Synopsis

Important: python3 security update

Type/Severity

Security Advisory: Important

Topic

An update for python3 is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

This package provides the "python3" executable: the reference interpreter for the Python language, version 3. The majority of its standard library is provided in the python3-libs package, which should be installed automatically along with python3. The remaining parts of the Python standard library are broken out into the python3-tkinter and python3-test packages.

Security Fix(es):

• python: Information Disclosure due to urlsplit improper NFKC normalization (CVE-2019-9636)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

• BZ - 1688543 - CVE-2019-9636 python: Information Disclosure due to urlsplit improper NFKC normalization

CVEs

• CVE-2019-9636

References

• https://access.redhat.com/security/updates/classification/#important
• https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization.html

Red Hat Enterprise Linux for x86_64 8

SRPM
python3-3.6.8-2.el8_0.src.rpm	SHA-256: 621136adacbc01015eb636f64c96cfadbd5eaffe00724d4229a250a83c825dc1
x86_64
platform-python-3.6.8-2.el8_0.i686.rpm	SHA-256: c5ce93309a57d1fccb2a3410f520bd2b0e3485cd53e4eedc378d0a6dcf04154b
platform-python-3.6.8-2.el8_0.x86_64.rpm	SHA-256: 1bec9fbfd387f2c7ff2e1d41302e17fce0196faf6167b56b5da7b79efbbea96d
platform-python-debug-3.6.8-2.el8_0.i686.rpm	SHA-256: b37e6d4b52964c27f33280cda6cfa52b653b7713ce7f6fe1ee477caf15f48f17
platform-python-debug-3.6.8-2.el8_0.x86_64.rpm	SHA-256: 33dae00129fce0f55f941f07832109896721b6b69a731dafa022d6330fa7c842
platform-python-devel-3.6.8-2.el8_0.i686.rpm	SHA-256: 7903ac0942b213b74ef24c4bbd30028bd650d2a1a2e3289532c44fc9c0389c8f
platform-python-devel-3.6.8-2.el8_0.x86_64.rpm	SHA-256: fee09893576c6da4b2bd8ec7581c1e9e9a59ad049bd5f7fc71314eed655a9a4f
python3-debuginfo-3.6.8-2.el8_0.i686.rpm	SHA-256: 01026bb92ddd01fbccbbd3b1150f755c992df3fe9464071caf231313e5bb1278
python3-debuginfo-3.6.8-2.el8_0.i686.rpm	SHA-256: 01026bb92ddd01fbccbbd3b1150f755c992df3fe9464071caf231313e5bb1278
python3-debuginfo-3.6.8-2.el8_0.x86_64.rpm	SHA-256: cd918f0b62c5b3ef859d290e0767f351bb6653d5fdcbad79f8ff9608403d24c4
python3-debuginfo-3.6.8-2.el8_0.x86_64.rpm	SHA-256: cd918f0b62c5b3ef859d290e0767f351bb6653d5fdcbad79f8ff9608403d24c4
python3-debugsource-3.6.8-2.el8_0.i686.rpm	SHA-256: b8f422a6765e82c0cb582a32621c1d142711161171f626b46b926798fb16b3dd
python3-debugsource-3.6.8-2.el8_0.i686.rpm	SHA-256: b8f422a6765e82c0cb582a32621c1d142711161171f626b46b926798fb16b3dd
python3-debugsource-3.6.8-2.el8_0.x86_64.rpm	SHA-256: e7e1c55ac8ced147a4db514c37466875ecfc4a3e82e38952856514cb58e7991c
python3-debugsource-3.6.8-2.el8_0.x86_64.rpm	SHA-256: e7e1c55ac8ced147a4db514c37466875ecfc4a3e82e38952856514cb58e7991c
python3-idle-3.6.8-2.el8_0.i686.rpm	SHA-256: d69015efef99726dabbb8dd77e36a0a2395f2cc8afc5afbee67b64544ee2f0cc
python3-idle-3.6.8-2.el8_0.x86_64.rpm	SHA-256: 117938aea827a102505e2698bcc3f3beacadef6f7fb791957d034a1a80a1dc3a
python3-libs-3.6.8-2.el8_0.i686.rpm	SHA-256: 427e4af28ff5223e51c595b588b2547956fc5431d3321c7661ccf6626219c607
python3-libs-3.6.8-2.el8_0.x86_64.rpm	SHA-256: 601441a132a8be6ba7c0dba26b65ee54b1bb0a5c662f994510a8902c259d55b6
python3-test-3.6.8-2.el8_0.i686.rpm	SHA-256: c9c85cb0a336f3d0d9345eb956271927dd71e214029f4277a2e28d773f7f23ed
python3-test-3.6.8-2.el8_0.x86_64.rpm	SHA-256: cae2117cbdbfaa81c70fcb5d7b27c56aeaee6efa896a391332bf4c1cc4455321
python3-tkinter-3.6.8-2.el8_0.i686.rpm	SHA-256: 2f8ade620580f1fdd9185a05cdae80d3ea1451ef8762efb051afbbc3e79f5413
python3-tkinter-3.6.8-2.el8_0.x86_64.rpm	SHA-256: c508079709e873a17ab304a72c585956525f3b0d7315bee539c23e129c51aad2

