ELSA-2020-1764

ELSA-2020-1764 - python3 security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2020-05-05

Description

[3.6.8-23.0.1.el8]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]

[3.6.8-23]
- Modify the test suite to better handle disabled SSL/TLS versions and FIPS mode
- Use OpenSSLs DRBG and disable os.getrandom() function in FIPS mode
Resolves: rhbz#1754028, rhbz#1754027, rhbz#1754026, rhbz#1774471

[3.6.8-22]
- Changed Requires into Recommends for python3-pip to allow a lower RHEL8
footprint for containers and other minimal environments
Resolves: rhbz#1756217

[3.6.8-21]
- Patch 329 (FIPS) modified: Added workaround for mod_ssl:
Skip error checking in _Py_hashlib_fips_error
Resolves: rhbz#1760106

[3.6.8-20]
- Security fix for CVE-2019-16056
Resolves: rhbz#1750776

[3.6.8-19]
- Skip windows specific test_get_exe_bytes test case and enable test_distutils
Resolves: rhbz#1754040

[3.6.8-18]
- Reduce the number of tests running during the profile guided optimizations build
- Enable profile guided optimizations for all the supported architectures
Resolves: rhbz#1749576

[3.6.8-17]
- Security fix for CVE-2018-20852
Resolves: rhbz#1741553

[3.6.8-16]
- Properly pass the -Og optimization flag to the debug build
Resolves: rhbz#1712977 and rhbz#1714733

