 python2-pyasn1-0.4.2-3.2.1 python2-pycparser-2.17-3.2.1 python2-urllib3-1.25.10-9.14.1 python3-asn1crypto-0.24.0-3.2.1 python3-boto3-1.17.9-19.1 python3-botocore-1.20.9-33.1 python3-pyasn1-0.4.2-3.2.1 python3-pycparser-2.17-3.2.1 References: https://www.suse.com/security/cve/CVE-2020-26137.html https://bugzilla.suse.com/1102408 https://bugzilla.suse.com/1138715 https://bugzilla.suse.com/1138746 https://bugzilla.suse.com/1176389 https://bugzilla.suse.com/1177120 https://bugzilla.suse.com/1182421 https://bugzilla.suse.com/1182422 . An important announcement for Fedora patching a significant SQL injection vulnerability in Ruby libraries, enhancing overall platform integrity.. openSUSE Update, PythonSecurity Fixes, AWS-CLI Patch. . LinuxSecurity.com Team
Aug 23, 2021
OpenSUSE
100
security advisorysecurity updateupdateSUSE: 2020:3597-1 Critical: Python Directory Traversal Risk
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:3597-1 Rating: important References: #1176262 Cross-References: CVE-2019-20916 Affected Products: SUSE Linux Enterprise Server for SAP 15 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Module for Python2 15-SP3 SUSE Linux Enterprise Module for Python2 15-SP2 SUSE Linux Enterprise Module for Python2 15-SP1 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 SUSE Linux Enterprise Module for Desktop Applications 15-SP2 SUSE Linux Enterprise Module for Desktop Applications 15-SP1 SUSE Linux Enterprise Module for Basesystem 15-SP3 SUSE Linux Enterprise Module for Basesystem 15-SP2 SUSE Linux Enterprise Module for Basesystem 15-SP1 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - Fixed a directory traversal in _download_http_url() (bsc#1176262 CVE-2019-20916) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 15: zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2020-3597=1 - SUSE Linux Enterprise Server 15-LTSS: zypper in -t patch SUSE-SLE-Product-SLES-15-2020-3597=1 - SUSE LinuxEnterprise Module for Python2 15-SP3: zypper in -t patch SUSE-SLE-Module-Python2-15-SP3-2020-3597=1 - SUSE Linux Enterprise Module for Python2 15-SP2: zypper in -t patch SUSE-SLE-Module-Python2-15-SP2-2020-3597=1 - SUSE Linux Enterprise Module for Python2 15-SP1: zypper in -t patch SUSE-SLE-Module-Python2-15-SP1-2020-3597=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP3-2020-3597=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP2: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP2-2020-3597=1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP1: zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP1-2020-3597=1 - SUSE Linux Enterprise Module for Basesystem 15-SP3: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2020-3597=1 - SUSE Linux Enterprise Module for Basesystem 15-SP2: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP2-2020-3597=1 - SUSE Linux Enterprise Module for Basesystem 15-SP1: zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP1-2020-3597=1 - SUSE Linux Enterprise High Performance Computing 15-LTSS: zypper in -t patch SUSE-SLE-Product-HPC-15-2020-3597=1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS: zypper in -t patch SUSE-SLE-Product-HPC-15-2020-3597=1 Package List: - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64): libpython2_7-1_0-2.7.17-7.47.1 libpython2_7-1_0-debuginfo-2.7.17-7.47.1 python-2.7.17-7.47.1 python-base-2.7.17-7.47.1 python-base-debuginfo-2.7.17-7.47.1 python-base-debugsource-2.7.17-7.47.1 python-curses-2.7.17-7.47.1 python-curses-debuginfo-2.7.17-7.47.1 python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 python-devel-2.7.17-7.47.1 python-gdbm-2.7.17-7.47.1 python-gdbm-debuginfo-2.7.17-7.47.1 python-xml-2.7.17-7.47.1 python-xml-debuginfo-2.7.17-7.47.1 - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x): libpython2_7-1_0-2.7.17-7.47.1 libpython2_7-1_0-debuginfo-2.7.17-7.47.1 python-2.7.17-7.47.1 python-base-2.7.17-7.47.1 python-base-debuginfo-2.7.17-7.47.1 python-base-debugsource-2.7.17-7.47.1 python-curses-2.7.17-7.47.1 python-curses-debuginfo-2.7.17-7.47.1 python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 python-devel-2.7.17-7.47.1 python-gdbm-2.7.17-7.47.1 python-gdbm-debuginfo-2.7.17-7.47.1 python-xml-2.7.17-7.47.1 python-xml-debuginfo-2.7.17-7.47.1 - SUSE Linux Enterprise Module for Python2 15-SP3 (aarch64 ppc64le s390x x86_64): python-base-debuginfo-2.7.17-7.47.1 python-base-debugsource-2.7.17-7.47.1 python-curses-2.7.17-7.47.1 python-curses-debuginfo-2.7.17-7.47.1 python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 python-devel-2.7.17-7.47.1 python-gdbm-2.7.17-7.47.1 python-gdbm-debuginfo-2.7.17-7.47.1 python-xml-2.7.17-7.47.1 python-xml-debuginfo-2.7.17-7.47.1 - SUSE Linux Enterprise Module for Python2 15-SP2 (aarch64 ppc64le s390x x86_64): python-base-debuginfo-2.7.17-7.47.1 python-base-debugsource-2.7.17-7.47.1 python-curses-2.7.17-7.47.1 python-curses-debuginfo-2.7.17-7.47.1 python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 python-devel-2.7.17-7.47.1 python-gdbm-2.7.17-7.47.1 python-gdbm-debuginfo-2.7.17-7.47.1 python-xml-2.7.17-7.47.1 python-xml-debuginfo-2.7.17-7.47.1 - SUSE Linux Enterprise Module for Python2 15-SP1 (aarch64 ppc64le s390x x86_64): python-base-debuginfo-2.7.17-7.47.1 python-base-debugsource-2.7.17-7.47.1 python-curses-2.7.17-7.47.1 python-curses-debuginfo-2.7.17-7.47.1 python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 python-devel-2.7.17-7.47.1 python-gdbm-2.7.17-7.47.1 python-gdbm-debuginfo-2.7.17-7.47.1 python-xml-2.7.17-7.47.1 python-xml-debuginfo-2.7.17-7.47.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (aarch64 ppc64le s390x x86_64): python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 python-tk-2.7.17-7.47.1 python-tk-debuginfo-2.7.17-7.47.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (aarch64 ppc64le s390x x86_64): python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 python-tk-2.7.17-7.47.1 python-tk-debuginfo-2.7.17-7.47.1 - SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (aarch64 ppc64le s390x x86_64): python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 python-tk-2.7.17-7.47.1 python-tk-debuginfo-2.7.17-7.47.1 - SUSE Linux Enterprise Module for Basesystem 15-SP3 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.17-7.47.1 libpython2_7-1_0-debuginfo-2.7.17-7.47.1 python-2.7.17-7.47.1 python-base-2.7.17-7.47.1 python-base-debuginfo-2.7.17-7.47.1 python-base-debugsource-2.7.17-7.47.1 python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 - SUSE Linux Enterprise Module for Basesystem 15-SP2 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.17-7.47.1 libpython2_7-1_0-debuginfo-2.7.17-7.47.1 python-2.7.17-7.47.1 python-base-2.7.17-7.47.1 python-base-debuginfo-2.7.17-7.47.1 python-base-debugsource-2.7.17-7.47.1 python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 - SUSE Linux Enterprise Module for Basesystem 15-SP1 (aarch64 ppc64le s390x x86_64): libpython2_7-1_0-2.7.17-7.47.1 libpython2_7-1_0-debuginfo-2.7.17-7.47.1 python-2.7.17-7.47.1 python-base-2.7.17-7.47.1 