Summary
It was discovered that Python incorrectly parsed certain email addresses. A
remote attacker could possibly use this issue to trick Python applications
into accepting email addresses that should be denied. (CVE-2019-16056)
It was discovered that the Python documentation XML-RPC server incorrectly
handled certain fields. A remote attacker could use this issue to execute a
cross-site scripting (XSS) attack. (CVE-2019-16935)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | python2.7 | 2.7.12-1ubuntu0~16.04.9 |
| Ubuntu · 16.04 LTS 16.04:LTS | python3.5 | 3.5.2-2ubuntu0~16.04.9 |
| Ubuntu · 18.04 LTS 18.04:LTS | python2.7 | 2.7.15-4ubuntu4~18.04.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | python3.6 | 3.6.8-1~18.04.3 |
Vulnerabilities 2
-
Medium 6.1
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the s…
-
Medium 5.3
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The …