Red Hat Security AdvisoryRHSA-2019:0984
python36:3.6 security update
Released 2019-05-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) python-PyMySQL-0.8.0-10.module+el8.0.0+2966+d39a1df3.src::python36:3.6, python-docs-3.6.7-2.module+el8.0.0+2966+d39a1df3.src::python36:3.6, python-docutils-0.14-12.module+el8.0.0+2966+d39a1df3.src::python36:3.6 +47
Fixes 2 records
Priority MEDIUM 48
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03496 · Published 2019-02-20 · Partial fix · 1.3.0b3 CWE-89
Priority LOW 38
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01777 · Published 2019-02-06 · Partial fix · 1.2.19 CWE-89