python-base-debuginfo-2.7.17-7.47.1 python-base-debugsource-2.7.17-7.47.1 python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64): libpython2_7-1_0-2.7.17-7.47.1 libpython2_7-1_0-debuginfo-2.7.17-7.47.1 python-2.7.17-7.47.1 python-base-2.7.17-7.47.1 python-base-debuginfo-2.7.17-7.47.1 python-base-debugsource-2.7.17-7.47.1 python-curses-2.7.17-7.47.1 python-curses-debuginfo-2.7.17-7.47.1 python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 python-devel-2.7.17-7.47.1 python-gdbm-2.7.17-7.47.1 python-gdbm-debuginfo-2.7.17-7.47.1 python-xml-2.7.17-7.47.1 python-xml-debuginfo-2.7.17-7.47.1 - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64): libpython2_7-1_0-2.7.17-7.47.1 libpython2_7-1_0-debuginfo-2.7.17-7.47.1 python-2.7.17-7.47.1 python-base-2.7.17-7.47.1 python-base-debuginfo-2.7.17-7.47.1 python-base-debugsource-2.7.17-7.47.1 python-curses-2.7.17-7.47.1 python-curses-debuginfo-2.7.17-7.47.1 python-debuginfo-2.7.17-7.47.1 python-debugsource-2.7.17-7.47.1 python-devel-2.7.17-7.47.1 python-gdbm-2.7.17-7.47.1 python-gdbm-debuginfo-2.7.17-7.47.1 python-xml-2.7.17-7.47.1 python-xml-debuginfo-2.7.17-7.47.1 References: https://www.suse.com/security/cve/CVE-2019-20916.html https://bugzilla.suse.com/1176262 . SUSE Security Update: Security update for python ___________________________________________________. update, security, fixes, vulnerability. . Severity: Important. LinuxSecurity.com Team
Dec 02, 2020
•Important
SuSE
98
security advisorysoftware updatebug fixRedHat RHSA-2019:3725 Moderate: rh-python36-python Security Fix
An update for rh-python36-python is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which . -----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: rh-python36-python security, bug fix, and enhancement update Advisory ID: RHSA-2019:3725-01 Product: Red Hat Software Collections Advisory URL: https://access.redhat.com/errata/RHSA-2019:3725 Issue date: 2019-11-06 CVE Names: CVE-2018-1060 CVE-2018-1061 CVE-2018-14647 CVE-2018-20406 CVE-2018-20852 CVE-2019-5010 CVE-2019-9740 CVE-2019-9947 CVE-2019-16056 ==================================================================== 1. Summary: An update for rh-python36-python is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - aarch64, ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3.Description: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. The following packages have been upgraded to a later upstream version: rh-python36-python (3.6.9). (BZ#1709344) Security Fix(es): * python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib (CVE-2018-1061) * python: Missing salt initialization in _elementtree.c module (CVE-2018-14647) * python: Cookie domain check returns incorrect results (CVE-2018-20852) * python: NULL pointer dereference using a specially crafted X509 certificate (CVE-2019-5010) * python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740) * python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947) * python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056) * python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib (CVE-2018-1060) * python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data (CVE-2018-20406) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Bug Fix(es): * urlsplit doesn't accept a NFKD hostname with a port number (BZ#1709340) * rh-python36 cannot unpickle datetime.date objects (BZ#1749103) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1549191 - CVE-2018-1060 python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib 1549192 - CVE-2018-1061 python:DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib 1631822 - CVE-2018-14647 python: Missing salt initialization in _elementtree.c module 1664509 - CVE-2018-20406 python: Integer overflow in Modules/_pickle.c allows for memory exhaustion if serializing gigabytes of data 1666519 - CVE-2019-5010 python: NULL pointer dereference using a specially crafted X509 certificate 1688169 - CVE-2019-9740 python: CRLF injection via the query part of the url passed to urlopen() 1695572 - CVE-2019-9947 python: CRLF injection via the path part of the url passed to urlopen() 1709344 - Update Python 3 to 3.6.9 [rhscl-3.3.z] 1740347 - CVE-2018-20852 python: Cookie domain check returns incorrect results 1749103 - rh-python36 cannot unpickle datetime.date objects [rhscl-3.3.z] 1749839 - CVE-2019-16056 python: email.utils.parseaddr wrongly parses email addresses 6. Package List: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6): Source: rh-python36-python-3.6.9-2.el6.src.rpm x86_64: rh-python36-python-3.6.9-2.el6.x86_64.rpm rh-python36-python-debug-3.6.9-2.el6.x86_64.rpm rh-python36-python-debuginfo-3.6.9-2.el6.x86_64.rpm rh-python36-python-devel-3.6.9-2.el6.x86_64.rpm rh-python36-python-libs-3.6.9-2.el6.x86_64.rpm rh-python36-python-test-3.6.9-2.el6.x86_64.rpm rh-python36-python-tkinter-3.6.9-2.el6.x86_64.rpm rh-python36-python-tools-3.6.9-2.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6): Source: rh-python36-python-3.6.9-2.el6.src.rpm x86_64: rh-python36-python-3.6.9-2.el6.x86_64.rpm rh-python36-python-debug-3.6.9-2.el6.x86_64.rpm rh-python36-python-debuginfo-3.6.9-2.el6.x86_64.rpm rh-python36-python-devel-3.6.9-2.el6.x86_64.rpm rh-python36-python-libs-3.6.9-2.el6.x86_64.rpm rh-python36-python-test-3.6.9-2.el6.x86_64.rpm rh-python36-python-tkinter-3.6.9-2.el6.x86_64.rpm rh-python36-python-tools-3.6.9-2.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server (v.7): Source: rh-python36-python-3.6.9-2.el7.src.rpm aarch64: rh-python36-python-3.6.9-2.el7.aarch64.rpm rh-python36-python-debug-3.6.9-2.el7.aarch64.rpm rh-python36-python-debuginfo-3.6.9-2.el7.aarch64.rpm rh-python36-python-devel-3.6.9-2.el7.aarch64.rpm rh-python36-python-libs-3.6.9-2.el7.aarch64.rpm rh-python36-python-test-3.6.9-2.el7.aarch64.rpm rh-python36-python-tkinter-3.6.9-2.el7.aarch64.rpm rh-python36-python-tools-3.6.9-2.el7.aarch64.rpm ppc64le: rh-python36-python-3.6.9-2.el7.ppc64le.rpm rh-python36-python-debug-3.6.9-2.el7.ppc64le.rpm rh-python36-python-debuginfo-3.6.9-2.el7.ppc64le.rpm rh-python36-python-devel-3.6.9-2.el7.ppc64le.rpm rh-python36-python-libs-3.6.9-2.el7.ppc64le.rpm rh-python36-python-test-3.6.9-2.el7.ppc64le.rpm rh-python36-python-tkinter-3.6.9-2.el7.ppc64le.rpm rh-python36-python-tools-3.6.9-2.el7.ppc64le.rpm s390x: rh-python36-python-3.6.9-2.el7.s390x.rpm rh-python36-python-debug-3.6.9-2.el7.s390x.rpm rh-python36-python-debuginfo-3.6.9-2.el7.s390x.rpm rh-python36-python-devel-3.6.9-2.el7.s390x.rpm rh-python36-python-libs-3.6.9-2.el7.s390x.rpm rh-python36-python-test-3.6.9-2.el7.s390x.rpm rh-python36-python-tkinter-3.6.9-2.el7.s390x.rpm rh-python36-python-tools-3.6.9-2.el7.s390x.