Summary
[3.6.8-31.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]
[3.6.8-31]
- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926
[3.6.8-30]
- Remove downstream 00178-dont-duplicate-flags-in-sysconfig.patch which
introduced a bug on distutils.sysconfig.get_config_var('LIBPL')
(rhbz#1851090).
[3.6.8-29]
- Fix python3-config --configdir (rhbz#1772992).
[3.6.8-28]
- Security fix for CVE-2020-8492
Resolves: rhbz#1810618
[3.6.8-27]
- Add a sentinel value on the Hmac_members table of the fips compliant hmac module
Resolves: rhbz#1800512
[3.6.8-26]
- Skip test_startup_imports from test_site if we have a .pth file in sys.path
Resolves: rhbz#1814392
[3.6.8-25]
- Security fix for CVE-2019-16935
Resolves: rhbz#1798001
[3.6.8-24]
- Build Python with -fno-semantic-interposition for better performance
- https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup
- Also fix test_gdb failures with Link Time Optimizations
Resolves: rhbz#1724996
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | platform-python | 0:3.6.8-31.0.1.el8 |
| Oracle Linux · 8 | platform-python-debug | 0:3.6.8-31.0.1.el8 |
| Oracle Linux · 8 | platform-python-devel | 0:3.6.8-31.0.1.el8 |
| Oracle Linux · 8 | python3-idle | 0:3.6.8-31.0.1.el8 |
| Oracle Linux · 8 | python3-libs | 0:3.6.8-31.0.1.el8 |
| Oracle Linux · 8 | python3-test | 0:3.6.8-31.0.1.el8 |
| Oracle Linux · 8 | python3-tkinter | 0:3.6.8-31.0.1.el8 |
Vulnerabilities 4
-
Medium 6.5
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HT…
-
Medium 6.1
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the s…
-
Medium 5.5
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when …
-
Unscored —CVE-2020-14422 EPSS 13%
Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes…