Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 3 rhel_software_collections:3::el6 | python27-python | 0:2.7.16-6.el6 |
| Red Hat · RHEL 3 rhel_software_collections:3::el6 | python27-python-debug | 0:2.7.16-6.el6 |
| Red Hat · RHEL 3 rhel_software_collections:3::el6 | python27-python-debuginfo | 0:2.7.16-6.el6 |
| Red Hat · RHEL 3 rhel_software_collections:3::el6 | python27-python-devel | 0:2.7.16-6.el6 |
| Red Hat · RHEL 3 rhel_software_collections:3::el6 | python27-python-libs | 0:2.7.16-6.el6 |
| Red Hat · RHEL 3 rhel_software_collections:3::el6 | python27-python-test | 0:2.7.16-6.el6 |
| Red Hat · RHEL 3 rhel_software_collections:3::el6 | python27-python-tools | 0:2.7.16-6.el6 |
| Red Hat · RHEL 3 rhel_software_collections:3::el6 | python27-tkinter | 0:2.7.16-6.el6 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | python27-python | 0:2.7.16-6.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | python27-python-debug | 0:2.7.16-6.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | python27-python-debuginfo | 0:2.7.16-6.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | python27-python-devel | 0:2.7.16-6.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | python27-python-libs | 0:2.7.16-6.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | python27-python-test | 0:2.7.16-6.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | python27-python-tools | 0:2.7.16-6.el7 |
| Red Hat · RHEL 3 rhel_software_collections:3::el7 | python27-tkinter | 0:2.7.16-6.el7 |
Vulnerabilities 2
-
Critical 9.8
A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 a…
-
Critical 9.1CVE-2019-9948 EPSS 12%
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypa…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://bugs.python.org/issue35907
-
article
https://bugs.python.org/issue36742
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1695570
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1718388
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_1700.json
-
report
https://access.redhat.com/security/cve/CVE-2019-9948
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-9948
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9948
-
report
https://access.redhat.com/security/cve/CVE-2019-10160
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-10160
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-10160
-
article
https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization2.html