Medium ELSA-2020-1131 2 CVEs

Moderate: python security update (Oracle Linux 7)

Published Apr 6, 2020 · Updated Apr 6, 2020

Ecosystem: Oracle Linux

Summary

[2.7.5-88.0.1]
- Add Oracle Linux distribution in platform.py [orabug 20812544]

[2.7.5-88]
- Security fix for CVE-2019-16056
Resolves: rhbz#1750773

[2.7.5-87]
- Fix CVE-2018-20852
Resolves: rhbz#1741551

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 7	python	0:2.7.5-88.0.1.el7
Oracle Linux · 7	python-debug	0:2.7.5-88.0.1.el7
Oracle Linux · 7	python-devel	0:2.7.5-88.0.1.el7
Oracle Linux · 7	python-libs	0:2.7.5-88.0.1.el7
Oracle Linux · 7	python-test	0:2.7.5-88.0.1.el7
Oracle Linux · 7	python-tools	0:2.7.5-88.0.1.el7
Oracle Linux · 7	tkinter	0:2.7.5-88.0.1.el7

Vulnerabilities 2

Medium 5.3

CVE-2019-16056

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The …

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine

Sep 6, 2019
Medium 4.3

CVE-2018-20852

http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly valida…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu

Jul 13, 2019