Related CVEs

CVE-2018-20852

CVE-2019-16056

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	python3-3.6.8-23.0.1.el8.src.rpm	72f7544170a9b4b7d79aab998e4f2a63fdf487aecf59c60c746e1cd777fefae8	-	ol8_aarch64_appstream
	python3-3.6.8-23.0.1.el8.src.rpm	72f7544170a9b4b7d79aab998e4f2a63fdf487aecf59c60c746e1cd777fefae8	-	ol8_aarch64_baseos_latest
	python3-3.6.8-23.0.1.el8.src.rpm	72f7544170a9b4b7d79aab998e4f2a63fdf487aecf59c60c746e1cd777fefae8	-	ol8_aarch64_u2_baseos_base
	platform-python-3.6.8-23.0.1.el8.aarch64.rpm	c2dee5f8caa547d97aef8988a27b3480aa7091a839d2d2b1fb0c68b0d04e05d9	-	ol8_aarch64_baseos_latest
	platform-python-3.6.8-23.0.1.el8.aarch64.rpm	c2dee5f8caa547d97aef8988a27b3480aa7091a839d2d2b1fb0c68b0d04e05d9	-	ol8_aarch64_u2_baseos_base
	platform-python-debug-3.6.8-23.0.1.el8.aarch64.rpm	1becfacb212b64bfbb730766f885b80c7218efcc5f3204ada2e9c58164148bb2	-	ol8_aarch64_appstream
	platform-python-devel-3.6.8-23.0.1.el8.aarch64.rpm	bcc1a030d1b5938c3ee503ff764afce72620c78eba4325d30841da9ac0301c1e	-	ol8_aarch64_appstream
	python3-idle-3.6.8-23.0.1.el8.aarch64.rpm	ae6f00fed0a10c0578c896eb902e1e6d0f8c770c37003218d4e9fd0af09eca56	-	ol8_aarch64_appstream
	python3-libs-3.6.8-23.0.1.el8.aarch64.rpm	74a27124a3f87fe7dfabf099566a0775c7daaa006331a75e37f70f6c990f5674	-	ol8_aarch64_baseos_latest
	python3-libs-3.6.8-23.0.1.el8.aarch64.rpm	74a27124a3f87fe7dfabf099566a0775c7daaa006331a75e37f70f6c990f5674	-	ol8_aarch64_u2_baseos_base
	python3-test-3.6.8-23.0.1.el8.aarch64.rpm	fed7618068c3aa10533576f794d6826325aeeb6193c66b8385a0832a9dd8346c	-	ol8_aarch64_baseos_latest
	python3-test-3.6.8-23.0.1.el8.aarch64.rpm	fed7618068c3aa10533576f794d6826325aeeb6193c66b8385a0832a9dd8346c	-	ol8_aarch64_u2_baseos_base
	python3-tkinter-3.6.8-23.0.1.el8.aarch64.rpm	7ac9be58765e46ebf8c62f848d7749ee4271238697063cfe0043e535af9dc180	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	python3-3.6.8-23.0.1.el8.src.rpm	72f7544170a9b4b7d79aab998e4f2a63fdf487aecf59c60c746e1cd777fefae8	-	ol8_x86_64_appstream
	python3-3.6.8-23.0.1.el8.src.rpm	72f7544170a9b4b7d79aab998e4f2a63fdf487aecf59c60c746e1cd777fefae8	-	ol8_x86_64_baseos_latest
	python3-3.6.8-23.0.1.el8.src.rpm	72f7544170a9b4b7d79aab998e4f2a63fdf487aecf59c60c746e1cd777fefae8	-	ol8_x86_64_u2_baseos_base
	platform-python-3.6.8-23.0.1.el8.i686.rpm	9261e4bb78cfc40faf53232da0c23bbad2473c3644c239baafede9acf39bd8ff	-	ol8_x86_64_appstream
	platform-python-3.6.8-23.0.1.el8.x86_64.rpm	3596376c545762accaea9cb359c89d3c83037ed516d6bc43dcf91ac4ee633933	-	ol8_x86_64_baseos_latest
	platform-python-3.6.8-23.0.1.el8.x86_64.rpm	3596376c545762accaea9cb359c89d3c83037ed516d6bc43dcf91ac4ee633933	-	ol8_x86_64_u2_baseos_base
	platform-python-debug-3.6.8-23.0.1.el8.i686.rpm	4e4a52c90a2cc7d672d30f72e8942e9b49359fb96cc256218971683a36e68a61	-	ol8_x86_64_appstream
	platform-python-debug-3.6.8-23.0.1.el8.x86_64.rpm	ac99cc22e8c716323f7250d05dbde9088b98fa576fb90031e687941de4751aac	-	ol8_x86_64_appstream
	platform-python-devel-3.6.8-23.0.1.el8.i686.rpm	07a4e2384b69f166d6aa1541069bb7b1bc2050cf6b6f72b85272961fbca4264a	-	ol8_x86_64_appstream
	platform-python-devel-3.6.8-23.0.1.el8.x86_64.rpm	ba3e642dfb46166d8da6c267529cc61049ed8f27f7efb8e306bea900139d4eba	-	ol8_x86_64_appstream
	python3-idle-3.6.8-23.0.1.el8.i686.rpm	2155d835fe8f456ebc06c4985938b93b5d563c46e87e9d902d34b1960cff56d7	-	ol8_x86_64_appstream
	python3-idle-3.6.8-23.0.1.el8.x86_64.rpm	ce158cc5bac7d2fe09eb47af432ff2c583505da005429980cee5059cbad9e474	-	ol8_x86_64_appstream
	python3-libs-3.6.8-23.0.1.el8.i686.rpm	9959c9932e828c3af87843b59b94ff21e22038b208bbc4cbf9233df1c195f3e2	-	ol8_x86_64_baseos_latest
	python3-libs-3.6.8-23.0.1.el8.i686.rpm	9959c9932e828c3af87843b59b94ff21e22038b208bbc4cbf9233df1c195f3e2	-	ol8_x86_64_u2_baseos_base
	python3-libs-3.6.8-23.0.1.el8.x86_64.rpm	8bdc44e13bc801bacd1a4b8ccb42bf90899a61d71b8144c313e6d92242164c9a	-	ol8_x86_64_baseos_latest
	python3-libs-3.6.8-23.0.1.el8.x86_64.rpm	8bdc44e13bc801bacd1a4b8ccb42bf90899a61d71b8144c313e6d92242164c9a	-	ol8_x86_64_u2_baseos_base
	python3-test-3.6.8-23.0.1.el8.i686.rpm	4de6582d5cdcbc9f87e96e73f286d546bef54b3f5fe7334cc4a6f860553e1ed5	-	ol8_x86_64_appstream
	python3-test-3.6.8-23.0.1.el8.x86_64.rpm	f069890e94732788aae43308c678d2f5919cc4c0c39af34c59ad389e26974134	-	ol8_x86_64_baseos_latest
	python3-test-3.6.8-23.0.1.el8.x86_64.rpm	f069890e94732788aae43308c678d2f5919cc4c0c39af34c59ad389e26974134	-	ol8_x86_64_u2_baseos_base
	python3-tkinter-3.6.8-23.0.1.el8.i686.rpm	b5ff1b5cd4ccac1299877f54a787e456d7da011e803887298033805309316edb	-	ol8_x86_64_appstream
	python3-tkinter-3.6.8-23.0.1.el8.x86_64.rpm	c97ada153119f527c7c1bda1957467700e21a0b756f2284f3fc3f5dc6c94a67e	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team