[SECURITY] Fedora 30 Update: python36-3.6.9-1.fc30
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2019-7723d4774a
2019-07-12 00:57:54.115067
--------------------------------------------------------------------------------
Name : python36
Product : Fedora 30
Version : 3.6.9
Release : 1.fc30
URL : https://www.python.org/
Summary : Version 3.6 of the Python interpreter
Description :
Python 3.6 package for developers.
This package exists to allow developers to test their code against an older
version of Python. This is not a full Python stack and if you wish to run
your applications with Python 3.6, see other distributions
that support it, such as CentOS or RHEL with Software Collections
or older Fedora releases.
--------------------------------------------------------------------------------
Update Information:
Update Python 3.6 to
[3.6.9](https://www.python.org/downloads/release/python-369/), the latest
security release of the 3.6 branch. [Changelog for 3.6.9
final](https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-9-f...
and [3.6.9 release candidate
1](https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-9-release-
candidate-1). Includes security fixes for CVE-2019-9636, CVE-2019-9740,
CVE-2019-10160.
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 3 2019 Miro Hron��ok <mhroncok(a)redhat.com> - 3.6.9-1
- Update to 3.6.9
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1718388 - CVE-2019-10160 python: regression of CVE-2019-9636 due to
functional fix to allow port numbers in netloc
https://bugzilla.redhat.com/show_bug.cgi?id=1718388
[ 2 ] Bug #1688169 - CVE-2019-9740 python: CRLF injection via the query part of the url
passed to urlopen()
https://bugzilla.redhat.com/show_bug.cgi?id=1688169
[ 3 ] Bug #1688543 - CVE-2019-9636 python: Information Disclosure due to urlsplit
improper NFKC normalization
https://bugzilla.redhat.com/show_bug.cgi?id=1688543
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-7723d4774a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------