Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found 2 articles for you...
219
security advisorymoderateupdateRocky Linux python27 Moderate CPU Denial of Service Vulnern RLSA-2023-2860
Moderate: python27:2.7 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2023:2860", "synopsis": "Moderate: python27:2.7 security update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for python-backports-ssl_match_hostname, python-ipaddress, python-markupsafe, module.python-chardet, module.python-pytest-mock, module.python-docs, python-pysocks, python-docutils, python-nose, module.python-markupsafe, module.python-dns, module.python-setuptools_scm, module.python-idna, babel, python-lxml, python-virtualenv, python-wheel, Cython, module.numpy, module.python-pymongo, module.python-mock, module.python-attrs, python-setuptools_scm, python2-pip, module.python-backports, python-sqlalchemy, module.babel, python-pluggy, python-funcsigs, module.python-pygments, module.PyYAML, module.python2-pip, numpy, scipy, python-pymongo, module.python-funcsigs, pytest, python2-rpm-macros, module.python-lxml, module.python2-six, python-docs, module.python-pluggy, module.Cython, python-mock, module.python-backports-ssl_match_hostname, module.python-PyMySQL, python-idna, module.python-ipaddress, python-backports, module.python2-rpm-macros, python-pytest-mock, python2-six, module.python-virtualenv, python-pygments, python-PyMySQL, module.python-pysocks, module.python-wheel, module.scipy, python-dns, module.python-sqlalchemy, module.python-docutils, python-py, python-attrs, module.pytest, module.python-py, PyYAML, python-chardet, module.python-nose.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.\n\nSecurity Fix(es):\n\n*Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2144072", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2144072", "description": ""}], "cves": [{"name": "CVE-2022-45061", "sourceBy": "MITRE", "sourceLink": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-45061", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvss3BaseScore": "7.5", "cwe": "CWE-400"}], "references": [], "publishedAt": "2026-06-26T18:00:57.979049Z", "rpms": {"Rocky Linux 8": {"nvras": ["babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.src.rpm", "Cython-0:0.28.1-7.module+el8.10.0+40170+5f5fdfeb.src.rpm", "Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.src.rpm", "Cython-debugsource-0:0.28.1-7.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "Cython-debugsource-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "Cython-debugsource-0:0.28.1-7.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.src.rpm", "numpy-1:1.14.2-16.module+el8.10.0+40170+5f5fdfeb.src.rpm", "numpy-debugsource-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "numpy-debugsource-1:1.14.2-16.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "numpy-debugsource-1:1.14.2-16.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "pytest-0:3.4.2-13.module+el8.9.0+1531+a18208f5.src.rpm", "pytest-0:3.4.2-13.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python2-attrs-0:17.4.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-attrs-0:17.4.0-10.module+el8.10.0+40170+5f5fdfeb.noarch.rpm","python2-babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-backports-ssl_match_hostname-0:3.5.0.1-12.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-bson-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-bson-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-bson-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-bson-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-bson-debuginfo-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-bson-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-bson-debuginfo-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-chardet-0:3.0.4-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-chardet-0:3.0.4-10.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-Cython-0:0.28.1-7.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-Cython-0:0.28.1-7.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-Cython-debuginfo-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-Cython-debuginfo-0:0.28.1-7.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-Cython-debuginfo-0:0.28.1-7.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-dns-0:1.15.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docs-0:2.7.16-2.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-docs-0:2.7.16-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docs-info-0:2.7.16-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docs-info-0:2.7.16-2.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-docutils-0:0.14-12.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-docutils-0:0.14-12.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-funcsigs-0:1.0.2-13.module+el8.9.0+1531+a18208f5.noarch.rpm","python2-idna-0:2.5-7.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-idna-0:2.5-7.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-ipaddress-0:1.0.18-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-lxml-0:4.2.3-6.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-lxml-0:4.2.3-6.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-lxml-debuginfo-0:4.2.3-6.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-lxml-debuginfo-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-lxml-debuginfo-0:4.2.3-6.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-mock-0:2.0.0-13.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-nose-0:1.3.7-31.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-nose-0:1.3.7-31.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-1:1.14.2-16.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-numpy-1:1.14.2-16.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-numpy-debuginfo-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-debuginfo-1:1.14.2-16.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-numpy-debuginfo-1:1.14.2-16.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-numpy-doc-1:1.14.2-16.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-numpy-doc-1:1.14.2-16.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm","python2-pip-0:9.0.3-19.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pip-0:9.0.3-19.module+el8.9.0+1531+a18208f5.src.rpm", "python2-pip-wheel-0:9.0.3-19.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pluggy-0:0.6.0-8.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-pluggy-0:0.6.0-8.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-py-0:1.5.3-6.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-py-0:1.5.3-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pygments-0:2.2.0-22.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pygments-0:2.2.0-22.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pymongo-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-pymongo-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-pymongo-gridfs-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-pymongo-gridfs-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pymongo-gridfs-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-pymongo-gridfs-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-PyMySQL-0:0.8.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-PyMySQL-0:0.8.0-10.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-pysocks-0:1.6.8-6.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-pysocks-0:1.6.8-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pytest-0:3.4.2-13.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-pytest-0:3.4.2-13.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pytest-mock-0:1.9.0-4.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pyyaml-0:3.12-16.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm","python2-pyyaml-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pyyaml-0:3.12-16.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-pyyaml-0:3.12-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pyyaml-debuginfo-0:3.12-16.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-pyyaml-debuginfo-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pyyaml-debuginfo-0:3.12-16.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-rpm-macros-0:3-38.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-rpm-macros-0:3-38.module+el8.9.0+1531+a18208f5.src.rpm", "python2-setuptools_scm-0:1.15.7-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-six-0:1.11.0-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-six-0:1.11.0-6.module+el8.9.0+1531+a18208f5.src.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python2-virtualenv-0:15.1.0-21.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-wheel-1:0.31.1-3.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-wheel-wheel-1:0.31.1-3.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python2-wheel-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.noarch.rpm", "python-attrs-0:17.4.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-attrs-0:17.4.0-10.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.src.rpm", "python-backports-ssl_match_hostname-0:3.5.0.1-12.module+el8.9.0+1531+a18208f5.src.rpm", "python-chardet-0:3.0.4-10.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-chardet-0:3.0.4-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-dns-0:1.15.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-docs-0:2.7.16-2.module+el8.10.0+40170+5f5fdfeb.src.rpm","python-docs-0:2.7.16-2.module+el8.9.0+1531+a18208f5.src.rpm", "python-docutils-0:0.14-12.module+el8.10.0+1592+61442852.src.rpm", "python-docutils-0:0.14-12.module+el8.10.0+1910+234ad790.src.rpm", "python-docutils-0:0.14-12.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-docutils-0:0.14-12.module+el8.9.0+1531+a18208f5.src.rpm", "python-funcsigs-0:1.0.2-13.module+el8.9.0+1531+a18208f5.src.rpm", "python-idna-0:2.5-7.module+el8.9.0+1531+a18208f5.src.rpm", "python-idna-0:2.5-7.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-ipaddress-0:1.0.18-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-lxml-0:4.2.3-6.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-lxml-debugsource-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-lxml-debugsource-0:4.2.3-6.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python-lxml-debugsource-0:4.2.3-6.