python-idna-2.5-7.el8_10

エラータID: AXSA:2024-8515:02

Release date: 
Thursday, July 4, 2024 - 18:35
Subject: 
python-idna-2.5-7.el8_10
Affected Channels: 
Asianux Server 8 for x86_64
Severity: 
Moderate
Description: 

The hsakmt packages include a thunk library for AMD's Heterogeneous System Architecture (HSA) Linux kernel driver (amdkfd).

Security Fix(es):

* python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() (CVE-2024-3651)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2024-3651
RESERVED

Solution: 

Update packages.

CVEs: 
CVE-2024-3651
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Additional Info: 

N/A

Download: 

SRPMS
  1. python-idna-2.5-7.el8_10.src.rpm
    MD5: 03a7bf678cdb1c244ba27d228427e0c0
    SHA-256: 9413c65a0e9954aaa5c0e1b996a14a31d3664960ad15fe5fa63f4add6f393410
    Size: 147.84 kB

Asianux Server 8 for x86_64
  1. python3-idna-2.5-7.el8_10.noarch.rpm
    MD5: fea7789e37def2a7817cd36a17125df6
    SHA-256: 2132e0e52f04b4f5aae4ec52bff460fc1469f9107358350e4a590fc2afbcdbfa
    Size: 101.53 kB