ELSA-2023-3550

ELSA-2023-3550 - python security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2023-06-26

Description

[2.6.6-68.0.3]
- ASCII newline and tab characters are stripped from the URL [CVE-2022-0391][Orabug: 35479836]
- Start stripping C0 control and space chars in urlsplit [CVE-2023-24329][Orabug: 35479836]

Related CVEs

CVE-2022-0391

CVE-2023-24329

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	python-2.6.6-68.0.3.el6_10.src.rpm	ccc81a591894f921c62074c18120e42a77828e9f1a305fd1827be909dcb1a9e4	-	ol6_i386_ELS
	python-2.6.6-68.0.3.el6_10.i686.rpm	57b6ad0bda5193bf49d32d67790ff464d457b2ae7e7ccabc26d9b3c5ec270c5b	-	ol6_i386_ELS
	python-devel-2.6.6-68.0.3.el6_10.i686.rpm	12c93a878c05e6f40f29711f31f1e8c8e0eed0ade68e5be0d17be0e1bdb5f654	-	ol6_i386_ELS
	python-libs-2.6.6-68.0.3.el6_10.i686.rpm	9d7f8bb257ddff47b706fd9a56238722985712e91b21f45b161fe20eaff5b0b5	-	ol6_i386_ELS
	python-test-2.6.6-68.0.3.el6_10.i686.rpm	bc9bb2318b86f02fc3ad4afa2a7ae5af61822866a8974744e0ce37b78dcbaaaa	-	ol6_i386_ELS
	python-tools-2.6.6-68.0.3.el6_10.i686.rpm	dd7974bd12f88325fdcf802998957305ddd6b7f58fb00e56cf2c130f89ab334c	-	ol6_i386_ELS
	tkinter-2.6.6-68.0.3.el6_10.i686.rpm	8b49eb0ab48e37130ce1b190b204227ece079450b531ab69c95da286da1213c5	-	ol6_i386_ELS
Oracle Linux 6 (x86_64)	python-2.6.6-68.0.3.el6_10.src.rpm	ccc81a591894f921c62074c18120e42a77828e9f1a305fd1827be909dcb1a9e4	-	ol6_x86_64_ELS
	python-2.6.6-68.0.3.el6_10.i686.rpm	57b6ad0bda5193bf49d32d67790ff464d457b2ae7e7ccabc26d9b3c5ec270c5b	-	ol6_x86_64_ELS
	python-2.6.6-68.0.3.el6_10.x86_64.rpm	0f5f7f4ce0669de81fed98266341d274d26b08f715d17fdc977f45617c269fab	-	ol6_x86_64_ELS
	python-devel-2.6.6-68.0.3.el6_10.i686.rpm	12c93a878c05e6f40f29711f31f1e8c8e0eed0ade68e5be0d17be0e1bdb5f654	-	ol6_x86_64_ELS
	python-devel-2.6.6-68.0.3.el6_10.x86_64.rpm	d9cc512e946bb62e304705eb3582473a36f7e7723ce478d7e0ef7ae7323b6b43	-	ol6_x86_64_ELS
	python-libs-2.6.6-68.0.3.el6_10.i686.rpm	9d7f8bb257ddff47b706fd9a56238722985712e91b21f45b161fe20eaff5b0b5	-	ol6_x86_64_ELS
	python-libs-2.6.6-68.0.3.el6_10.x86_64.rpm	0476a28c5b8c68f0b05f87ad1c8a5ca3c78ba58ed95ecc337ebfee27a3f76f31	-	ol6_x86_64_ELS
	python-test-2.6.6-68.0.3.el6_10.x86_64.rpm	4072542a6b91c3805dea984c62a0a68d8b679de394a671360048a55a03608242	-	ol6_x86_64_ELS
	python-tools-2.6.6-68.0.3.el6_10.x86_64.rpm	4aa720ed15b21c249393ac6ec5cfb64e72cc9e47c039a51725ec11d15999cf37	-	ol6_x86_64_ELS
	tkinter-2.6.6-68.0.3.el6_10.x86_64.rpm	18d266897c93cf7d8c4a35f0b10e4ccef740d342c1bf9638f21e37d2ac3d2dca	-	ol6_x86_64_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team