Summary
[3.11.7-1.5]
- Security fix for CVE-2024-8088
Resolves: RHEL-55960
[3.11.7-1.4]
- Security fix for CVE-2024-6923
Resolves: RHEL-53037
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3.11 | 0:3.11.7-1.el9_4.5 |
| Oracle Linux · 9 | python3.11-debug | 0:3.11.7-1.el9_4.5 |
| Oracle Linux · 9 | python3.11-devel | 0:3.11.7-1.el9_4.5 |
| Oracle Linux · 9 | python3.11-idle | 0:3.11.7-1.el9_4.5 |
| Oracle Linux · 9 | python3.11-libs | 0:3.11.7-1.el9_4.5 |
| Oracle Linux · 9 | python3.11-test | 0:3.11.7-1.el9_4.5 |
| Oracle Linux · 9 | python3.11-tkinter | 0:3.11.7-1.el9_4.5 |
Vulnerabilities 1
-
Medium 5.5
Email header injection due to unquoted newlines
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.