Red Hat Security AdvisoryRHSA-2020:1764
python3 security and bug fix update
Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) platform-python-3.6.8-23.el8, platform-python-debug-3.6.8-23.el8, platform-python-devel-3.6.8-23.el8 +3
- Red Hat Enterprise Linux BaseOS (v. 8) platform-python-3.6.8-23.el8, python3-3.6.8-23.el8, python3-libs-3.6.8-23.el8 +1
Fixes 2 records
Priority MEDIUM 47
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0512 · Published 2019-09-06 · Partial fix CWE-20
Priority LOW 26
http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong server.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.03668 · Published 2019-07-13 · Partial fix CWE-20
