Summary
[3.11.5-1]
- Rebase to 3.11.5
- Security fixes for CVE-2023-40217 and CVE-2023-41105
Resolves: RHEL-3047, RHEL-3267
[3.11.4-4]
- Add the import_all_modules_py3_11.py file for the python3.11-rpm-macros subpackage
Resolves: rhbz#2207631
[3.11.4-3]
- Fix symlink handling in the fix for CVE-2023-24329
Resolves: rhbz#263261
[3.11.4-2]
- Security fix for CVE-2007-4559
Resolves: rhbz#263261
[3.11.4-1]
- Update to 3.11.4
- Security fix for CVE-2023-24329
Resolves: rhbz#2173917
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3.11 | 0:3.11.5-1.el8_9 |
| Oracle Linux · 8 | python3.11-debug | 0:3.11.5-1.el8_9 |
| Oracle Linux · 8 | python3.11-devel | 0:3.11.5-1.el8_9 |
| Oracle Linux · 8 | python3.11-idle | 0:3.11.5-1.el8_9 |
| Oracle Linux · 8 | python3.11-libs | 0:3.11.5-1.el8_9 |
| Oracle Linux · 8 | python3.11-rpm-macros | 0:3.11.5-1.el8_9 |
| Oracle Linux · 8 | python3.11-test | 0:3.11.5-1.el8_9 |
| Oracle Linux · 8 | python3.11-tkinter | 0:3.11.5-1.el8_9 |
Vulnerabilities 2
-
Critical 9.8
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…
-
Unscored —
An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(),…