Summary
[3.6.8-67.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]
[3.6.8-67]
- Security fix for CVE-2024-6232
Resolves: RHEL-57399
[3.6.8-66]
- Security fix for CVE-2024-6923
Resolves: RHEL-53065
[3.6.8-65]
- Build Python with -O3
- https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3
[3.6.8-64]
- Add explicit RPM Provides for /usr/libexec/platform-python
Resolves: RHEL-48605
[3.6.8-63]
- Security fix for CVE-2024-4032
Resolves: RHEL-44060
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | platform-python | 0:3.6.8-67.0.1.el8_10 |
| Oracle Linux · 8 | platform-python-debug | 0:3.6.8-67.0.1.el8_10 |
| Oracle Linux · 8 | platform-python-devel | 0:3.6.8-67.0.1.el8_10 |
| Oracle Linux · 8 | python3-idle | 0:3.6.8-67.0.1.el8_10 |
| Oracle Linux · 8 | python3-libs | 0:3.6.8-67.0.1.el8_10 |
| Oracle Linux · 8 | python3-test | 0:3.6.8-67.0.1.el8_10 |
| Oracle Linux · 8 | python3-tkinter | 0:3.6.8-67.0.1.el8_10 |
Vulnerabilities 3
-
High 7.5
Incorrect IPv4 and IPv6 private ranges
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the is_private and is_global properties of the ipaddress.IPv4Address, ipaddress.IPv4Networ…
-
High 7.5CVE-2024-6232 Public exploit
Regular-expression DoS when parsing TarFile headers
There is a MEDIUM severity vulnerability affecting CPython. Regular expressions that allowed excessive backtracking during tarfile.TarFile header parsing are vulnerable to ReDoS via specifically-crafted tar archives.
-
Medium 5.5
Email header injection due to unquoted newlines
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.