python-3: Multiple Vulnerabilities Regarding to 3.10.0

[CamberLoid]

CVE IDs

(Omitted)

Other security advisory IDs

N/A

Description

Python has several release on branch 3.10.x since 3.10.0. The latest release on the branch is version 3.10.8, including several bugfix and security patches. A detailed change log can be found on https://docs.python.org/3.10/whatsnew/changelog.html

Fixed issues:

• [security] list_resize(): integer overflow if newsize is too large python/cpython#97616
• [security] Tools/scripts/get-remote-certificate.py is vulnerable to shell code injection python/cpython#97612
• [CVE-2015-20107] mailcap.findmatch: document shell command Injection danger in filename parameter python/cpython#68966
• CVE-2020-10735: Prevent DoS by large int<->str conversions python/cpython#95778
• [security] CVE-2021-28861: http.server: Open Redirection if the URL path starts with // python/cpython#87389
• Use After Free when assigning into a memoryview python/cpython#92888

Patches

N/A

PoC(s)

N/A

[CamberLoid]

Fixed via #4290