Fixed packages 33
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-docs | 0:3.6.7-2.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-docutils | 0:0.14-12.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-nose | 0:1.3.7-30.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-nose-docs | 0:1.3.7-30.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pygments | 0:2.2.0-20.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pymongo | 0:3.6.1-9.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pymongo-doc | 0:3.6.1-9.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-PyMySQL | 0:0.8.0-10.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-sqlalchemy | 0:1.3.2-1.module+el8.0.0+2975+e0f02136 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-sqlalchemy-doc | 0:1.3.2-1.module+el8.0.0+2975+e0f02136 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-virtualenv | 0:15.1.0-18.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-virtualenv-doc | 0:15.1.0-18.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-wheel | 1:0.30.0-13.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-bson | 0:3.6.1-9.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-bson-debuginfo | 0:3.6.1-9.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-docs | 0:3.6.7-2.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-docutils | 0:0.14-12.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-nose | 0:1.3.7-30.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-pygments | 0:2.2.0-20.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-pymongo | 0:3.6.1-9.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-pymongo-debuginfo | 0:3.6.1-9.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-pymongo-gridfs | 0:3.6.1-9.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-PyMySQL | 0:0.8.0-10.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-scipy | 0:1.0.0-19.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-scipy-debuginfo | 0:1.0.0-19.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-sqlalchemy | 0:1.3.2-1.module+el8.0.0+2975+e0f02136 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-virtualenv | 0:15.1.0-18.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3-wheel | 1:0.30.0-13.module+el8.0.0+2966+d39a1df3 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python36 | 0:3.6.8-2.module+el8.0.0+2975+e0f02136 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python36-debug | 0:3.6.8-2.module+el8.0.0+2975+e0f02136 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python36-devel | 0:3.6.8-2.module+el8.0.0+2975+e0f02136 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python36-rpm-macros | 0:3.6.8-2.module+el8.0.0+2975+e0f02136 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | scipy | 0:1.0.0-19.module+el8.0.0+2966+d39a1df3 |
Vulnerabilities 2
-
Critical 9.8
SQLAlchemy vulnerable to SQL Injection via order_by parameter
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
-
High 7.8
SQLAlchemy is vulnerable to SQL Injection via group_by parameter
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1674059
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1678520
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_0984.json
-
report
https://access.redhat.com/security/cve/CVE-2019-7164
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-7164
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-7164
-
report
https://access.redhat.com/security/cve/CVE-2019-7548
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-7548
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-7548