Red Hat Security Advisory

RHSA-2020:3911

python security update

Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) python-2.7.5-89.el7, python-libs-2.7.5-89.el7
Red Hat Enterprise Linux Client Optional (v. 7) python-debug-2.7.5-89.el7, python-devel-2.7.5-89.el7, python-test-2.7.5-89.el7 +2
Red Hat Enterprise Linux ComputeNode (v. 7) python-2.7.5-89.el7, python-devel-2.7.5-89.el7, python-libs-2.7.5-89.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) python-debug-2.7.5-89.el7, python-test-2.7.5-89.el7, python-tools-2.7.5-89.el7 +1
Red Hat Enterprise Linux Server (v. 7) python-2.7.5-89.el7, python-devel-2.7.5-89.el7, python-libs-2.7.5-89.el7 +1
Red Hat Enterprise Linux Server Optional (v. 7) python-debug-2.7.5-89.el7, python-test-2.7.5-89.el7, python-tools-2.7.5-89.el7 +1
Red Hat Enterprise Linux Workstation (v. 7) python-2.7.5-89.el7, python-devel-2.7.5-89.el7, python-libs-2.7.5-89.el7
Red Hat Enterprise Linux Workstation Optional (v. 7) python-debug-2.7.5-89.el7, python-test-2.7.5-89.el7, python-tools-2.7.5-89.el7 +1

TI-2019-12632 CVE-2019-16935 · GHSA-qhmv-wcg2-h8hx

LOW 35

The documentation XML-RPC server in Python through 2.7.16, 3.x through 3.6.9, and 3.7.x through 3.7.4 has XSS via the server_title field.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04653 Published 2019-09-28 Partial fix CWE-79