Summary
[3.9.18-1]
- Update to 3.9.18
- Security fix for CVE-2023-40217
Resolves: RHEL-3043
[3.9.17-2]
- Fix symlink handling in the fix for CVE-2023-24329
Resolves: rhbz#263261
[3.9.17-1]
- Update to 3.9.17
- Security fix for CVE-2023-24329
Resolves: rhbz#2173917
[3.9.16-2]
- Add filters for tarfile extraction (CVE-2007-4559, PEP-706)
Resolves: rhbz#263261
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python-unversioned-command | 0:3.9.18-1.el9_3 |
| Oracle Linux · 9 | python3 | 0:3.9.18-1.el9_3 |
| Oracle Linux · 9 | python3-debug | 0:3.9.18-1.el9_3 |
| Oracle Linux · 9 | python3-devel | 0:3.9.18-1.el9_3 |
| Oracle Linux · 9 | python3-idle | 0:3.9.18-1.el9_3 |
| Oracle Linux · 9 | python3-libs | 0:3.9.18-1.el9_3 |
| Oracle Linux · 9 | python3-test | 0:3.9.18-1.el9_3 |
| Oracle Linux · 9 | python3-tkinter | 0:3.9.18-1.el9_3 |
Vulnerabilities 1
-
Critical 9.8
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…