Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode | python | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode | python-debug | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode | python-debuginfo | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode | python-devel | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode | python-libs | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode | python-test | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode | python-tools | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::computenode | tkinter | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server | python | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server | python-debug | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server | python-debuginfo | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server | python-devel | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server | python-libs | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server | python-test | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server | python-tools | 0:2.7.5-83.el7_6 |
| Red Hat · RHEL 7.6 EUS rhel_eus:7.6::server | tkinter | 0:2.7.5-83.el7_6 |
Vulnerabilities 4
-
Critical 9.1CVE-2019-9948 EPSS 12%
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypa…
-
Medium 6.5
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …
-
Medium 5.4
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection …
-
Medium 5.3CVE-2018-14647 EPSS 11%
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it eas…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1631822
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1688169
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1695570
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1695572
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1462.json
-
report
https://access.redhat.com/security/cve/CVE-2018-14647
-
advisory
https://www.cve.org/CVERecord?id=CVE-2018-14647
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-14647
-
article
https://bugs.python.org/issue34623
-
report
https://access.redhat.com/security/cve/CVE-2019-9740
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-9740
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9740
-
report
https://access.redhat.com/security/cve/CVE-2019-9947
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-9947
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9947
-
report
https://access.redhat.com/security/cve/CVE-2019-9948
-
advisory
https://www.cve.org/CVERecord?id=CVE-2019-9948
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-9948