[CLSA-2024:1727288754] python3: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2024-09-25 18:25:58 UTC
Description:
- CVE-2024-6232: remove backtracking when parsing tarfile headers - CVE-2024-7592: fix quadratic complexity in parsing "-quoted cookie values with backslashes
Updated packages:
  • python3-3.6.8-21.el7_9.tuxcare.els4.i686.rpm
    sha:d9f3514d1f14a8f8295c5c62bc993b04f075bb0d14f2df89a439a1c3a290e056
  • python3-3.6.8-21.el7_9.tuxcare.els4.x86_64.rpm
    sha:ce095b2015cb3e640ac39bed024c238d7275a121827cf8435cc30e2bf474657b
  • python3-debug-3.6.8-21.el7_9.tuxcare.els4.i686.rpm
    sha:3eb26cae3d9be6bbdcd0f156451af86dab62cfac7af4c2323aa9128f302e3856
  • python3-debug-3.6.8-21.el7_9.tuxcare.els4.x86_64.rpm
    sha:a98c201dde286576dcef621f505ca2aa9728f48b8aa0f480092e6516b0d6706b
  • python3-devel-3.6.8-21.el7_9.tuxcare.els4.i686.rpm
    sha:ee2c7bf6b0bc6dfedea19051f1e4d0afe36c1d4e8e9faa38273697ee527f0ec0
  • python3-devel-3.6.8-21.el7_9.tuxcare.els4.x86_64.rpm
    sha:30437077d68a980a66ff7d220ebb37ae1947fff92dd6ba10945af0b67411c969
  • python3-idle-3.6.8-21.el7_9.tuxcare.els4.i686.rpm
    sha:efc5c2ee9a1f371513346cc5c2c0be8d3a4c27ec143b4f679a93c826ae16cdcd
  • python3-idle-3.6.8-21.el7_9.tuxcare.els4.x86_64.rpm
    sha:80848acf7fe94c1850ee7f7c89e7170b8a641c85a8e670f68b89bfbbda9e700a
  • python3-libs-3.6.8-21.el7_9.tuxcare.els4.i686.rpm
    sha:2a613009bf395c71460c824b923ab5350bfb82f9c08ebd07c6944bde8db12280
  • python3-libs-3.6.8-21.el7_9.tuxcare.els4.x86_64.rpm
    sha:c4eb600f1828e0d7960082b54e54dd1311dc21f1f2a7bf1b1a069ac1bff2777a
  • python3-test-3.6.8-21.el7_9.tuxcare.els4.i686.rpm
    sha:c0f42492344ed9f81c8df3ce64f47d5d39d3f92c69e54b8f055ed6853958f759
  • python3-test-3.6.8-21.el7_9.tuxcare.els4.x86_64.rpm
    sha:2e4847586d15580ec498fb19e2202b5328cfc2e84ce1c8db66ed04db5202f6ec
  • python3-tkinter-3.6.8-21.el7_9.tuxcare.els4.i686.rpm
    sha:01f6533ecc4f958b170e0109858a06d7ea034aa4a4624aecb1a1061a84204901
  • python3-tkinter-3.6.8-21.el7_9.tuxcare.els4.x86_64.rpm
    sha:45f3f3ea62def8ce2fe70dffde577506ff3d30eeb1c08598edf6ea2c5af958af
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.