Summary
[3.6.8-69.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]
[3.6.8.openela.0]
- Add openela to supported dists
[3.6.8-69]
- Security fix for CVE-2024-11168
Resolves: RHEL-67252
[3.6.8-68]
- Security fix for CVE-2024-9287
Resolves: RHEL-64878
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | platform-python | 0:3.6.8-69.0.1.el8_10 |
| Oracle Linux · 8 | platform-python-debug | 0:3.6.8-69.0.1.el8_10 |
| Oracle Linux · 8 | platform-python-devel | 0:3.6.8-69.0.1.el8_10 |
| Oracle Linux · 8 | python3-idle | 0:3.6.8-69.0.1.el8_10 |
| Oracle Linux · 8 | python3-libs | 0:3.6.8-69.0.1.el8_10 |
| Oracle Linux · 8 | python3-test | 0:3.6.8-69.0.1.el8_10 |
| Oracle Linux · 8 | python3-tkinter | 0:3.6.8-69.0.1.el8_10 |
Vulnerabilities 2
-
Medium 6.3
Improper validation of IPv6 and IPvFuture addresses
The urllib.parse.urlsplit() and urlparse() functions improperly validated bracketed hosts (`[]`), allowing hosts that weren't IPv6 or IPvFuture. This behavior was not conformant to RFC 3986 and potentially enabled SSRF if a URL is processed by more than one U…
-
Medium 5.3
Virtual environment (venv) activation scripts don't quote paths
A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment "activation" scripts (ie "source venv/…