High ELSA-2019-4884 1 CVE

Important: python security update (Oracle Linux 7)

Published Dec 20, 2019 · Updated Dec 20, 2019

Ecosystem: Oracle Linux

Summary

[2.7.5-86.0.3]
- Prefix dot in domain for proper subdomain validation [CVE-2018-20852][Orabug: 30114725]

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 7	python	0:2.7.5-86.0.3.el7
Oracle Linux · 7	python-debug	0:2.7.5-86.0.3.el7
Oracle Linux · 7	python-devel	0:2.7.5-86.0.3.el7
Oracle Linux · 7	python-libs	0:2.7.5-86.0.3.el7
Oracle Linux · 7	python-test	0:2.7.5-86.0.3.el7
Oracle Linux · 7	python-tools	0:2.7.5-86.0.3.el7
Oracle Linux · 7	tkinter	0:2.7.5-86.0.3.el7

Vulnerabilities 1

Medium 4.3

CVE-2018-20852

http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly valida…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu

Jul 13, 2019