Release Info

Advisory: CLSA-2024:1727979765

OS: AlmaLinux 9.2 ESU

Public date: 2024-10-03 14:22:47

Project: python3

Version: 3.9.16-1.el9_2.2.tuxcare.els6

Errata link: https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2024-1727979765.html

Changelog

- CVE-2024-6232: remove backtracking when parsing tarfile headers - CVE-2024-7592: fix quadratic complexity in parsing "-quoted cookie values with backslashes

Update

Update command: dnf update python3*

Packages list

python-unversioned-command-3.9.16-1.el9_2.2.tuxcare.els6.noarch.rpm python3-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm python3-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm python3-debug-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm python3-debug-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm python3-devel-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm python3-devel-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm python3-idle-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm python3-idle-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm python3-libs-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm python3-libs-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm python3-test-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm python3-test-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els6.i686.rpm python3-tkinter-3.9.16-1.el9_2.2.tuxcare.els6.x86_64.rpm

CVEs

CVE-2024-7592
CVE-2024-6232