Summary
[3.6.8-56.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]
[3.6.8.openela.0]
- Add openela to supported dists
[3.6.8-56]
- Security fix for CVE-2023-40217
Resolves: RHEL-3041
[3.6.8-55]
- Fix symlink handling in the fix for CVE-2007-4559
Resolves: rhbz#263261
[3.6.8-54]
- Bump release for rebuild
Resolves: rhbz#2173917
[3.6.8-53]
- Security fix for CVE-2023-24329
Resolves: rhbz#2173917
[3.6.8-52]
- Add filters for tarfile extraction (CVE-2007-4559, PEP-706)
Resolves: rhbz#263261
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | platform-python | 0:3.6.8-56.0.1.el8_9 |
| Oracle Linux · 8 | platform-python-debug | 0:3.6.8-56.0.1.el8_9 |
| Oracle Linux · 8 | platform-python-devel | 0:3.6.8-56.0.1.el8_9 |
| Oracle Linux · 8 | python3-idle | 0:3.6.8-56.0.1.el8_9 |
| Oracle Linux · 8 | python3-libs | 0:3.6.8-56.0.1.el8_9 |
| Oracle Linux · 8 | python3-test | 0:3.6.8-56.0.1.el8_9 |
| Oracle Linux · 8 | python3-tkinter | 0:3.6.8-56.0.1.el8_9 |
Vulnerabilities 1
-
Critical 9.8
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allow…