FEDORA-2022-dd5032bedf — security update for python3.8

stable

python3.8-3.8.14-1.fc37

FEDORA-2022-dd5032bedf created by churchyard 9 months ago for Fedora 37

Update to 3.8.14
Contains security fix for CVE-2020-10735

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2022-dd5032bedf

This update has been submitted for testing by churchyard.

9 months ago

This update's test gating status has been changed to 'ignored'.

9 months ago

This update has been pushed to testing.

9 months ago

This update can be pushed to stable now if the maintainer wishes

9 months ago

lbalhar edited this update.

9 months ago

lbalhar commented & provided feedback 9 months ago

karma

Works fine and fixes both CVEs.

BZ#1834423 CVE-2020-10735 python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS

BZ#2120783 CVE-2021-28861 python3.8: python: an open redirection vulnerability in lib/http/server.py may lead to information disclosure [fedora-all]

This update has been submitted for stable by bodhi.

9 months ago

This update has been pushed to stable.

9 months ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

python3.8-3.8.14-1.fc37

Settings

Unstable by Karma

-1

Stable by Karma

Stable by Time

7 days

Dates

submitted

9 months ago

in testing

9 months ago

in stable

9 months ago

modified

9 months ago

BZ#1834423 CVE-2020-10735 python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS

BZ#2120783 CVE-2021-28861 python3.8: python: an open redirection vulnerability in lib/http/server.py may lead to information disclosure [fedora-all]

python3.8-3.8.14-1.fc37

Automated Test Results

ignored