[CLSA-2022:1658347647] Fixed CVE-2015-20170 in python3
Type:
security
Severity:
Critical
Release date:
2022-07-20
Description:
- CVE-2015-20170: mailcap: findmatch() function does not sanitise the second argument allowing to inject shell commands
Updated packages:
  • platform-python-devel-3.6.8-39.el8_4.tuxcare.els2.i686.rpm
    sha:5c578839d75c0d845a1292fba07a0f03cc341cd7
  • platform-python-3.6.8-39.el8_4.tuxcare.els2.i686.rpm
    sha:7d928f2a3cafb0c1f55a300fda778a2cc2e2645a
  • python3-devel-3.6.8-39.el8_4.tuxcare.els2.x86_64.rpm
    sha:9e50b7d7993289617a8b2107d195a03565aec65a
  • python3-test-3.6.8-39.el8_4.tuxcare.els2.x86_64.rpm
    sha:f75afca06cf02b9a6fe1a14133d4739d25113f4b
  • python3-tkinter-3.6.8-39.el8_4.tuxcare.els2.x86_64.rpm
    sha:5654e717c3a776a6164b360f5dcf41d5d8a98e2c
  • platform-python-3.6.8-39.el8_4.tuxcare.els2.x86_64.rpm
    sha:d4ac2af0229e456464f9f99074510e0d393f8e9a
  • python3-tkinter-3.6.8-39.el8_4.tuxcare.els2.i686.rpm
    sha:08c6a216ab91e287f51dff91c96b128e4c988c05
  • python3-test-3.6.8-39.el8_4.tuxcare.els2.i686.rpm
    sha:56468a731889d046256bdb41bf536c925a8b20f8
  • platform-python-debug-3.6.8-39.el8_4.tuxcare.els2.i686.rpm
    sha:3dfd4bf2020a18805c45b9bc1784def131b22d38
  • platform-python-debug-3.6.8-39.el8_4.tuxcare.els2.x86_64.rpm
    sha:0571c4a7e1a92252c9cb1011b1b209a499a4ab0f
  • python3-idle-3.6.8-39.el8_4.tuxcare.els2.x86_64.rpm
    sha:8bb2325aabc084f3c11f235b3ee466122e1b730a
  • python3-libs-3.6.8-39.el8_4.tuxcare.els2.x86_64.rpm
    sha:eb24d5b7bb13d7243debbb1e5fd0d904f184656a
  • platform-python-devel-3.6.8-39.el8_4.tuxcare.els2.x86_64.rpm
    sha:ea17745a5acce6e78238f5df5b25450cef242750
  • python3-idle-3.6.8-39.el8_4.tuxcare.els2.i686.rpm
    sha:2818b5768245a750d7341c4384b051841f478094
  • python3-libs-3.6.8-39.el8_4.tuxcare.els2.i686.rpm
    sha:e3414c62adee9c9a78b151b4f0260942ca8effce
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.