Release Info

Advisory: CLSA-2024:1728581056

OS: CentOS 8.4 ELS

Public date: 2024-10-10 13:24:18

Project: python3

Version: 3.6.8-40.el8_4.tuxcare.els9

Errata link: https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2024-1728581056.html

Changelog

- CVE-2024-6232: remove backtracking when parsing tarfile headers - CVE-2024-7592: fix quadratic complexity in parsing '-quoted' cookie values with backslashes

Update

Update command: dnf update python3*

Packages list

platform-python-3.6.8-40.el8_4.tuxcare.els9.i686.rpm platform-python-3.6.8-40.el8_4.tuxcare.els9.x86_64.rpm platform-python-debug-3.6.8-40.el8_4.tuxcare.els9.i686.rpm platform-python-debug-3.6.8-40.el8_4.tuxcare.els9.x86_64.rpm platform-python-devel-3.6.8-40.el8_4.tuxcare.els9.i686.rpm platform-python-devel-3.6.8-40.el8_4.tuxcare.els9.x86_64.rpm python3-devel-3.6.8-40.el8_4.tuxcare.els9.x86_64.rpm python3-idle-3.6.8-40.el8_4.tuxcare.els9.i686.rpm python3-idle-3.6.8-40.el8_4.tuxcare.els9.x86_64.rpm python3-libs-3.6.8-40.el8_4.tuxcare.els9.i686.rpm python3-libs-3.6.8-40.el8_4.tuxcare.els9.x86_64.rpm python3-test-3.6.8-40.el8_4.tuxcare.els9.i686.rpm python3-test-3.6.8-40.el8_4.tuxcare.els9.x86_64.rpm python3-tkinter-3.6.8-40.el8_4.tuxcare.els9.i686.rpm python3-tkinter-3.6.8-40.el8_4.tuxcare.els9.x86_64.rpm

CVEs

CVE-2024-7592
CVE-2024-6232