As a general rule when self-connecting, leave at least four hours and preferably more. You willshould not need to go through security again, but anything less than that is dangerous because a delay can easily cause you to be late. You're connecting from long-haul to short-haul where this isn't as critical as the reverse (many flights daily from CDG to Italy) but of course you will be on the hook for a new ticket if you misconnect.

Even with a four-hour layover I have come very close to missing a flight when self-connecting, and that was a short hop from BOS to JFK and then onwards to AMS.