Summary
[3.6.8-18.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]
[3.6.8-18]
- Avoid infinite loop when reading specially crafted TAR files (CVE-2019-20907)
Resolves: rhbz#1856481
- Resolve hash collisions for Pv4Interface and IPv6Interface (CVE-2020-14422)
Resolves: rhbz#1854926
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | python3 | 0:3.6.8-18.0.1.el7 |
| Oracle Linux · 7 | python3-debug | 0:3.6.8-18.0.1.el7 |
| Oracle Linux · 7 | python3-devel | 0:3.6.8-18.0.1.el7 |
| Oracle Linux · 7 | python3-idle | 0:3.6.8-18.0.1.el7 |
| Oracle Linux · 7 | python3-libs | 0:3.6.8-18.0.1.el7 |
| Oracle Linux · 7 | python3-test | 0:3.6.8-18.0.1.el7 |
| Oracle Linux · 7 | python3-tkinter | 0:3.6.8-18.0.1.el7 |
Vulnerabilities 2
-
Medium 5.5
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when …
-
Unscored —CVE-2020-14422 EPSS 13%
Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes…