Skip to content
OpenAdvisories
Medium RLSA-2019:3335 6 CVEs

Moderate: python27:2.7 security and bug fix update

Published Nov 5, 2019 · Updated Feb 4, 2026

Ecosystem: Rocky Linux

Summary

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing.

Security Fix(es):

* numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution (CVE-2019-6446)

* python: CRLF injection via the query part of the url passed to urlopen() (CVE-2019-9740)

* python: CRLF injection via the path part of the url passed to urlopen() (CVE-2019-9947)

* python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms (CVE-2019-9948)

* python-urllib3: CRLF injection due to not encoding the '\r\n' sequence leading to possible attack on internal service (CVE-2019-11236)

* python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.1 Release Notes linked from the References section.

Fixed packages 49

ReleasePackageFixed in
Rocky Linux · 8 babel 0:2.5.1-9.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 Cython 0:0.28.1-7.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 Cython 0:0.28.1-7.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 pytest 0:3.4.2-13.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 pytest 0:3.4.2-13.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-attrs 0:17.4.0-10.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 python-attrs 0:17.4.0-10.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-chardet 0:3.0.4-10.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 python-chardet 0:3.0.4-10.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-coverage 0:4.5.1-4.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 python-coverage 0:4.5.1-4.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-dns 0:1.15.0-10.module+el8.7.0+1062+663ba31c
Rocky Linux · 8 python-dns 0:1.15.0-10.el8
Rocky Linux · 8 python-dns 0:1.15.0-10.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-docs 0:2.7.16-2.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-docutils 0:0.14-12.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-docutils 0:0.14-12.module+el8.3.0+120+426d8baf
Rocky Linux · 8 python-funcsigs 0:1.0.2-13.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-idna 0:2.5-7.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 python-idna 0:2.5-7.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-ipaddress 0:1.0.18-6.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-jinja2 0:2.10-8.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-lxml 0:4.2.3-3.el8
Rocky Linux · 8 python-markupsafe 0:0.23-19.el8
Rocky Linux · 8 python-markupsafe 0:0.23-19.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 python-mock 0:2.0.0-13.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-nose 0:1.3.7-30.module+el8.3.0+120+426d8baf
Rocky Linux · 8 python-pluggy 0:0.6.0-8.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 python-pluggy 0:0.6.0-8.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-psycopg2 0:2.7.5-7.el8
Rocky Linux · 8 python-psycopg2 0:2.7.5-7.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 python-py 0:1.5.3-6.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 python-py 0:1.5.3-6.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-pygments 0:2.2.0-20.module+el8.3.0+120+426d8baf
Rocky Linux · 8 python-pymongo 0:3.6.1-11.module+el8.3.0+120+426d8baf
Rocky Linux · 8 python-PyMySQL 0:0.8.0-10.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 python-PyMySQL 0:0.8.0-10.module+el8.3.0+120+426d8baf
Rocky Linux · 8 python-pysocks 0:1.6.8-6.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 python-pysocks 0:1.6.8-6.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-pytest-mock 0:1.9.0-4.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-setuptools_scm 0:1.15.7-6.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 python-virtualenv 0:15.1.0-19.module+el8.3.0+120+426d8baf
Rocky Linux · 8 python-wheel 1:0.31.1-2.module+el8.3.0+120+426d8baf
Rocky Linux · 8 python2-rpm-macros 0:3-38.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 pytz 0:2017.2-12.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 pytz 0:2017.2-12.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 PyYAML 0:3.12-16.module+el8.5.0+706+735ec4b3
Rocky Linux · 8 PyYAML 0:3.12-16.module+el8.4.0+403+9ae17a31
Rocky Linux · 8 scipy 0:1.0.0-20.module+el8.3.0+120+426d8baf

Vulnerabilities 6

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1667950
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1680967
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1688169
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1695570
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1695572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1700824
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1700993
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1702473
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1709599
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1718398
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1734126