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server (v.7): Source: rh-python36-python-3.6.9-2.el7.src.rpm aarch64: rh-python36-python-3.6.9-2.el7.aarch64.rpm rh-python36-python-debug-3.6.9-2.el7.aarch64.rpm rh-python36-python-debuginfo-3.6.9-2.el7.aarch64.rpm rh-python36-python-devel-3.6.9-2.el7.aarch64.rpm rh-python36-python-libs-3.6.9-2.el7.aarch64.rpm rh-python36-python-test-3.6.9-2.el7.aarch64.rpm rh-python36-python-tkinter-3.6.9-2.el7.aarch64.rpm rh-python36-python-tools-3.6.9-2.el7.aarch64.rpm ppc64le: rh-python36-python-3.6.9-2.el7.ppc64le.rpm rh-python36-python-debug-3.6.9-2.el7.ppc64le.rpm rh-python36-python-debuginfo-3.6.9-2.el7.ppc64le.rpm rh-python36-python-devel-3.6.9-2.el7.ppc64le.rpm rh-python36-python-libs-3.6.9-2.el7.ppc64le.rpm rh-python36-python-test-3.6.9-2.el7.ppc64le.rpm rh-python36-python-tkinter-3.6.9-2.el7.ppc64le.rpm rh-python36-python-tools-3.6.9-2.el7.ppc64le.rpm s390x: rh-python36-python-3.6.9-2.el7.s390x.rpm rh-python36-python-debug-3.6.9-2.el7.s390x.rpm rh-python36-python-debuginfo-3.6.9-2.el7.s390x.rpm rh-python36-python-devel-3.6.9-2.el7.s390x.rpm rh-python36-python-libs-3.6.9-2.el7.s390x.rpm rh-python36-python-test-3.6.9-2.el7.s390x.rpm rh-python36-python-tkinter-3.6.9-2.el7.s390x.rpm rh-python36-python-tools-3.6.9-2.el7.s390x.rpm x86_64: rh-python36-python-3.6.9-2.el7.x86_64.rpm rh-python36-python-debug-3.6.9-2.el7.x86_64.rpm rh-python36-python-debuginfo-3.6.9-2.el7.x86_64.rpm rh-python36-python-devel-3.6.9-2.el7.x86_64.rpm rh-python36-python-libs-3.6.9-2.el7.x86_64.rpm rh-python36-python-test-3.6.9-2.el7.x86_64.rpm rh-python36-python-tkinter-3.6.9-2.el7.x86_64.rpm rh-python36-python-tools-3.6.9-2.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v.7.5): Source: rh-python36-python-3.6.9-2.el7.src.rpm ppc64le: rh-python36-python-3.6.9-2.el7.ppc64le.rpm rh-python36-python-debug-3.6.9-2.el7.ppc64le.rpm rh-python36-python-debuginfo-3.6.9-2.el7.ppc64le.rpm rh-python36-python-devel-3.6.9-2.el7.ppc64le.rpm rh-python36-python-libs-3.6.9-2.el7.ppc64le.rpm rh-python36-python-test-3.6.9-2.el7.ppc64le.rpm rh-python36-python-tkinter-3.6.9-2.el7.ppc64le.rpm rh-python36-python-tools-3.6.9-2.el7.ppc64le.rpm s390x: rh-python36-python-3.6.9-2.el7.s390x.rpm rh-python36-python-debug-3.6.9-2.el7.s390x.rpm rh-python36-python-debuginfo-3.6.9-2.el7.s390x.rpm rh-python36-python-devel-3.6.9-2.el7.s390x.rpm rh-python36-python-libs-3.6.9-2.el7.s390x.rpm rh-python36-python-test-3.6.9-2.el7.s390x.rpm rh-python36-python-tkinter-3.6.9-2.el7.s390x.rpm rh-python36-python-tools-3.6.9-2.el7.s390x.rpm x86_64: rh-python36-python-3.6.9-2.el7.x86_64.rpm rh-python36-python-debug-3.6.9-2.el7.x86_64.rpm rh-python36-python-debuginfo-3.6.9-2.el7.x86_64.rpm rh-python36-python-devel-3.6.9-2.el7.x86_64.rpm rh-python36-python-libs-3.6.9-2.el7.x86_64.rpm rh-python36-python-test-3.6.9-2.el7.x86_64.rpm rh-python36-python-tkinter-3.6.9-2.el7.x86_64.rpm rh-python36-python-tools-3.6.9-2.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v.7.6): Source: rh-python36-python-3.6.9-2.el7.src.rpm ppc64le: rh-python36-python-3.6.9-2.el7.ppc64le.rpm rh-python36-python-debug-3.6.9-2.el7.ppc64le.rpm rh-python36-python-debuginfo-3.6.9-2.el7.ppc64le.rpm rh-python36-python-devel-3.6.9-2.el7.ppc64le.rpm rh-python36-python-libs-3.6.9-2.el7.ppc64le.rpm rh-python36-python-test-3.6.9-2.el7.ppc64le.rpm rh-python36-python-tkinter-3.6.9-2.el7.ppc64le.rpm rh-python36-python-tools-3.6.9-2.el7.ppc64le.rpm s390x: rh-python36-python-3.6.9-2.el7.s390x.rpm rh-python36-python-debug-3.6.9-2.el7.s390x.rpm rh-python36-python-debuginfo-3.6.9-2.el7.s390x.rpm rh-python36-python-devel-3.6.9-2.el7.s390x.rpm rh-python36-python-libs-3.6.9-2.el7.s390x.rpm rh-python36-python-test-3.6.9-2.el7.s390x.rpm rh-python36-python-tkinter-3.6.9-2.el7.s390x.rpm rh-python36-python-tools-3.6.9-2.el7.s390x.rpm x86_64: rh-python36-python-3.6.9-2.el7.x86_64.rpm rh-python36-python-debug-3.6.9-2.el7.x86_64.rpm rh-python36-python-debuginfo-3.6.9-2.el7.x86_64.rpm rh-python36-python-devel-3.6.9-2.el7.x86_64.rpm rh-python36-python-libs-3.6.9-2.el7.x86_64.rpm rh-python36-python-test-3.6.9-2.el7.x86_64.rpm rh-python36-python-tkinter-3.6.9-2.el7.x86_64.rpm rh-python36-python-tools-3.6.9-2.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v.7.7): Source: rh-python36-python-3.6.9-2.el7.src.rpm ppc64le: rh-python36-python-3.6.9-2.el7.ppc64le.rpm rh-python36-python-debug-3.6.9-2.el7.ppc64le.rpm rh-python36-python-debuginfo-3.6.9-2.el7.ppc64le.rpm rh-python36-python-devel-3.6.9-2.el7.ppc64le.rpm rh-python36-python-libs-3.6.9-2.el7.ppc64le.rpm rh-python36-python-test-3.6.9-2.el7.ppc64le.rpm rh-python36-python-tkinter-3.6.9-2.el7.ppc64le.rpm rh-python36-python-tools-3.6.9-2.el7.ppc64le.rpm s390x: rh-python36-python-3.6.9-2.el7.s390x.rpm rh-python36-python-debug-3.6.9-2.el7.s390x.rpm rh-python36-python-debuginfo-3.6.9-2.el7.s390x.rpm rh-python36-python-devel-3.6.9-2.el7.s390x.rpm rh-python36-python-libs-3.6.9-2.el7.s390x.rpm rh-python36-python-test-3.6.9-2.el7.s390x.rpm rh-python36-python-tkinter-3.6.9-2.el7.s390x.rpm rh-python36-python-tools-3.6.9-2.el7.s390x.rpm x86_64: rh-python36-python-3.6.9-2.el7.x86_64.rpm rh-python36-python-debug-3.6.9-2.el7.x86_64.rpm rh-python36-python-debuginfo-3.6.9-2.el7.x86_64.rpm rh-python36-python-devel-3.6.9-2.el7.x86_64.rpm rh-python36-python-libs-3.6.9-2.el7.x86_64.rpm rh-python36-python-test-3.6.9-2.el7.x86_64.rpm rh-python36-python-tkinter-3.6.9-2.el7.x86_64.rpm rh-python36-python-tools-3.6.9-2.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7): Source: rh-python36-python-3.6.9-2.el7.src.rpm x86_64: rh-python36-python-3.6.9-2.el7.x86_64.rpm rh-python36-python-debug-3.6.9-2.el7.x86_64.rpm rh-python36-python-debuginfo-3.6.9-2.el7.x86_64.rpm rh-python36-python-devel-3.6.9-2.el7.x86_64.rpm rh-python36-python-libs-3.6.9-2.el7.x86_64.rpm rh-python36-python-test-3.6.9-2.el7.x86_64.rpm rh-python36-python-tkinter-3.6.9-2.el7.x86_64.rpm rh-python36-python-tools-3.6.9-2.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7.References: https://access.redhat.com/security/cve/CVE-2018-1060 https://access.redhat.com/security/cve/CVE-2018-1061 https://access.redhat.com/security/cve/CVE-2018-14647 https://access.redhat.com/security/cve/CVE-2018-20406 https://access.redhat.com/security/cve/CVE-2018-20852 https://access.redhat.com/security/cve/CVE-2019-5010 https://access.redhat.com/security/cve/CVE-2019-9740 https://access.redhat.com/security/cve/CVE-2019-9947 https://access.redhat.com/security/cve/CVE-2019-16056 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE-----Version: GnuPG v1 iQIVAwUBXcKWX9zjgjWX9erEAQioQQ/6AwBwW53gzHmUrKfKW2YJGw8BaUfeMNyM tsHW85O9KnWTLbZ081r3HmdLdEhdlguTf+st+JTTuoJkkJ8EyhbR22dyMxMpvbWQ l+1EdLL3PYSbe93Ne/W/lsQCL5Z25vs3TSoqyPl5otAatIRB2UR09/XWq/2uI66p pd9CUz7gjqEKQQ76MlMfnGyzpPriKsjmIvHxgMWth7ut+QnggPhGguaITyX9ZWz7 3d6bnyMXqXB7QUQwCNkiuGiS8zIx4X4gaQNAMHl8mJj/fZiC3o5Q99EumiB37N/O eKf7ALWJgHfe2NXUhSRPU85khdSK5BCPp9M8z/u+KYvY1AqpOkuveQF9V0/hgi8o fHyEDXiOjZ5D14ij/DwJYjO9i9V3n5n7ok1TYCB4uts31E1zMALRRW0Ui24YZIPW OD0hpl3D5VkJDwBs9weCuSuM3RGcDQThM9Uwxry5mG3kw7fbPaJh3tntApIuMQpG NroMfcRbf0pHB6XZSdauK4bUEboJVA2LO9WGtRZA4svxLr9VU+eHvfX8DvYleJGD SnA0PJTpSezFf2zUFnDAz2e+K8JoiRzE+qqEqAdqnw3TUIa1pVdesyBk41EZdkFa t5lJMj2TIu3ivzk/cs+yNctiMakSGiUxge9JPpG8fw42crGydIGuQE66jtyV8BfM Rys+SEBMtCs=IpfW -----END PGP SIGNATURE-------RHSA-announce mailing list
Nov 06, 2019
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!