Summary
[3.9.18-3.5]
- Security fix for CVE-2024-8088
Resolves: RHEL-55968
[3.9.18-3.4]
- Security fix for CVE-2024-6923
Resolves: RHEL-53044
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python-unversioned-command | 0:3.9.18-3.el9_4.5 |
| Oracle Linux · 9 | python3 | 0:3.9.18-3.el9_4.5 |
| Oracle Linux · 9 | python3-debug | 0:3.9.18-3.el9_4.5 |
| Oracle Linux · 9 | python3-devel | 0:3.9.18-3.el9_4.5 |
| Oracle Linux · 9 | python3-idle | 0:3.9.18-3.el9_4.5 |
| Oracle Linux · 9 | python3-libs | 0:3.9.18-3.el9_4.5 |
| Oracle Linux · 9 | python3-test | 0:3.9.18-3.el9_4.5 |
| Oracle Linux · 9 | python3-tkinter | 0:3.9.18-3.el9_4.5 |
Vulnerabilities 1
-
Medium 5.5
Email header injection due to unquoted newlines
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.