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.src.rpm", "python-mock-0:2.0.0-13.module+el8.9.0+1531+a18208f5.src.rpm", "python-nose-0:1.3.7-31.module+el8.10.0+1592+61442852.src.rpm", "python-nose-0:1.3.7-31.module+el8.9.0+1531+a18208f5.src.rpm", "python-nose-0:1.3.7-31.module+el8.10.0+1910+234ad790.src.rpm", "python-nose-0:1.3.7-31.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-nose-docs-0:1.3.7-31.module+el8.9.0+1531+a18208f5.noarch.rpm", "python-nose-docs-0:1.3.7-31.module+el8.10.0+1910+234ad790.noarch.rpm", "python-nose-docs-0:1.3.7-31.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python-nose-docs-0:1.3.7-31.module+el8.10.0+1592+61442852.noarch.rpm", "python-pluggy-0:0.6.0-8.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-pluggy-0:0.6.0-8.module+el8.9.0+1531+a18208f5.src.rpm", "python-py-0:1.5.3-6.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-py-0:1.5.3-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-pygments-0:2.2.0-22.module+el8.10.0+1592+61442852.src.rpm", "python-pygments-0:2.2.0-22.module+el8.10.0+1910+234ad790.src.rpm","python-pygments-0:2.2.0-22.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-pygments-0:2.2.0-22.module+el8.9.0+1531+a18208f5.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.10.0+1592+61442852.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.10.0+1910+234ad790.src.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1592+61442852.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1910+234ad790.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1592+61442852.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1910+234ad790.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "python-PyMySQL-0:0.8.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-PyMySQL-0:0.8.0-10.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-pysocks-0:1.6.8-6.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-pysocks-0:1.6.8-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-pytest-mock-0:1.9.0-4.module+el8.9.0+1531+a18208f5.src.rpm", "python-setuptools_scm-0:1.15.7-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-sqlalchemy-0:1.3.2-2.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.src.rpm", "python-sqlalchemy-doc-0:1.3.2-2.module+el8.10.0+40170+5f5fdfeb.noarch.rpm", "python-sqlalchemy-doc-0:1.3.2-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python-virtualenv-0:15.1.0-21.module+el8.9.0+1531+a18208f5.src.rpm", "python-wheel-1:0.31.1-3.module+el8.10.0+1592+61442852.src.rpm","python-wheel-1:0.31.1-3.module+el8.10.0+40170+5f5fdfeb.src.rpm", "python-wheel-1:0.31.1-3.module+el8.10.0+1910+234ad790.src.rpm", "python-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.src.rpm", "PyYAML-0:3.12-16.module+el8.10.0+40170+5f5fdfeb.src.rpm", "PyYAML-0:3.12-16.module+el8.9.0+1531+a18208f5.src.rpm", "PyYAML-debugsource-0:3.12-16.module+el8.10.0+40170+5f5fdfeb.aarch64.rpm", "PyYAML-debugsource-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "PyYAML-debugsource-0:3.12-16.module+el8.10.0+40170+5f5fdfeb.x86_64.rpm", "scipy-0:1.0.0-21.module+el8.10.0+1592+61442852.src.rpm", "scipy-0:1.0.0-21.module+el8.10.0+1910+234ad790.src.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.10.0+1910+234ad790.aarch64.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.10.0+1592+61442852.aarch64.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.10.0+1910+234ad790.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Update for Rocky Linux addresses a moderate security risk in Python 2.7, includes updates for various packages affected.. Rocky Linux Python Update, Python 2.7 Security, CPU Denial of Service, Python Package Vulnerabilities. . Severity: moderate. LinuxSecurity.com Team
Jun 26, 2026
•moderate
Rocky Linux
219
security advisorysecurity fiximportantRocky Linux 8 RLSA-2023-5997 python38 Critical SSL Implementation Flaw
Important: python27:2.7 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2023:5994", "synopsis": "Important: python27:2.7 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for python-mock, module.python-sqlalchemy, python-backports-ssl_match_hostname, python-attrs, python-chardet, python2-rpm-macros, module.numpy, module.python-mock, python-pymongo, python-markupsafe, python2-six, module.python-funcsigs, module.python-pygments, module.python-chardet, module.python-pluggy, module.python-virtualenv, module.python-PyMySQL, python-PyMySQL, module.python-dns, module.python-nose, python-pysocks, python-funcsigs, module.python-pytest-mock, scipy, module.python-attrs, numpy, python-wheel, PyYAML, module.python-docs, module.python-setuptools_scm, module.python-backports-ssl_match_hostname, babel, python-idna, python2-pip, module.python-wheel, module.python-ipaddress, module.python-markupsafe, module.scipy, module.PyYAML, python-nose, module.Cython, module.python-lxml, python-sqlalchemy, module.python2-pip, python-dns, pytest, module.python-backports, module.python-docutils, module.babel, python-pluggy, python-pygments, module.python-pymongo, module.python2-six, module.python-pysocks, python-docs, python-backports, python-py, python-lxml, python-pytest-mock, module.pytest, python-setuptools_scm, module.python-idna, module.python-py, python-ipaddress, Cython, module.python2-rpm-macros, python-docutils.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.\n\nSecurity Fix(es):\n\n* python: TLShandshake bypass (CVE-2023-40217)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2235789", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2235789", "description": ""}], "cves": [{"name": "CVE-2023-40217", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2023-40217", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "cvss3BaseScore": "8.6", "cwe": "CWE-305"}], "references": [], "publishedAt": "2026-03-18T06:01:13.733535Z", "rpms": {"Rocky Linux 8": {"nvras": ["babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.src.rpm", "Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.src.rpm", "Cython-debugsource-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "Cython-debugsource-0:0.28.1-7.module+el8.9.0+1531+a18208f5.x86_64.rpm", "numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.src.rpm", "numpy-debugsource-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "numpy-debugsource-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "pytest-0:3.4.2-13.module+el8.9.0+1531+a18208f5.src.rpm", "python2-attrs-0:17.4.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-backports-ssl_match_hostname-0:3.5.0.1-12.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-bson-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-bson-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-bson-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-bson-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm","python2-chardet-0:3.0.4-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-Cython-debuginfo-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-Cython-debuginfo-0:0.28.1-7.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-dns-0:1.15.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docs-0:2.7.16-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docs-info-0:2.7.16-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docutils-0:0.14-12.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-funcsigs-0:1.0.2-13.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-idna-0:2.5-7.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-ipaddress-0:1.0.18-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-lxml-debuginfo-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-lxml-debuginfo-0:4.2.3-6.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-mock-0:2.0.0-13.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-nose-0:1.3.7-31.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-numpy-debuginfo-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-debuginfo-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-numpy-doc-1:1.14.2-16.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pip-0:9.0.3-19.module+el8.9.0+1531+a18208f5.noarch.rpm","python2-pip-0:9.0.3-19.module+el8.9.0+1531+a18208f5.src.rpm", "python2-pip-wheel-0:9.0.3-19.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pluggy-0:0.6.0-8.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-py-0:1.5.3-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pygments-0:2.2.0-22.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pymongo-gridfs-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pymongo-gridfs-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-PyMySQL-0:0.8.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pysocks-0:1.6.8-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pytest-0:3.4.2-13.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pytest-mock-0:1.9.0-4.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pyyaml-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pyyaml-0:3.12-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pyyaml-debuginfo-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pyyaml-debuginfo-0:3.12-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-rpm-macros-0:3-38.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-rpm-macros-0:3-38.module+el8.9.0+1531+a18208f5.src.rpm", "python2-setuptools_scm-0:1.15.7-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-six-0:1.11.0-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-six-0:1.11.0-6.module+el8.9.0+1531+a18208f5.src.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-wheel-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.noarch.rpm","python-attrs-0:17.4.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.src.rpm", "python-backports-ssl_match_hostname-0:3.5.0.1-12.module+el8.9.0+1531+a18208f5.src.rpm", "python-chardet-0:3.0.4-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-dns-0:1.15.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-docs-0:2.7.16-2.module+el8.9.0+1531+a18208f5.src.rpm", "python-docutils-0:0.14-12.module+el8.10.0+1592+61442852.src.rpm", "python-docutils-0:0.14-12.module+el8.10.0+1910+234ad790.src.rpm", "python-docutils-0:0.14-12.module+el8.9.0+1531+a18208f5.src.rpm", "python-funcsigs-0:1.0.2-13.module+el8.9.0+1531+a18208f5.src.rpm", "python-idna-0:2.5-7.module+el8.9.0+1531+a18208f5.src.rpm", "python-ipaddress-0:1.0.18-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-lxml-debugsource-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-lxml-debugsource-0:4.2.3-6.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.src.rpm", "python-mock-0:2.0.0-13.module+el8.9.0+1531+a18208f5.src.rpm", "python-nose-0:1.3.7-31.module+el8.10.0+1910+234ad790.src.rpm", "python-nose-0:1.3.7-31.module+el8.9.0+1531+a18208f5.src.rpm", "python-nose-0:1.3.7-31.module+el8.10.0+1592+61442852.src.rpm", "python-nose-docs-0:1.3.7-31.module+el8.10.0+1910+234ad790.noarch.rpm", "python-nose-docs-0:1.3.7-31.module+el8.10.0+1592+61442852.noarch.rpm", "python-nose-docs-0:1.3.7-31.module+el8.9.0+1531+a18208f5.noarch.rpm", "python-pluggy-0:0.6.0-8.module+el8.9.0+1531+a18208f5.src.rpm", "python-py-0:1.5.3-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-pygments-0:2.2.0-22.module+el8.10.0+1592+61442852.src.rpm", "python-pygments-0:2.2.0-22.module+el8.10.0+1910+234ad790.src.rpm", "python-pygments-0:2.2.0-22.module+el8.9.0+1531+a18208f5.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.10.0+1910+234ad790.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.src.rpm","python-pymongo-0:3.7.0-1.module+el8.10.0+1592+61442852.src.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1592+61442852.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1910+234ad790.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1592+61442852.x86_64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1910+234ad790.x86_64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1592+61442852.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1910+234ad790.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1592+61442852.x86_64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1910+234ad790.x86_64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python-PyMySQL-0:0.8.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-pysocks-0:1.6.8-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-pytest-mock-0:1.9.0-4.module+el8.9.0+1531+a18208f5.src.rpm", "python-setuptools_scm-0:1.15.7-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.src.rpm", "python-sqlalchemy-doc-0:1.3.2-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python-virtualenv-0:15.1.0-22.module+el8.10.0+1592+61442852.src.rpm", "python-wheel-1:0.31.1-3.module+el8.10.0+1592+61442852.src.rpm", "python-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.src.rpm", "python-wheel-1:0.31.1-3.module+el8.10.0+1910+234ad790.src.rpm", "PyYAML-0:3.12-16.module+el8.9.0+1531+a18208f5.src.rpm", "PyYAML-debugsource-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "PyYAML-debugsource-0:3.12-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "scipy-0:1.0.0-21.module+el8.10.0+1592+61442852.src.rpm", "scipy-0:1.0.0-21.module+el8.10.0+1910+234ad790.src.rpm","scipy-debugsource-0:1.0.0-21.module+el8.10.0+1910+234ad790.aarch64.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.10.0+1592+61442852.aarch64.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.10.0+1592+61442852.x86_64.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.10.0+1910+234ad790.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Important security update for python27 addressing a TLS handshake bypass vulnerability. Essential for Rocky Linux 8 users.. python27 security update, Rocky Linux security, python vulnerability fix. . Severity: Important. LinuxSecurity.com Team
Mar 18, 2026
•Important
Rocky Linux
219
security advisorymoderateupdateRocky Linux 8 RLSA-2023-7046 python38 Major Security Alert Notice
Moderate: python27:2.7 security and bug fix update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2023:7042", "synopsis": "Moderate: python27:2.7 security and bug fix update", "severity": "SEVERITY_MODERATE", "topic": "An update is available for python-mock, module.python-sqlalchemy, python-backports-ssl_match_hostname, python-attrs, python-chardet, python2-rpm-macros, module.numpy, module.python-mock, python-pymongo, python-markupsafe, python-psycopg2, python2-six, module.python-funcsigs, module.python-pygments, module.pytz, python-coverage, module.python-chardet, module.python-pluggy, module.python-virtualenv, module.python-PyMySQL, python-PyMySQL, module.python-dns, module.python-nose, python-pysocks, python-funcsigs, scipy, module.python-pytest-mock, module.python-attrs, numpy, python-wheel, PyYAML, module.python-docs, module.python-setuptools_scm, module.python-backports-ssl_match_hostname, babel, python-idna, python2-pip, module.python-wheel, module.python-ipaddress, module.python-markupsafe, module.python-psycopg2, python-requests, module.scipy, module.PyYAML, python-nose, module.Cython, module.python-lxml, python-sqlalchemy, module.python2-pip, python-dns, pytest, module.python-backports, module.python-coverage, module.babel, python-pluggy, module.python-docutils, module.python-requests, python-pygments, module.python-pymongo, module.python2-six, module.python-pysocks, pytz, python-docs, python-backports, python-py, python-lxml, python-pytest-mock, module.pytest, python-setuptools_scm, module.python-idna, module.python-py, python-ipaddress, Cython, module.python2-rpm-macros, python-docutils.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages providea stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.