Summary
[3.12.1-4.3]
- Security fix for CVE-2024-8088
Resolves: RHEL-55964
[3.12.1-4.2]
- Security fix for CVE-2024-6923
Resolves: RHEL-53087
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3.12 | 0:3.12.1-4.el9_4.3 |
| Oracle Linux · 9 | python3.12-debug | 0:3.12.1-4.el9_4.3 |
| Oracle Linux · 9 | python3.12-devel | 0:3.12.1-4.el9_4.3 |
| Oracle Linux · 9 | python3.12-idle | 0:3.12.1-4.el9_4.3 |
| Oracle Linux · 9 | python3.12-libs | 0:3.12.1-4.el9_4.3 |
| Oracle Linux · 9 | python3.12-test | 0:3.12.1-4.el9_4.3 |
| Oracle Linux · 9 | python3.12-tkinter | 0:3.12.1-4.el9_4.3 |
Vulnerabilities 1
-
Medium 5.5
Email header injection due to unquoted newlines
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.