[CLSA-2024:1717693112] python3: Fix of 3 CVEs
Type:
security
Severity:
Moderate
Release date:
2024-06-06 16:58:35 UTC
Description:
- Remove -b option, use original maintainer approach - Fix expat regression tests for xml_etree - CVE-2022-48564: Improve validation of Plist files that prevent DoS - CVE-2023-40217: Fix TLS handshake bypass - CVE-2023-27043: reject malformed addresses in email.parseaddr()
Updated packages:
  • platform-python-3.6.8-40.el8_4.tuxcare.els5.i686.rpm
    sha:64ca2c7c93d7b3f8240901f49e07871cc17bfde1
  • platform-python-3.6.8-40.el8_4.tuxcare.els5.x86_64.rpm
    sha:367985e4b2be1a199c0af2965aaa394209ccc8dd
  • platform-python-debug-3.6.8-40.el8_4.tuxcare.els5.i686.rpm
    sha:818c83f3c4de44fbd5d04147c34f4e54f04651a9
  • platform-python-debug-3.6.8-40.el8_4.tuxcare.els5.x86_64.rpm
    sha:2a477dce7feb316a1210083c69586e89f7b0431e
  • platform-python-devel-3.6.8-40.el8_4.tuxcare.els5.i686.rpm
    sha:fa2962719ed7edfea805a62c96fa4c5cde4a6059
  • platform-python-devel-3.6.8-40.el8_4.tuxcare.els5.x86_64.rpm
    sha:616badefaf19083d0daba8f46332dfc8b490b01e
  • python3-devel-3.6.8-40.el8_4.tuxcare.els5.x86_64.rpm
    sha:e32bcbb036737493fab60c97fc6d5a26a36343ad
  • python3-idle-3.6.8-40.el8_4.tuxcare.els5.i686.rpm
    sha:41ef7ef012a3cedecd234f2f6627aa0ebbccf744
  • python3-idle-3.6.8-40.el8_4.tuxcare.els5.x86_64.rpm
    sha:cd7313a09faf71654f7e11ac094ca82dd3f6bb28
  • python3-libs-3.6.8-40.el8_4.tuxcare.els5.i686.rpm
    sha:c25e3a2fb56e3b83bbebc2bbca724b2794816cd3
  • python3-libs-3.6.8-40.el8_4.tuxcare.els5.x86_64.rpm
    sha:2aaebcda30e7972ac527e1fbd7b479c97f6ea602
  • python3-test-3.6.8-40.el8_4.tuxcare.els5.i686.rpm
    sha:540dfbcd12b019d7a428cd62cdb77f4b5c888c9c
  • python3-test-3.6.8-40.el8_4.tuxcare.els5.x86_64.rpm
    sha:bb420225a9f600e3a575c3940b84fd1c4713b684
  • python3-tkinter-3.6.8-40.el8_4.tuxcare.els5.i686.rpm
    sha:6dd6a6c8eff94f905de1ffa9f18d010118d77f8b
  • python3-tkinter-3.6.8-40.el8_4.tuxcare.els5.x86_64.rpm
    sha:30881f4b03ab50e5c86e9882d189bb575588ca12
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.