Fixed packages 24
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server | python | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server | python-debug | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server | python-debuginfo | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server | python-devel | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server | python-libs | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server | python-test | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server | python-tools | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 AUS rhel_aus:7.4::server | tkinter | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server | python | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server | python-debug | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server | python-debuginfo | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server | python-devel | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server | python-libs | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server | python-test | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server | python-tools | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 E4S rhel_e4s:7.4::server | tkinter | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server | python | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server | python-debug | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server | python-debuginfo | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server | python-devel | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server | python-libs | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server | python-test | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server | python-tools | 0:2.7.5-63.el7_4 |
| Red Hat · RHEL 7.4 TUS rhel_tus:7.4::server | tkinter | 0:2.7.5-63.el7_4 |
Vulnerabilities 6
-
Critical 9.1CVE-2019-9948 EPSS 12%
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypa…
-
Medium 6.5
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the di…
-
Medium 6.5
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …
-
Medium 5.4
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …
-
Medium 5.3CVE-2018-14647 EPSS 11%
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it eas…
-
Medium 4.3
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3li…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1549191
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1549192
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1631822
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1688169
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1695570
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1695572
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1346.json
-
report
https://access.redhat.com/security/cve/CVE-2018-1060
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-1060
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1060
-
article
https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-5-final
-
report
https://access.redhat.com/security/cve/CVE-2018-1061
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-1061
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-1061
-
report
https://access.redhat.com/security/cve/CVE-2018-14647
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-14647
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-14647
-
article
https://bugs.python.org/issue34623
-
report
https://access.redhat.com/security/cve/CVE-2019-9740
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-9740
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9740
-
report
https://access.redhat.com/security/cve/CVE-2019-9947
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-9947
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9947
-
report
https://access.redhat.com/security/cve/CVE-2019-9948
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-9948
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9948