Red Hat Security AdvisoryRHSA-2020:5010
python3 security update
Released 2020-11-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) python3-3.6.8-18.el7, python3-libs-3.6.8-18.el7
- Red Hat Enterprise Linux Client Optional (v. 7) python3-3.6.8-18.el7, python3-debug-3.6.8-18.el7, python3-devel-3.6.8-18.el7 +3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) python3-3.6.8-18.el7, python3-debug-3.6.8-18.el7, python3-devel-3.6.8-18.el7 +3
- Red Hat Enterprise Linux Server (v. 7) python3-3.6.8-18.el7, python3-libs-3.6.8-18.el7, python3-libs-3.6.8-18.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) python3-3.6.8-18.el7, python3-3.6.8-18.el7.ppc, python3-debug-3.6.8-18.el7 +9
- Red Hat Enterprise Linux Workstation (v. 7) python3-3.6.8-18.el7, python3-libs-3.6.8-18.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) python3-3.6.8-18.el7, python3-debug-3.6.8-18.el7, python3-devel-3.6.8-18.el7 +3
Fixes 2 records
Priority MEDIUM 47
Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to cause a denial of service if an application is affected by t…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.12706 · Published 2020-06-18 · Partial fix CWE-330
Priority LOW 38
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02956 · Published 2020-07-13 · Partial fix CWE-835
