[SECURITY] Fedora 37 Update: python3.10-3.10.11-2.fc37
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-309cadedc6
2023-06-08 01:59:06.605307
--------------------------------------------------------------------------------
Name : python3.10
Product : Fedora 37
Version : 3.10.11
Release : 2.fc37
URL : https://www.python.org/
Summary : Version 3.10 of the Python interpreter
Description :
Python 3.10 is an accessible, high-level, dynamically typed, interpreted
programming language, designed with an emphasis on code readability.
It includes an extensive standard library, and has a vast ecosystem of
third-party libraries.
The python3.10 package provides the "python3.10" executable: the reference
interpreter for the Python language, version 3.
The majority of its standard library is provided in the python3.10-libs package,
which should be installed automatically along with python3.10.
The remaining parts of the Python standard library are broken out into the
python3.10-tkinter and python3.10-test packages, which may need to be installed
separately.
Documentation for Python is provided in the python3.10-docs package.
Packages containing additional libraries for Python are generally named with
the "python3.10-" prefix.
--------------------------------------------------------------------------------
Update Information:
Fix for CVE-2023-24329
--------------------------------------------------------------------------------
ChangeLog:
* Mon May 29 2023 Charalampos Stratakis <cstratak(a)redhat.com> - 3.10.11-2
- Fix for CVE-2023-24329
Resolves: rhbz#2174010
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2174010 - CVE-2023-24329 python3.10: python: urllib.parse url blocklisting
bypass [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2174010
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-309cadedc6' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------