Medium ELSA-2022-8353 2 CVEs

Moderate: python3.9 security, bug fix, and enhancement update (Oracle Linux 9)

Published Nov 22, 2022 · Updated Nov 22, 2022

Ecosystem: Oracle Linux

Summary

[3.9.14-1]
- Update to 3.9.14
- Security fixes for CVE-2020-10735 and CVE-2021-28861
Resolves: rhbz#2120642, rhbz#1834423, rhbz#2128249

[3.9.13-3]
- Fix test_get_ciphers in test_ssl.py for FIPS mode
Resolves: rhbz#2058233

[3.9.13-2]
- Security fix for CVE-2015-20107
Resolves: rhbz#2075390

[3.9.13-1]
- Update to 3.9.13
Resolves: rhbz#2054702, rhbz#2059951

Fixed packages 8

Release	Package	Fixed in
Oracle Linux · 9	python-unversioned-command	0:3.9.14-1.el9
Oracle Linux · 9	python3	0:3.9.14-1.el9
Oracle Linux · 9	python3-debug	0:3.9.14-1.el9
Oracle Linux · 9	python3-devel	0:3.9.14-1.el9
Oracle Linux · 9	python3-idle	0:3.9.14-1.el9
Oracle Linux · 9	python3-libs	0:3.9.14-1.el9
Oracle Linux · 9	python3-test	0:3.9.14-1.el9
Oracle Linux · 9	python3-tkinter	0:3.9.14-1.el9

Vulnerabilities 2

High 7.8

CVE-2015-20107 Public exploit

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine

Apr 13, 2022
Medium 6.5

CVE-2021-28861

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multip…

python3.5 python3.9 python3 python3.10 Debian Ubuntu Azure Linux

Aug 23, 2022