Release Info

Advisory: CLSA-2024:1728580597

OS: CentOS 8.5 ELS

Public date: 2024-10-10 13:16:39

Project: python3

Version: 3.6.8-42.el8.tuxcare.els9

Errata link: https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2024-1728580597.html

Changelog

- CVE-2024-6232: remove backtracking when parsing tarfile headers - CVE-2024-7592: fix quadratic complexity in parsing '-quoted' cookie values with backslashes

Update

Update command: dnf update python3*

Packages list

platform-python-3.6.8-42.el8.tuxcare.els9.i686.rpm platform-python-3.6.8-42.el8.tuxcare.els9.x86_64.rpm platform-python-debug-3.6.8-42.el8.tuxcare.els9.i686.rpm platform-python-debug-3.6.8-42.el8.tuxcare.els9.x86_64.rpm platform-python-devel-3.6.8-42.el8.tuxcare.els9.i686.rpm platform-python-devel-3.6.8-42.el8.tuxcare.els9.x86_64.rpm python3-devel-3.6.8-42.el8.tuxcare.els9.x86_64.rpm python3-idle-3.6.8-42.el8.tuxcare.els9.i686.rpm python3-idle-3.6.8-42.el8.tuxcare.els9.x86_64.rpm python3-libs-3.6.8-42.el8.tuxcare.els9.i686.rpm python3-libs-3.6.8-42.el8.tuxcare.els9.x86_64.rpm python3-test-3.6.8-42.el8.tuxcare.els9.i686.rpm python3-test-3.6.8-42.el8.tuxcare.els9.x86_64.rpm python3-tkinter-3.6.8-42.el8.tuxcare.els9.i686.rpm python3-tkinter-3.6.8-42.el8.tuxcare.els9.x86_64.rpm

CVEs

CVE-2024-7592
CVE-2024-6232