Medium ELSA-2023-0833 3 CVEs

Moderate: python3 security update (Oracle Linux 8)

Published Feb 22, 2023 · Updated Feb 22, 2023

Ecosystem: Oracle Linux

Summary

[3.6.8-48.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]

[3.6.8-48.1]
- Security fixes for CVE-2020-10735, CVE-2021-28861 and CVE-2022-45061
Resolves: rhbz#1834423, rhbz#2120642, rhbz#2144072

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 8	platform-python	0:3.6.8-48.0.1.el8_7.1
Oracle Linux · 8	platform-python-debug	0:3.6.8-48.0.1.el8_7.1
Oracle Linux · 8	platform-python-devel	0:3.6.8-48.0.1.el8_7.1
Oracle Linux · 8	python3-idle	0:3.6.8-48.0.1.el8_7.1
Oracle Linux · 8	python3-libs	0:3.6.8-48.0.1.el8_7.1
Oracle Linux · 8	python3-test	0:3.6.8-48.0.1.el8_7.1
Oracle Linux · 8	python3-tkinter	0:3.6.8-48.0.1.el8_7.1

Vulnerabilities 3

High 7.5

CVE-2022-45061

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing …

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine

Nov 9, 2022
Medium 6.5

CVE-2021-28861

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multip…

python3.5 python3.9 python3 python3.10 Debian Ubuntu Azure Linux

Aug 23, 2022
Medium 6.2

CVE-2020-10735

A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text")…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Wolfi

Sep 9, 2022