Critical DLA-1834-1 6 CVEs

python2.7 - security update

Published Jun 24, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	python2.7	2.7.9-2+deb8u3

Vulnerabilities 6

Critical 9.1

CVE-2019-9948 EPSS 12%

urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypa…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine

Mar 23, 2019
Medium 6.5

CVE-2019-9740

An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu

Mar 13, 2019
Medium 5.9

CVE-2019-5010 Public exploit EPSS 21%

An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine

Oct 31, 2019
Medium 5.4

CVE-2019-9947

An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux

Mar 23, 2019
Medium 5.3

CVE-2018-14647 EPSS 11%

Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it eas…

The Python Project Python python3.4 python3.5 Debian Ubuntu Alpine

Sep 25, 2018
Medium 5.3

CVE-2019-9636

Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorr…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine

Mar 8, 2019