Summary
Cython
[0.28.1-7]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
PyYAML
[3.12-16]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
babel
[2.5.1-9]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
numpy
[1.14.2-10]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
pytest
[3.4.2-13]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-PyMySQL
[0.8.0-10]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-attrs
[17.4.0-10]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-backports
[1.0-15]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-backports-ssl_match_hostname
[3.5.0.1-11]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-chardet
[3.0.4-10]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-coverage
[4.5.1-4]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-dns
[1.15.0-9]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
[1.15.0-8]
- First version for python27 module
python-docs
[2.7.15-4]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-docutils
[0.14-12]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-funcsigs
[1.0.2-13]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-idna
[2.5-7]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-ipaddress
[1.0.18-6]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-jinja2
[2.10-8]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-lxml
[4.2.3-3]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-markupsafe
[0.23-19]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-mock
[2.0.0-13]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-nose
[1.3.7-30]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-pluggy
[0.6.0-8]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-psycopg2
[2.7.5-7]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-py
[1.5.3-6]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-pygments
[2.2.0-20]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-pymongo
[3.6.1-9]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-pysocks
[1.6.8-6]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-pytest-mock
[1.9.0-4]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
[1.9.0-2]
- Make possible to disable python3 subpackage
[1.9.0-2]
- First version for python27 module
python-requests
[2.20.0-2]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-setuptools_scm
[1.15.7-6]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-six
[1.11.0-5]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-sqlalchemy
[1.3.2-1]
- Rebase to 1.3.2 to fix CVE-2019-7164 and CVE-2019-7548
Resolves: rhbz#1693978
[1.2.8-7]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-urllib3
[1.23-7]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-virtualenv
[15.1.0-18]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-wheel
[1:0.30.0-13]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python2
[2.7.15-22.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]
[2.7.15-22]
- Security fix for CVE-2019-9636 (rhbz#1693974)
python2-pip
[9.0.3-13]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python2-rpm-macros
[3-38]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python2-setuptools
[39.0.1-11]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
pytz
[2017.2-12]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
scipy
[1.0.0-19]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
Fixed packages 59
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | babel | 0:2.5.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python-nose-docs | 0:1.3.7-30.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python-psycopg2-doc | 0:2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python-sqlalchemy-doc | 0:1.3.2-1.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2 | 0:2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-attrs | 0:17.4.0-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-babel | 0:2.5.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-backports | 0:1.0-15.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-backports-ssl_match_hostname | 0:3.5.0.1-11.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-bson | 0:3.6.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-chardet | 0:3.0.4-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-coverage | 0:4.5.1-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-Cython | 0:0.28.1-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-debug | 0:2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-devel | 0:2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-dns | 0:1.15.0-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-docs | 0:2.7.15-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-docs-info | 0:2.7.15-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-docutils | 0:0.14-12.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-funcsigs | 0:1.0.2-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-idna | 0:2.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-ipaddress | 0:1.0.18-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-jinja2 | 0:2.10-8.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-libs | 0:2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-lxml | 0:4.2.3-3.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-markupsafe | 0:0.23-19.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-mock | 0:2.0.0-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-nose | 0:1.3.7-30.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-numpy | 1:1.14.2-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-numpy-doc | 1:1.14.2-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-numpy-f2py | 1:1.14.2-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-pip | 0:9.0.3-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-pluggy | 0:0.6.0-8.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-psycopg2 | 0:2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-psycopg2-debug | 0:2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-psycopg2-tests | 0:2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-py | 0:1.5.3-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-pygments | 0:2.2.0-20.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-pymongo | 0:3.6.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-pymongo-gridfs | 0:3.6.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-PyMySQL | 0:0.8.0-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-pysocks | 0:1.6.8-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-pytest | 0:3.4.2-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-pytest-mock | 0:1.9.0-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-pytz | 0:2017.2-12.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-pyyaml | 0:3.12-16.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-requests | 0:2.20.0-2.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-rpm-macros | 0:3-38.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-scipy | 0:1.0.0-19.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-setuptools | 0:39.0.1-11.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-setuptools_scm | 0:1.15.7-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-six | 0:1.11.0-5.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-sqlalchemy | 0:1.3.2-1.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-test | 0:2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-tkinter | 0:2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-tools | 0:2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-urllib3 | 0:1.23-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-virtualenv | 0:15.1.0-18.module+el8.0.0+5233+93973c75 |
| Oracle Linux · 8 | python2-wheel | 1:0.30.0-13.module+el8.0.0+5233+93973c75 |
Vulnerabilities 3
-
Critical 9.8
SQLAlchemy vulnerable to SQL Injection via order_by parameter
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
-
High 7.8
SQLAlchemy is vulnerable to SQL Injection via group_by parameter
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
-
Medium 5.3
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorr…