ELSA-2023-3591

Опубликовано: 15 июн. 2023

Источник: oracle-oval

Платформа: Oracle Linux 8

Описание

ELSA-2023-3591: python3 security update (IMPORTANT)

[3.6.8-51.0.1]

Add Oracle Linux distribution in platform.py [Orabug: 20812544]

[3.6.8-51.1]

Security fix for CVE-2023-24329 Resolves: rhbz#2173917

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

platform-python

3.6.8-51.0.1.el8_8.1

platform-python-debug

3.6.8-51.0.1.el8_8.1

platform-python-devel

3.6.8-51.0.1.el8_8.1

python3-idle

3.6.8-51.0.1.el8_8.1

python3-libs

3.6.8-51.0.1.el8_8.1

python3-test

3.6.8-51.0.1.el8_8.1

python3-tkinter

3.6.8-51.0.1.el8_8.1

Oracle Linux x86_64

platform-python

3.6.8-51.0.1.el8_8.1

platform-python-debug

3.6.8-51.0.1.el8_8.1

platform-python-devel

3.6.8-51.0.1.el8_8.1

python3-idle

3.6.8-51.0.1.el8_8.1

python3-libs

3.6.8-51.0.1.el8_8.1

python3-test

3.6.8-51.0.1.el8_8.1

python3-tkinter

3.6.8-51.0.1.el8_8.1

Связанные CVE

CVE-2023-24329

Ссылки на источники

Связанные уязвимости

CVE-2023-24329

CVSS3: 7.5

ubuntu

больше 2 лет назад

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

CVE-2023-24329

CVSS3: 7.5

redhat

больше 2 лет назад

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

CVE-2023-24329

CVSS3: 7.5

nvd

больше 2 лет назад

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

CVE-2023-24329

CVSS3: 7.5

msrc

больше 2 лет назад

Описание отсутствует

CVE-2023-24329

CVSS3: 7.5

debian

больше 2 лет назад

An issue in the urllib.parse component of Python before 3.11.4 allows ...