ELA-885-1 python3.4 security update

several vulnerabilities

2023-06-30
Packagepython3.4
Version3.4.2-1+deb8u15 (jessie)
Related CVEs CVE-2015-20107 CVE-2022-45061


Several vulnerabilities were fixed in the Python3 interpreter.

CVE-2015-20107

The mailcap module did not add escape characters into commands discovered in the system mailcap file.

CVE-2022-45061

Quadratic time in the IDNA decoder.


For Debian 8 jessie, these problems have been fixed in version 3.4.2-1+deb8u15.

We recommend that you upgrade your python3.4 packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.