Medium ELSA-2020-1132 2 CVEs

Moderate: python3 security update (Oracle Linux 7)

Published Apr 6, 2020 · Updated Apr 6, 2020

Ecosystem: Oracle Linux

Summary

[3.6.8-13.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]

[3.6.8-13]
- Security fix for CVE-2019-16056
Resolves: rhbz#1750774

[3.6.8-12]
- Add support for OpenSSL FIPS mode
- Fix faulthandler stack size
Resolves: rhbz#1732908

[3.6.8-11]
- Security fix for CVE-2018-20852
Resolves: rhbz#1741552

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 7	python3	0:3.6.8-13.0.1.el7
Oracle Linux · 7	python3-debug	0:3.6.8-13.0.1.el7
Oracle Linux · 7	python3-devel	0:3.6.8-13.0.1.el7
Oracle Linux · 7	python3-idle	0:3.6.8-13.0.1.el7
Oracle Linux · 7	python3-libs	0:3.6.8-13.0.1.el7
Oracle Linux · 7	python3-test	0:3.6.8-13.0.1.el7
Oracle Linux · 7	python3-tkinter	0:3.6.8-13.0.1.el7

Vulnerabilities 2

Medium 5.3

CVE-2019-16056

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The …

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine

Sep 6, 2019
Medium 4.3

CVE-2018-20852

http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly valida…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu

Jul 13, 2019