ELSA-2020-1764

ELSA-2020-1764 - python3 security and bug fix update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2020-05-05

Description

[3.6.8-23.0.1.el8]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]

[3.6.8-23]
- Modify the test suite to better handle disabled SSL/TLS versions and FIPS mode
- Use OpenSSLs DRBG and disable os.getrandom() function in FIPS mode
Resolves: rhbz#1754028, rhbz#1754027, rhbz#1754026, rhbz#1774471

[3.6.8-22]
- Changed Requires into Recommends for python3-pip to allow a lower RHEL8
footprint for containers and other minimal environments
Resolves: rhbz#1756217

[3.6.8-21]
- Patch 329 (FIPS) modified: Added workaround for mod_ssl:
Skip error checking in _Py_hashlib_fips_error
Resolves: rhbz#1760106

[3.6.8-20]
- Security fix for CVE-2019-16056
Resolves: rhbz#1750776

[3.6.8-19]
- Skip windows specific test_get_exe_bytes test case and enable test_distutils
Resolves: rhbz#1754040

[3.6.8-18]
- Reduce the number of tests running during the profile guided optimizations build
- Enable profile guided optimizations for all the supported architectures
Resolves: rhbz#1749576

[3.6.8-17]
- Security fix for CVE-2018-20852
Resolves: rhbz#1741553

[3.6.8-16]
- Properly pass the -Og optimization flag to the debug build
Resolves: rhbz#1712977 and rhbz#1714733

Related CVEs

CVE-2018-20852

CVE-2019-16056

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	python3-3.6.8-23.0.1.el8.src.rpm	1a665c04218ae314e02d5ca049a806fe	-
	platform-python-3.6.8-23.0.1.el8.aarch64.rpm	5dfc940ee10680f2b9467e8588a9a127	-
	platform-python-debug-3.6.8-23.0.1.el8.aarch64.rpm	048c150d4f14e6cc84251b52ff8f6c18	-
	platform-python-devel-3.6.8-23.0.1.el8.aarch64.rpm	85b8d05d4fc39078b4a49536e7112ece	-
	python3-idle-3.6.8-23.0.1.el8.aarch64.rpm	de9262d5973cb53bbb1d94dc5bd3b5c7	-
	python3-libs-3.6.8-23.0.1.el8.aarch64.rpm	59845fccbd89a6d568cb5eebcc018d05	-
	python3-test-3.6.8-23.0.1.el8.aarch64.rpm	ba3ef9d2493d67321866b8d832f938f2	-
	python3-tkinter-3.6.8-23.0.1.el8.aarch64.rpm	9b03eb079d0cb6eb3b5eba0318d5ba1e	-
Oracle Linux 8 (x86_64)	python3-3.6.8-23.0.1.el8.src.rpm	1a665c04218ae314e02d5ca049a806fe	-
	platform-python-3.6.8-23.0.1.el8.i686.rpm	8a472da6c0be538f55b880bc8bca2e24	-
	platform-python-3.6.8-23.0.1.el8.x86_64.rpm	cd769cbd4bde8c7b1d3b87eab1ae05b9	-
	platform-python-debug-3.6.8-23.0.1.el8.i686.rpm	fef4ab3e672b5b354f373166bf57f3ff	-
	platform-python-debug-3.6.8-23.0.1.el8.x86_64.rpm	26c54ff9be3e16a021053ce979a4cc8e	-
	platform-python-devel-3.6.8-23.0.1.el8.i686.rpm	b413022b480776f45eb11fae3a42c880	-
	platform-python-devel-3.6.8-23.0.1.el8.x86_64.rpm	6b1a46956470b22e9143b74b9bbc80ce	-
	python3-idle-3.6.8-23.0.1.el8.i686.rpm	5fa62627fc628b039eac0e68cfa93083	-
	python3-idle-3.6.8-23.0.1.el8.x86_64.rpm	d331de7d9673ae3d9a6812d241067aa0	-
	python3-libs-3.6.8-23.0.1.el8.i686.rpm	77611be31de6a3aa7e90d0e568bcf07c	-
	python3-libs-3.6.8-23.0.1.el8.x86_64.rpm	381c695b11923486cebd84f3b3929362	-
	python3-test-3.6.8-23.0.1.el8.i686.rpm	4861040070950fa2e11346c6f8a9ac9e	-
	python3-test-3.6.8-23.0.1.el8.x86_64.rpm	175e8437e5ce1729a0e1b2c4332bfccd	-
	python3-tkinter-3.6.8-23.0.1.el8.i686.rpm	ed3372f17c577385683d6a453410df90	-
	python3-tkinter-3.6.8-23.0.1.el8.x86_64.rpm	58b07e46027aa1e705a26cfc4f4f7f6a	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team