Lucene search

K
oraclelinuxOracleLinuxELSA-2023-7151
HistoryNov 17, 2023 - 12:00 a.m.

python3 security update

2023-11-1700:00:00
linux.oracle.com
9
python
security update
oracle linux
openela
cve-2023-40217
symlink handling fix

6.5 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.9%

[3.6.8-56.0.1]

  • Add Oracle Linux distribution in platform.py [Orabug: 20812544]
    [3.6.8.openela.0]
  • Add openela to supported dists
    [3.6.8-56]
  • Security fix for CVE-2023-40217
    Resolves: RHEL-3041
    [3.6.8-55]
  • Fix symlink handling in the fix for CVE-2007-4559
    Resolves: rhbz#263261
    [3.6.8-54]
  • Bump release for rebuild
    Resolves: rhbz#2173917
    [3.6.8-53]
  • Security fix for CVE-2023-24329
    Resolves: rhbz#2173917
    [3.6.8-52]
  • Add filters for tarfile extraction (CVE-2007-4559, PEP-706)
    Resolves: rhbz#263261

6.5 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.024 Low

EPSS

Percentile

89.9%