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
python3-3.6.8-2.el8_0.src.rpm	SHA-256: 621136adacbc01015eb636f64c96cfadbd5eaffe00724d4229a250a83c825dc1
s390x
platform-python-3.6.8-2.el8_0.s390x.rpm	SHA-256: 938a5b08d04fc004c49f21ad02a7ca17bcc4855cd4af65960b592ba21041ac26
platform-python-debug-3.6.8-2.el8_0.s390x.rpm	SHA-256: 828401604765ef4b9893c7640d1278d0e543107a1e75165d8ac3248b05a79323
platform-python-devel-3.6.8-2.el8_0.s390x.rpm	SHA-256: f169d06a18f18ccb54956b88adfb3ff7ac935c47d3edf9780c902ed113977e1a
python3-debuginfo-3.6.8-2.el8_0.s390x.rpm	SHA-256: e781ba2c6d775b66b798d57259588ea1c5592d6bad5f634b813ae2cd1e92ad95
python3-debuginfo-3.6.8-2.el8_0.s390x.rpm	SHA-256: e781ba2c6d775b66b798d57259588ea1c5592d6bad5f634b813ae2cd1e92ad95
python3-debugsource-3.6.8-2.el8_0.s390x.rpm	SHA-256: c77db11f925c0518df18dddbb4efedd2e4b5a785877dea38b9b96814bc98a254
python3-debugsource-3.6.8-2.el8_0.s390x.rpm	SHA-256: c77db11f925c0518df18dddbb4efedd2e4b5a785877dea38b9b96814bc98a254
python3-idle-3.6.8-2.el8_0.s390x.rpm	SHA-256: 92230c01f8239f0d8197ff457a76585de2bf44118c9e3971e2569c099375b1c0
python3-libs-3.6.8-2.el8_0.s390x.rpm	SHA-256: 90b10b9eab1c1d5fe4bc2d244fc9f4355fe0f62663d29ecb71acc993ac9fb2c2
python3-test-3.6.8-2.el8_0.s390x.rpm	SHA-256: 857be5e1864e451a7599c6797b99777ad5c07fa960404aa5ac77f2a337388ee8
python3-tkinter-3.6.8-2.el8_0.s390x.rpm	SHA-256: e0acd4ba40e8505d65a131234e05145d12e111164ec449673554b3e20651e71a

