[SECURITY] Fedora 32 Update: python3-3.8.9-1.fc32
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2021-b6b6093b3a
2021-04-23 15:04:50.170419
--------------------------------------------------------------------------------
Name : python3
Product : Fedora 32
Version : 3.8.9
Release : 1.fc32
URL : https://www.python.org/
Summary : Interpreter of the Python programming language
Description :
Python is an accessible, high-level, dynamically typed, interpreted programming
language, designed with an emphasis on code readability.
It includes an extensive standard library, and has a vast ecosystem of
third-party libraries.
The python3 package provides the "python3" executable: the reference
interpreter for the Python language, version 3.
The majority of its standard library is provided in the python3-libs package,
which should be installed automatically along with python3.
The remaining parts of the Python standard library are broken out into the
python3-tkinter and python3-test packages, which may need to be installed
separately.
Documentation for Python is provided in the python3-docs package.
Packages containing additional libraries for Python are generally named with
the "python3-" prefix.
--------------------------------------------------------------------------------
Update Information:
**Update to 3.8.9.** [Full
changelog.](https://docs.python.org/release/3.8.9/whatsnew/changelog.html)
Contains security fix for CVE-2021-3426. ---- **Update to 3.8.8.** [Full
changelog.](https://docs.python.org/release/3.8.8/whatsnew/changelog.html)
Contains security fix for CVE-2021-23336.
--------------------------------------------------------------------------------
ChangeLog:
* Tue Apr 6 2021 Tomas Hrnciar <thrnciar(a)redhat.com> - 3.8.9-1
- Update to 3.8.9
* Sat Feb 20 2021 Miro Hron��ok <mhroncok(a)redhat.com> - 3.8.8-1
- Update to 3.8.8
* Thu Feb 18 2021 Tomas Hrnciar <thrnciar(a)redhat.com> - 3.8.8~rc1-1
- Update to 3.8.8rc1
* Wed Jan 27 2021 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.8.7-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1928904 - CVE-2021-23336 python: Web Cache Poisoning via
urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters
https://bugzilla.redhat.com/show_bug.cgi?id=1928904
[ 2 ] Bug #1935913 - CVE-2021-3426 python: information disclosure via pydoc
https://bugzilla.redhat.com/show_bug.cgi?id=1935913
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2021-b6b6093b3a' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------