Red Hat Security AdvisoryRHSA-2019:0981
python27:2.7 security update
Released 2019-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) Cython-0.28.1-7.module+el8.0.0+2961+596d0223.src::python27:2.7, PyYAML-3.12-16.module+el8.0.0+2961+596d0223.src::python27:2.7, babel-2.5.1-9.module+el8.0.0+2961+596d0223.noarch::python27:2.7 +47
Fixes 3 records
Priority MEDIUM 52
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.07673 · Published 2019-03-08 · Partial fix CWE-173
Priority MEDIUM 48
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03496 · Published 2019-02-20 · Partial fix · 1.3.0b3 CWE-89
Priority LOW 38
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01777 · Published 2019-02-06 · Partial fix · 1.2.19 CWE-89
