Red Hat Security AdvisoryRHSA-2020:3888
python3 security update
Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) python3-3.6.8-17.el7, python3-libs-3.6.8-17.el7
- Red Hat Enterprise Linux Client Optional (v. 7) python3-3.6.8-17.el7, python3-debug-3.6.8-17.el7, python3-devel-3.6.8-17.el7 +3
- Red Hat Enterprise Linux ComputeNode (v. 7) python3-3.6.8-17.el7, python3-libs-3.6.8-17.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) python3-3.6.8-17.el7, python3-debug-3.6.8-17.el7, python3-devel-3.6.8-17.el7 +3
- Red Hat Enterprise Linux Server (v. 7) python3-3.6.8-17.el7, python3-libs-3.6.8-17.el7, python3-libs-3.6.8-17.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) python3-3.6.8-17.el7, python3-3.6.8-17.el7.ppc, python3-debug-3.6.8-17.el7 +9
- Red Hat Enterprise Linux Workstation (v. 7) python3-3.6.8-17.el7, python3-libs-3.6.8-17.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) python3-3.6.8-17.el7, python3-debug-3.6.8-17.el7, python3-devel-3.6.8-17.el7 +3
Fixes 2 records
Priority LOW 38
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.06617 · Published 2020-01-30 · Partial fix CWE-400
Priority LOW 35
The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.04653 · Published 2019-09-28 · Partial fix CWE-79
