Summary
python2
[2.7.18-4.0.1]
- Add Oracle Linux distribution in platform.py [Orabug: 20812544]
[2.7.18-4]
- Security fix for CVE-2021-3177
Resolves: rhbz#1919163
[2.7.18-3]
- Fixes for bundling prefix=/app build in gimp/inkscape containers
Resolves: rhbz#1907592
[2.7.18-2]
- Security fix for CVE-2020-26116: Reject control chars in HTTP method in httplib.putrequest
Resolves: rhbz#1883258
[2.7.18-1]
- Update to 2.7.18
Resolves: rhbz#1886754
python2-setuptools
[39.0.1-13]
- When building for Flatpak inclusion, build in bootstrap mode
Resolves: rhbz#1907597
python-backports
[1.0-16]
- Update python macros to python2 versioned macros
- Issue found when rebuilding the python27 module to include CVE fixes
- Related: rhbz#1883890 rhbz#1883258
python-backports-ssl_match_hostname
[3.5.0.1-12]
- Remove unversioned Provides
- Resolves: rhbz#1908300
Fixed packages 62
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | babel | 0:2.5.1-9.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python-nose-docs | 0:1.3.7-30.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python-psycopg2-doc | 0:2.7.5-7.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python-sqlalchemy-doc | 0:1.3.2-2.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2 | 0:2.7.18-4.0.1.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-attrs | 0:17.4.0-10.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-babel | 0:2.5.1-9.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-backports | 0:1.0-16.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-backports-ssl_match_hostname | 0:3.5.0.1-12.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-bson | 0:3.6.1-11.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-chardet | 0:3.0.4-10.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-coverage | 0:4.5.1-4.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-Cython | 0:0.28.1-7.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-debug | 0:2.7.18-4.0.1.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-devel | 0:2.7.18-4.0.1.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-dns | 0:1.15.0-10.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-docs | 0:2.7.16-2.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-docs-info | 0:2.7.16-2.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-docutils | 0:0.14-12.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-funcsigs | 0:1.0.2-13.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-idna | 0:2.5-7.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-ipaddress | 0:1.0.18-6.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-jinja2 | 0:2.10-8.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-libs | 0:2.7.18-4.0.1.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-lxml | 0:4.2.3-4.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-markupsafe | 0:0.23-19.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-mock | 0:2.0.0-13.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-nose | 0:1.3.7-30.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-numpy | 1:1.14.2-16.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-numpy-doc | 1:1.14.2-16.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-numpy-f2py | 1:1.14.2-16.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-pip | 0:9.0.3-18.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-pip-wheel | 0:9.0.3-18.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-pluggy | 0:0.6.0-8.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-psycopg2 | 0:2.7.5-7.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-psycopg2-debug | 0:2.7.5-7.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-psycopg2-tests | 0:2.7.5-7.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-py | 0:1.5.3-6.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-pygments | 0:2.2.0-20.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-pymongo | 0:3.6.1-11.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-pymongo-gridfs | 0:3.6.1-11.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-PyMySQL | 0:0.8.0-10.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-pysocks | 0:1.6.8-6.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-pytest | 0:3.4.2-13.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-pytest-mock | 0:1.9.0-4.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-pytz | 0:2017.2-12.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-pyyaml | 0:3.12-16.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-requests | 0:2.20.0-3.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-rpm-macros | 0:3-38.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-scipy | 0:1.0.0-20.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-setuptools | 0:39.0.1-13.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-setuptools_scm | 0:1.15.7-6.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-setuptools-wheel | 0:39.0.1-13.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-six | 0:1.11.0-6.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-sqlalchemy | 0:1.3.2-2.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-test | 0:2.7.18-4.0.1.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-tkinter | 0:2.7.18-4.0.1.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-tools | 0:2.7.18-4.0.1.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-urllib3 | 0:1.24.2-3.module+el8.4.0+20050+79c7b4ee |
| Oracle Linux · 8 | python2-virtualenv | 0:15.1.0-19.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-wheel | 1:0.31.1-2.module+el8.3.0+7833+4aaf98ce |
| Oracle Linux · 8 | python2-wheel-wheel | 1:0.31.1-2.module+el8.3.0+7833+4aaf98ce |
Vulnerabilities 4
-
Critical 9.8CVE-2021-3177 EPSS 24%
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code exec…
-
Medium 6.5
CRLF injection in urllib3
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.
-
Medium 6.1
lxml vulnerable to Cross-site Scripting
A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML…
-
Unscored —
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF in…