python2.7 - security update

Fixed packages 1

Vulnerabilities 8

• Critical 9.1
  CVE-2019-9948 EPSS 12%

  urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypa…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine
  Mar 23, 2019
• Medium 6.5
  CVE-2019-9740

  An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu
  Mar 13, 2019
• Medium 5.9
  CVE-2019-5010 Public exploit EPSS 21%

  An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine
  Oct 31, 2019
• Medium 5.5
  CVE-2019-20907

  In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when …

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine
  Jul 13, 2020
• Medium 5.4
  CVE-2019-9947

  An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux
  Mar 23, 2019
• Medium 5.3
  CVE-2019-16056

  An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The …

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine
  Sep 6, 2019
• Medium 5.3
  CVE-2019-9636

  Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorr…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine
  Mar 8, 2019
• Medium 4.3
  CVE-2018-20852

  http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly valida…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu
  Jul 13, 2019