Summary
[3.9.19-8]
- Security fix for CVE-2024-8088
Resolves: RHEL-55967
[3.9.19-7]
- Security fix for CVE-2024-6923
Resolves: RHEL-53045
[3.9.19-6]
- Ensure 3rd party extension modules for the debug build use the -O0 flag
[3.9.19-5]
- Properly propagate the optimization flags to C extensions
[3.9.19-4]
- Build Python with -O3
- https://fedoraproject.org/wiki/Changes/Python_built_with_gcc_O3
[3.9.19-3]
- Security fix for CVE-2024-4032
Resolves: RHEL-44107
[3.9.19-2]
- Enable importing of hash-based .pyc files under FIPS mode
Resolves: RHEL-40750
[3.9.19-1]
- Update to 3.9.19
- Security fixes for CVE-2023-6597 and CVE-2024-0450
- Fix tests for XMLPullParser with Expat with fixed CVE
Resolves: RHEL-33679, RHEL-33691
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python-unversioned-command | 0:3.9.19-8.el9 |
| Oracle Linux · 9 | python3 | 0:3.9.19-8.el9 |
| Oracle Linux · 9 | python3-debug | 0:3.9.19-8.el9 |
| Oracle Linux · 9 | python3-devel | 0:3.9.19-8.el9 |
| Oracle Linux · 9 | python3-idle | 0:3.9.19-8.el9 |
| Oracle Linux · 9 | python3-libs | 0:3.9.19-8.el9 |
| Oracle Linux · 9 | python3-test | 0:3.9.19-8.el9 |
| Oracle Linux · 9 | python3-tkinter | 0:3.9.19-8.el9 |
Vulnerabilities 1
-
High 8.7
Infinite loop when iterating over zip archive entry names from zipfile.Path
There is a HIGH severity vulnerability affecting the CPython "zipfile" module affecting "zipfile.Path". Note that the more common API "zipfile.ZipFile" class is unaffected. When iterating over names of entries in a zip archive (for example, methods of "zipfil…