Summary
[2.7.5-86.0.1]
- Add Oracle Linux distribution in platform.py [orabug 20812544]
[2.7.5-86]
- Security fix for CVE-2019-10160
Resolves: rhbz#1718388
[2.7.5-85]
- Security fix for CVE-2019-9948
Resolves: rhbz#1704174
[2.7.5-84]
- Disallow control chars in http URLs
- Fixes CVE-2019-9740 and CVE-2019-9947
Resolves: rhbz#1704362 and rhbz#1703530
[2.7.5-83]
- Remove unversioned obsoletes
Resolves: rhbz#1703600
[2.7.5-82]
- Updated fix for CVE-2019-9636
Resolves: rhbz#1689317
[2.7.5-81]
- Security fix for CVE-2019-9636
Resolves: rhbz#1689317
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | python | 0:2.7.5-86.0.1.el7 |
| Oracle Linux · 7 | python-debug | 0:2.7.5-86.0.1.el7 |
| Oracle Linux · 7 | python-devel | 0:2.7.5-86.0.1.el7 |
| Oracle Linux · 7 | python-libs | 0:2.7.5-86.0.1.el7 |
| Oracle Linux · 7 | python-test | 0:2.7.5-86.0.1.el7 |
| Oracle Linux · 7 | python-tools | 0:2.7.5-86.0.1.el7 |
| Oracle Linux · 7 | tkinter | 0:2.7.5-86.0.1.el7 |
Vulnerabilities 5
-
Critical 9.1CVE-2019-9948 EPSS 12%
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypa…
-
Medium 6.5
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …
-
Medium 5.9
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.…
-
Medium 5.4
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …
-
Medium 5.3CVE-2018-14647 EPSS 11%
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it eas…