Summary
python-PyMySQL
[0.8.0-10]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-docs
[3.6.7-2]
- Bumping due to problems with modular RPM upgrade path
- Resolves: rhbz#1695587
python-docutils
[0.14-12]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-nose
[1.3.7-30]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-pygments
[2.2.0-20]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-pymongo
[3.6.1-9]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-sqlalchemy
[1.3.2-1]
- Rebase to 1.3.2 to fix CVE-2019-7164 and CVE-2019-7548
Resolves: rhbz#1693978
[1.2.8-7]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-virtualenv
[15.1.0-18]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python-wheel
[1:0.30.0-13]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
python36
[3.6.8-2]
- Bumping due to problems with modular RPM upgrade path
- Resolves: rhbz#1695587
scipy
[1.0.0-19]
- Bumping due to problems with modular RPM upgrade path (#1695587)
- Related: rhbz#1693974
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python-nose-docs | 0:1.3.7-30.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python-pymongo-doc | 0:3.6.1-9.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python-sqlalchemy-doc | 0:1.3.2-1.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python-virtualenv-doc | 0:15.1.0-18.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-bson | 0:3.6.1-9.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-docs | 0:3.6.7-2.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-docutils | 0:0.14-12.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-nose | 0:1.3.7-30.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-pygments | 0:2.2.0-20.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-pymongo | 0:3.6.1-9.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-pymongo-gridfs | 0:3.6.1-9.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-PyMySQL | 0:0.8.0-10.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-scipy | 0:1.0.0-19.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-sqlalchemy | 0:1.3.2-1.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-virtualenv | 0:15.1.0-18.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python3-wheel | 1:0.30.0-13.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python36 | 0:3.6.8-2.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python36-debug | 0:3.6.8-2.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python36-devel | 0:3.6.8-2.module+el8.0.0+5217+22a49f57 |
| Oracle Linux · 8 | python36-rpm-macros | 0:3.6.8-2.module+el8.0.0+5217+22a49f57 |
Vulnerabilities 2
-
Critical 9.8
SQLAlchemy vulnerable to SQL Injection via order_by parameter
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
-
High 7.8
SQLAlchemy is vulnerable to SQL Injection via group_by parameter
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.