FEDORA-2024-82a696ca59
Packages in this update:
python3.12-3.12.8-1.fc40
python3-docs-3.12.8-1.fc40
Update description:
Update to 3.12.8
python3.12-3.12.8-1.fc40
python3-docs-3.12.8-1.fc40
Update to 3.12.8
python3.13-3.13.1-1.fc42
Automatic update for python3.13-3.13.1-1.fc42.
* Tue Dec 3 2024 Charalampos Stratakis <cstratak@redhat.com> – 3.13.1-1
– Update to 3.13.1
– Security fix for CVE-2024-9287
– Fixes: rhbz#2321657
python3.12-3.12.8-1.fc41
Update to 3.12.8
python3.12-3.12.8-1.fc42
Automatic update for python3.12-3.12.8-1.fc42.
* Tue Dec 3 2024 Charalampos Stratakis <cstratak@redhat.com> – 3.12.8-1
– Update to 3.12.8
– Security fix for CVE-2024-9287
– Fixes: rhbz#2321656
It was discovered that recutils incorrectly handled memory when parsing
comments with the recparser utility. An attacker could possibly use this
issue to cause a denial of service or run arbitrary commands.
(CVE-2021-46019, CVE-2021-46021, CVE-2021-46022)
It was discovered that recutils incorrectly handled memory when parsing CSV
files. An attacker could possibly use this issue to cause a denial of
service or run arbitrary commands. (CVE-2019-11637, CVE-2019-11638,
CVE-2019-11639, CVE-2019-11640)
It was discovered that recutils incorrectly handled memory when parsing
maliciously crafted recfiles. An attacker could possibly use this issue to
cause a denial of service. (CVE-2019-6455, CVE-2019-6456, CVE-2019-6457,
CVE-2019-6458, CVE-2019-6459, CVE-2019-6460)
USN-7136-1 fixed a vulnerability in Django. This update provides
the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.
Original advisory details:
jiangniao discovered that Django incorrectly handled the API to strip
tags. A remote attacker could possibly use this issue to cause Django to
consume resources, leading to a denial of service. (CVE-2024-53907)
Seokchan Yoon discovered that Django incorrectly handled HasKey lookups
when using Oracle. A remote attacker could possibly use this issue to
inject arbitrary SQL code. This issue only affected Ubuntu 24.04 LTS and
Ubuntu 24.10. (CVE-2024-53908)
jiangniao discovered that Django incorrectly handled the API to strip tags.
A remote attacker could possibly use this issue to cause Django to
consume resources, leading to a denial of service. (CVE-2024-53907)
Seokchan Yoon discovered that Django incorrectly handled HasKey lookups
when using Oracle. A remote attacker could possibly use this issue to
inject arbitrary SQL code. This issue only affected Ubuntu 24.04 LTS and
Ubuntu 24.10. (CVE-2024-53908)
open62541-1.4.8-1.fc41
Update to 1.4.8
matrix-synapse-1.118.0-3.fc41
CVE-2024-52805, CVE-2024-52815, CVE-2024-53863, CVE-2024-53867
Backport fixes from v1.120.1
matrix-synapse-1.111.1-3.fc40
CVE-2024-52805, CVE-2024-52815, CVE-2024-53863
Backport fixes from v1.120.1