Fedora 40: python-idna 2024-098b5d9719 Security Advisory Updates
Summary
A library to support the Internationalised Domain Names in Applications (IDNA)
protocol as specified in RFC 5891
version of the protocol is often referred to as "IDNA2008" and can produce
different results from the earlier standard from 2003.
The library is also intended to act as a suitable drop-in replacement for the
"encodings.idna" module that comes with the Python standard library but
currently only supports the older 2003 specification.
Update Information:
Update to 3.7 (rhbz#2274439), security fix for CVE-2024-3651
Change Log
* Thu Apr 11 2024 Lumir Balhar
References
[ 1 ] Bug #2274439 - python-idna-3.7 is available https://bugzilla.redhat.com/show_bug.cgi?id=2274439 [ 2 ] Bug #2274780 - TRIAGE CVE-2024-3651 python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode() [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2274780
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-098b5d9719' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label