Red Hat Security AdvisoryRHSA-2019:3948
python27-python security, bug fix, and enhancement update
Released 2019-11-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) python27-python-2.7.17-2.el6, python27-python-debug-2.7.17-2.el6, python27-python-devel-2.7.17-2.el6 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) python27-python-2.7.17-2.el7, python27-python-debug-2.7.17-2.el7, python27-python-devel-2.7.17-2.el7 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) python27-python-2.7.17-2.el7, python27-python-debug-2.7.17-2.el7, python27-python-devel-2.7.17-2.el7 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) python27-python-2.7.17-2.el7, python27-python-debug-2.7.17-2.el7, python27-python-devel-2.7.17-2.el7 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7) python27-python-2.7.17-2.el7, python27-python-debug-2.7.17-2.el7, python27-python-devel-2.7.17-2.el7 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) python27-python-2.7.17-2.el6, python27-python-debug-2.7.17-2.el6, python27-python-devel-2.7.17-2.el6 +4
- Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) python27-python-2.7.17-2.el7, python27-python-debug-2.7.17-2.el7, python27-python-devel-2.7.17-2.el7 +4
Fixes 2 records
Priority MEDIUM 47
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0512 · Published 2019-09-06 · Partial fix CWE-20
Priority LOW 26
http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.03668 · Published 2019-07-13 · Partial fix CWE-20
