FEDORA-EPEL-2019-864944c688 — security update for python34

stable

python34-3.4.10-4.el6

FEDORA-EPEL-2019-864944c688 created by carlwgeorge 5 years ago for Fedora EPEL 6

This update backports fixes for CVE-2019-10160 (#1718867) and CVE-2019-16056 (#1750457) from Fedora. It also obsolete IUS python34u packages (IUS issue).

This update has been submitted for testing by carlwgeorge.

5 years ago

This update's test gating status has been changed to 'waiting'.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

This update has been pushed to testing.

5 years ago

This update can be pushed to stable now if the maintainer wishes

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

Builds

python34-3.4.10-4.el6

BZ#1688552 CVE-2019-9636 python34: python: Information Disclosure due to urlsplit improper NFKC normalization [epel-all]

BZ#1698979 CVE-2019-9947 CVE-2019-9948 python34: various flaws [epel-all]

BZ#1706855 CVE-2019-9740 python34: python: improper neutralization of CRLF sequences in urllib module [epel-all]

BZ#1718869 CVE-2019-10160 python34: python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc [epel-all]

BZ#1750455 CVE-2019-16056 python34: python: email.utils.parseaddr wrongly parses email addresses [epel-all]

BZ#1750764 Sync EPEL's python34 with Fedora [epel-all]

python34-3.4.10-4.el6

Automated Test Results

ignored