Red Hat Enterprise Linux for Power, little endian 8

SRPM
python3-3.6.8-2.el8_0.src.rpm	SHA-256: 621136adacbc01015eb636f64c96cfadbd5eaffe00724d4229a250a83c825dc1
ppc64le
platform-python-3.6.8-2.el8_0.ppc64le.rpm	SHA-256: c2e2c9b36cd856095f2a949a774cea83477829cc086679117385c0c87b475ff7
platform-python-debug-3.6.8-2.el8_0.ppc64le.rpm	SHA-256: ce578c3269558e9aadf87736bab5273baa341ec16eaeb7396818947f71ccc55b
platform-python-devel-3.6.8-2.el8_0.ppc64le.rpm	SHA-256: df26c3b6127649e57731ce682bbae36b561bb3aec8429b1d8fa7ffb78f04c74c
python3-debuginfo-3.6.8-2.el8_0.ppc64le.rpm	SHA-256: 1d1f162c49da91cdea647d615cf17e8df8457c163a4948a9f14d62daf1eb5ddb
python3-debuginfo-3.6.8-2.el8_0.ppc64le.rpm	SHA-256: 1d1f162c49da91cdea647d615cf17e8df8457c163a4948a9f14d62daf1eb5ddb
python3-debugsource-3.6.8-2.el8_0.ppc64le.rpm	SHA-256: d6a22f4f6c44a844a464e5a51d0fea09a5c2021b834a0df175f125c9a04749f5
python3-debugsource-3.6.8-2.el8_0.ppc64le.rpm	SHA-256: d6a22f4f6c44a844a464e5a51d0fea09a5c2021b834a0df175f125c9a04749f5
python3-idle-3.6.8-2.el8_0.ppc64le.rpm	SHA-256: 3e3a3a314188bc63d4934b35f2cb24dfd301a9c47707e52373529b9605cadfef
python3-libs-3.6.8-2.el8_0.ppc64le.rpm	SHA-256: 03a31ce55600e6d8f3857148f87f4fdfb26d9ef385e3b022c18ea7c6cb6a58f0
python3-test-3.6.8-2.el8_0.ppc64le.rpm	SHA-256: a5dc09a2f36a9e93a9c4f72887950fa0aff85102870d3a833d6d93bf557913c6
python3-tkinter-3.6.8-2.el8_0.ppc64le.rpm	SHA-256: 486d28a95e0e48d05b20ef12034a2c221e8e0e4c3ff8158c9890d2234d3a4f3f

Red Hat Enterprise Linux for ARM 64 8

SRPM
python3-3.6.8-2.el8_0.src.rpm	SHA-256: 621136adacbc01015eb636f64c96cfadbd5eaffe00724d4229a250a83c825dc1
aarch64
platform-python-3.6.8-2.el8_0.aarch64.rpm	SHA-256: c38cfbb19a582a13e6c3e8b4a45d4d3af627f4a54e37ac7cf76c9800af6153c8
platform-python-debug-3.6.8-2.el8_0.aarch64.rpm	SHA-256: 5421f4d745a6903cdede33c0e8b41811f94a5915760ca240c36f4b7bac635f12
platform-python-devel-3.6.8-2.el8_0.aarch64.rpm	SHA-256: e3a3fcdc00d49d30a1fd4cdd777fbfa365483f7a69ce23faae023d5195db648a
python3-debuginfo-3.6.8-2.el8_0.aarch64.rpm	SHA-256: 882d3ddaf43834a780c15690ca8411db22887017930677d8f3facd865aae28fd
python3-debuginfo-3.6.8-2.el8_0.aarch64.rpm	SHA-256: 882d3ddaf43834a780c15690ca8411db22887017930677d8f3facd865aae28fd
python3-debugsource-3.6.8-2.el8_0.aarch64.rpm	SHA-256: d5fddd3147c111b7d6309eba28d4725c196189da859df891aff8ffeb0e27c393
python3-debugsource-3.6.8-2.el8_0.aarch64.rpm	SHA-256: d5fddd3147c111b7d6309eba28d4725c196189da859df891aff8ffeb0e27c393
python3-idle-3.6.8-2.el8_0.aarch64.rpm	SHA-256: 77a06eae38bef54c051d19866cd1927a5197a435658e33a87be687323cd81904
python3-libs-3.6.8-2.el8_0.aarch64.rpm	SHA-256: 1959185f077d8e556708eaa2aa3083767b47844c8100af3000d9dfce0e49b55c
python3-test-3.6.8-2.el8_0.aarch64.rpm	SHA-256: 6c3236256de40e9f72aadebd1ec9a2e3cd2cc7ed840d7a355ac2211f5a5cc0e7
python3-tkinter-3.6.8-2.el8_0.aarch64.rpm	SHA-256: e432226a4047418fefeacd1de49d3b756bb9dd2e4a813a7bae1500538928e895