[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250108

 
 

909

 
 

196064

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

RHSA-2020:1605-01 -- Redhat Cython, PyYAML, babel, numpy, pytest, python-PyMySQL, python-attrs, python-backports, python-backports-ssl_match_hostname, python-chardet, python-coverage, python-dns, python-docs, python-docutils, python-funcsigs, python-idna, python-ipaddress, python-jinja2, python-lxml, python-markupsafe, python-mock, python-nose, python-pluggy, python-psycopg2, python-py, python-pygments, python-pymongo, python-pysocks, python-pytest-mock, python-requests, python-setuptools_scm, python-six, python-sqlalchemy, python-urllib3, python-virtualenv, python-wheel, python2, python2-pip, python2-rpm-macros, python2-setuptools, pytz, scipy

ID: oval:org.secpod.oval:def:69546Date: (C)2021-03-02   (M)2024-04-17
Class: PATCHFamily: unix




Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL. The following packages have been upgraded to a later upstream version: python2 . Security Fix: * python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure * python: Cookie domain check returns incorrect results * python-urllib3: CRLF injection due to not encoding the "\r\n" sequence leading to possible attack on internal service * python-urllib3: Certification mishandle when error should be thrown * python: email.utils.parseaddr wrongly parses email addresses * python-requests: Redirect from HTTPS to HTTP does not remove Authorization header For more details about the security issue, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page listed in the References section. Additional Changes: For detailed information on changes in this release, see the CentOS 8.2 Release Notes linked from the References section.

Platform:
Red Hat Enterprise Linux 8
Product:
Cython
PyYAML
babel
numpy
pytest
python-PyMySQL
python-attrs
python-backports
python-backports-ssl_match_hostname
python-chardet
python-coverage
python-dns
python-docs
python-docutils
python-funcsigs
python-idna
python-ipaddress
python-jinja2
python-lxml
python-markupsafe
python-mock
python-nose
python-pluggy
python-psycopg2
python-py
python-pygments
python-pymongo
python-pysocks
python-pytest-mock
python-requests
python-setuptools_scm
python-six
python-sqlalchemy
python-urllib3
python-virtualenv
python-wheel
python2
python2-pip
python2-rpm-macros
python2-setuptools
pytz
scipy
Reference:
RHSA-2020:1605-01
CVE-2018-18074
CVE-2018-20060
CVE-2018-20852
CVE-2019-11236
CVE-2019-11324
CVE-2019-16056
CVE-2019-16935
CVE    7
CVE-2018-18074
CVE-2018-20852
CVE-2018-20060
CVE-2019-11236
...

© SecPod Technologies