Red Hat Security AdvisoryRHSA-2019:3520
python3 security and bug fix update
Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) platform-python-3.6.8-15.1.el8, platform-python-debug-3.6.8-15.1.el8, platform-python-devel-3.6.8-15.1.el8 +3
- Red Hat Enterprise Linux BaseOS (v. 8) platform-python-3.6.8-15.1.el8, python3-3.6.8-15.1.el8, python3-libs-3.6.8-15.1.el8 +1
Fixes 4 records
Priority MEDIUM 53
urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist file: URIs, as demonstrated by triggering a urllib.urlopen('l…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.11844 · Published 2019-03-23 · Partial fix CWE-22
Priority MEDIUM 52
An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.20743 · Published 2019-10-31 · Partial fix CWE-476
Priority LOW 37
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.05408 · Published 2019-03-13 · Partial fix CWE-93
Priority LOW 35
An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.05253 · Published 2019-03-23 · Partial fix CWE-93
