Fixed packages 108
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | babel | 0:2.5.1-9.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | Cython | 0:0.28.1-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | numpy | 1:1.14.2-10.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | pytest | 0:3.4.2-13.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-attrs | 0:17.4.0-10.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-backports | 0:1.0-15.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-backports-ssl_match_hostname | 0:3.5.0.1-11.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-chardet | 0:3.0.4-10.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-coverage | 0:4.5.1-4.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-dns | 0:1.15.0-9.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-docs | 0:2.7.15-4.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-docutils | 0:0.14-12.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-funcsigs | 0:1.0.2-13.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-idna | 0:2.5-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-ipaddress | 0:1.0.18-6.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-jinja2 | 0:2.10-8.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-lxml | 0:4.2.3-3.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-markupsafe | 0:0.23-19.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-mock | 0:2.0.0-13.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-nose | 0:1.3.7-30.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-nose-docs | 0:1.3.7-30.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pluggy | 0:0.6.0-8.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psycopg2 | 0:2.7.5-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psycopg2-doc | 0:2.7.5-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-py | 0:1.5.3-6.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pygments | 0:2.2.0-20.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pymongo | 0:3.6.1-9.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-PyMySQL | 0:0.8.0-10.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pysocks | 0:1.6.8-6.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pytest-mock | 0:1.9.0-4.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-requests | 0:2.20.0-2.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-setuptools_scm | 0:1.15.7-6.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-six | 0:1.11.0-5.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-sqlalchemy | 0:1.3.2-1.module+el8.0.0+2974+76d21d2e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-sqlalchemy-doc | 0:1.3.2-1.module+el8.0.0+2974+76d21d2e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-urllib3 | 0:1.23-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-virtualenv | 0:15.1.0-18.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-wheel | 1:0.30.0-13.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2 | 0:2.7.15-22.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-attrs | 0:17.4.0-10.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-babel | 0:2.5.1-9.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-backports | 0:1.0-15.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-backports-ssl_match_hostname | 0:3.5.0.1-11.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-bson | 0:3.6.1-9.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-bson-debuginfo | 0:3.6.1-9.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-chardet | 0:3.0.4-10.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-coverage | 0:4.5.1-4.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-coverage-debuginfo | 0:4.5.1-4.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-Cython | 0:0.28.1-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-Cython-debuginfo | 0:0.28.1-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-debug | 0:2.7.15-22.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-debuginfo | 0:2.7.15-22.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-debugsource | 0:2.7.15-22.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-devel | 0:2.7.15-22.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-dns | 0:1.15.0-9.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-docs | 0:2.7.15-4.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-docs-info | 0:2.7.15-4.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-docutils | 0:0.14-12.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-funcsigs | 0:1.0.2-13.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-idna | 0:2.5-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-ipaddress | 0:1.0.18-6.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-jinja2 | 0:2.10-8.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-libs | 0:2.7.15-22.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-lxml | 0:4.2.3-3.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-lxml-debuginfo | 0:4.2.3-3.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-markupsafe | 0:0.23-19.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-mock | 0:2.0.0-13.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-nose | 0:1.3.7-30.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-numpy | 1:1.14.2-10.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-numpy-debuginfo | 1:1.14.2-10.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-numpy-doc | 1:1.14.2-10.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-numpy-f2py | 1:1.14.2-10.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pip | 0:9.0.3-13.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pluggy | 0:0.6.0-8.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-psycopg2 | 0:2.7.5-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-psycopg2-debug | 0:2.7.5-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-psycopg2-debug-debuginfo | 0:2.7.5-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-psycopg2-debuginfo | 0:2.7.5-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-psycopg2-tests | 0:2.7.5-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-py | 0:1.5.3-6.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pygments | 0:2.2.0-20.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pymongo | 0:3.6.1-9.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pymongo-debuginfo | 0:3.6.1-9.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pymongo-gridfs | 0:3.6.1-9.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-PyMySQL | 0:0.8.0-10.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pysocks | 0:1.6.8-6.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pytest | 0:3.4.2-13.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pytest-mock | 0:1.9.0-4.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pytz | 0:2017.2-12.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pyyaml | 0:3.12-16.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pyyaml-debuginfo | 0:3.12-16.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-requests | 0:2.20.0-2.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-rpm-macros | 0:3-38.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-scipy | 0:1.0.0-19.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-scipy-debuginfo | 0:1.0.0-19.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-setuptools | 0:39.0.1-11.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-setuptools_scm | 0:1.15.7-6.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-six | 0:1.11.0-5.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-sqlalchemy | 0:1.3.2-1.module+el8.0.0+2974+76d21d2e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-test | 0:2.7.15-22.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-tkinter | 0:2.7.15-22.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-tools | 0:2.7.15-22.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-urllib3 | 0:1.23-7.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-virtualenv | 0:15.1.0-18.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-wheel | 1:0.30.0-13.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | pytz | 0:2017.2-12.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | PyYAML | 0:3.12-16.module+el8.0.0+2961+596d0223 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | scipy | 0:1.0.0-19.module+el8.0.0+2961+596d0223 |
Vulnerabilities 3
-
Critical 9.8
SQLAlchemy vulnerable to SQL Injection via order_by parameter
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
-
High 7.8
SQLAlchemy is vulnerable to SQL Injection via group_by parameter
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
-
Medium 5.3
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorr…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization.html
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1674059
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1678520
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1688543
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0981.json
-
report
https://access.redhat.com/security/cve/CVE-2019-7164
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-7164
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-7164
-
report
https://access.redhat.com/security/cve/CVE-2019-7548
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-7548
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-7548
-
report
https://access.redhat.com/security/cve/CVE-2019-9636
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-9636
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9636