Red Hat Security Advisory

RHSA-2019:1587

python security update

Released 2019-06-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) python-2.7.5-80.el7_6, python-libs-2.7.5-80.el7_6
Red Hat Enterprise Linux Client Optional (v. 7) python-debug-2.7.5-80.el7_6, python-devel-2.7.5-80.el7_6, python-test-2.7.5-80.el7_6 +2
Red Hat Enterprise Linux ComputeNode (v. 7) python-2.7.5-80.el7_6, python-devel-2.7.5-80.el7_6, python-libs-2.7.5-80.el7_6
Red Hat Enterprise Linux ComputeNode Optional (v. 7) python-debug-2.7.5-80.el7_6, python-test-2.7.5-80.el7_6, python-tools-2.7.5-80.el7_6 +1
Red Hat Enterprise Linux Server (v. 7) python-2.7.5-80.el7_6, python-devel-2.7.5-80.el7_6, python-libs-2.7.5-80.el7_6 +1
Red Hat Enterprise Linux Server Optional (v. 7) python-debug-2.7.5-80.el7_6, python-test-2.7.5-80.el7_6, python-tools-2.7.5-80.el7_6 +1
Red Hat Enterprise Linux Workstation (v. 7) python-2.7.5-80.el7_6, python-devel-2.7.5-80.el7_6, python-libs-2.7.5-80.el7_6
Red Hat Enterprise Linux Workstation Optional (v. 7) python-debug-2.7.5-80.el7_6, python-test-2.7.5-80.el7_6, python-tools-2.7.5-80.el7_6 +1
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) python-2.7.5-80.el7_6, python-devel-2.7.5-80.el7_6, python-libs-2.7.5-80.el7_6
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) python-debug-2.7.5-80.el7_6, python-test-2.7.5-80.el7_6, python-tools-2.7.5-80.el7_6 +1

Fixes 1 record

TI-2019-07481 CVE-2019-10160 · GHSA-379v-rm3f-c48g

Insufficiently protected credentials in python-pillow python

MEDIUM 50

A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an attack…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05227 Published 2019-06-07 Partial fix CWE-172