Summary
[2.7.5-90.0.1]
- Add Oracle Linux distribution in platform.py [orabug 20812544]
[2.7.5-90]
- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | python | 0:2.7.5-90.0.1.el7 |
| Oracle Linux · 7 | python-debug | 0:2.7.5-90.0.1.el7 |
| Oracle Linux · 7 | python-devel | 0:2.7.5-90.0.1.el7 |
| Oracle Linux · 7 | python-libs | 0:2.7.5-90.0.1.el7 |
| Oracle Linux · 7 | python-test | 0:2.7.5-90.0.1.el7 |
| Oracle Linux · 7 | python-tools | 0:2.7.5-90.0.1.el7 |
| Oracle Linux · 7 | tkinter | 0:2.7.5-90.0.1.el7 |
Vulnerabilities 1
-
Medium 5.5
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when …