\n\nSecurity Fix(es):\n\n* python-requests: Unintended leak of Proxy-Authorization header (CVE-2023-32681)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.9 Release Notes linked from the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2209469", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2209469", "description": ""}], "cves": [{"name": "CVE-2023-32681", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2023-32681", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N", "cvss3BaseScore": "6.1", "cwe": "CWE-402"}], "references": [], "publishedAt": "2026-03-18T06:01:13.733535Z", "rpms": {"Rocky Linux 8": {"nvras": ["babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.src.rpm", "Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.src.rpm", "Cython-debugsource-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "Cython-debugsource-0:0.28.1-7.module+el8.9.0+1531+a18208f5.x86_64.rpm", "numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.src.rpm", "numpy-debugsource-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "numpy-debugsource-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "pytest-0:3.4.2-13.module+el8.9.0+1531+a18208f5.src.rpm", "python2-attrs-0:17.4.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.x86_64.rpm","python2-backports-ssl_match_hostname-0:3.5.0.1-12.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-bson-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-bson-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-bson-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-bson-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-chardet-0:3.0.4-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-coverage-0:4.5.1-5.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python2-coverage-0:4.5.1-5.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python2-nose-0:1.3.7-31.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-coverage-debuginfo-0:4.5.1-5.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python2-coverage-debuginfo-0:4.5.1-5.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python2-Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-Cython-debuginfo-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-Cython-debuginfo-0:0.28.1-7.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-dns-0:1.15.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docs-0:2.7.16-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docs-info-0:2.7.16-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docutils-0:0.14-12.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-funcsigs-0:1.0.2-13.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-idna-0:2.5-7.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-ipaddress-0:1.0.18-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-lxml-debuginfo-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-lxml-debuginfo-0:4.2.3-6.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.x86_64.rpm","python2-mock-0:2.0.0-13.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-numpy-debuginfo-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-debuginfo-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-numpy-doc-1:1.14.2-16.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pip-0:9.0.3-19.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pip-0:9.0.3-19.module+el8.9.0+1531+a18208f5.src.rpm", "python2-pip-wheel-0:9.0.3-19.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pluggy-0:0.6.0-8.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-psycopg2-0:2.7.5-8.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python2-psycopg2-0:2.7.5-8.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python2-psycopg2-debug-0:2.7.5-8.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python2-psycopg2-debug-0:2.7.5-8.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python2-psycopg2-debug-debuginfo-0:2.7.5-8.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python2-psycopg2-debug-debuginfo-0:2.7.5-8.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python2-psycopg2-debuginfo-0:2.7.5-8.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python2-psycopg2-debuginfo-0:2.7.5-8.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python2-psycopg2-tests-0:2.7.5-8.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python2-psycopg2-tests-0:2.7.5-8.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python2-py-0:1.5.3-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pygments-0:2.2.0-22.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm","python2-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pymongo-gridfs-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pymongo-gridfs-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-PyMySQL-0:0.8.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pysocks-0:1.6.8-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pytest-0:3.4.2-13.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pytest-mock-0:1.9.0-4.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pytz-0:2017.2-13.module+el8.10.0+1817+0b01df83.noarch.rpm", "python2-pyyaml-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pyyaml-0:3.12-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pyyaml-debuginfo-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pyyaml-debuginfo-0:3.12-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-requests-0:2.20.0-4.module+el8.10.0+1817+0b01df83.noarch.rpm", "python2-rpm-macros-0:3-38.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-rpm-macros-0:3-38.module+el8.9.0+1531+a18208f5.src.rpm", "python2-scipy-0:1.0.0-22.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python2-scipy-0:1.0.0-22.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python2-scipy-debuginfo-0:1.0.0-22.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python2-scipy-debuginfo-0:1.0.0-22.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python2-setuptools_scm-0:1.15.7-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-six-0:1.11.0-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-six-0:1.11.0-6.module+el8.9.0+1531+a18208f5.src.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-wheel-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.noarch.rpm", "python-attrs-0:17.4.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.src.rpm","python-backports-ssl_match_hostname-0:3.5.0.1-12.module+el8.9.0+1531+a18208f5.src.rpm", "python-chardet-0:3.0.4-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-coverage-0:4.5.1-5.module+el8.10.0+1817+0b01df83.src.rpm", "python-coverage-debugsource-0:4.5.1-5.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python-coverage-debugsource-0:4.5.1-5.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python-dns-0:1.15.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-docs-0:2.7.16-2.module+el8.9.0+1531+a18208f5.src.rpm", "python-docutils-0:0.14-12.module+el8.10.0+1592+61442852.src.rpm", "python-docutils-0:0.14-12.module+el8.10.0+1910+234ad790.src.rpm", "python-docutils-0:0.14-12.module+el8.9.0+1531+a18208f5.src.rpm", "python-funcsigs-0:1.0.2-13.module+el8.9.0+1531+a18208f5.src.rpm", "python-idna-0:2.5-7.module+el8.9.0+1531+a18208f5.src.rpm", "python-ipaddress-0:1.0.18-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-lxml-debugsource-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-lxml-debugsource-0:4.2.3-6.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.src.rpm", "python-mock-0:2.0.0-13.module+el8.9.0+1531+a18208f5.src.rpm", "python-nose-0:1.3.7-31.module+el8.10.0+1910+234ad790.src.rpm", "python-nose-0:1.3.7-31.module+el8.9.0+1531+a18208f5.src.rpm", "python-nose-0:1.3.7-31.module+el8.10.0+1592+61442852.src.rpm", "python-nose-docs-0:1.3.7-31.module+el8.10.0+1910+234ad790.noarch.rpm", "python-nose-docs-0:1.3.7-31.module+el8.10.0+1592+61442852.noarch.rpm", "python-nose-docs-0:1.3.7-31.module+el8.9.0+1531+a18208f5.noarch.rpm", "python-pluggy-0:0.6.0-8.module+el8.9.0+1531+a18208f5.src.rpm", "python-psycopg2-0:2.7.5-8.module+el8.10.0+1817+0b01df83.src.rpm", "python-psycopg2-debuginfo-0:2.7.5-8.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python-psycopg2-debuginfo-0:2.7.5-8.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python-psycopg2-debugsource-0:2.7.5-8.module+el8.10.0+1817+0b01df83.aarch64.rpm","python-psycopg2-debugsource-0:2.7.5-8.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python-psycopg2-doc-0:2.7.5-8.module+el8.10.0+1817+0b01df83.aarch64.rpm", "python-psycopg2-doc-0:2.7.5-8.module+el8.10.0+1817+0b01df83.x86_64.rpm", "python-py-0:1.5.3-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-pygments-0:2.2.0-22.module+el8.10.0+1592+61442852.src.rpm", "python-pygments-0:2.2.0-22.module+el8.10.0+1910+234ad790.src.rpm", "python-pygments-0:2.2.0-22.module+el8.9.0+1531+a18208f5.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.10.0+1910+234ad790.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.10.0+1592+61442852.src.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1592+61442852.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1910+234ad790.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1592+61442852.x86_64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1910+234ad790.x86_64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1592+61442852.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1910+234ad790.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1592+61442852.x86_64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1910+234ad790.x86_64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python-PyMySQL-0:0.8.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-pysocks-0:1.6.8-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-pytest-mock-0:1.9.0-4.module+el8.9.0+1531+a18208f5.src.rpm", "python-requests-0:2.20.0-4.module+el8.10.0+1817+0b01df83.src.rpm", "python-setuptools_scm-0:1.15.7-6.module+el8.9.0+1531+a18208f5.src.rpm","python-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.src.rpm", "python-sqlalchemy-doc-0:1.3.2-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python-virtualenv-0:15.1.0-22.module+el8.10.0+1592+61442852.src.rpm", "python-wheel-1:0.31.1-3.module+el8.10.0+1592+61442852.src.rpm", "python-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.src.rpm", "python-wheel-1:0.31.1-3.module+el8.10.0+1910+234ad790.src.rpm", "pytz-0:2017.2-13.module+el8.10.0+1817+0b01df83.src.rpm", "PyYAML-0:3.12-16.module+el8.9.0+1531+a18208f5.src.rpm", "PyYAML-debugsource-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "PyYAML-debugsource-0:3.12-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "scipy-0:1.0.0-22.module+el8.10.0+1817+0b01df83.src.rpm", "scipy-debugsource-0:1.0.0-22.module+el8.10.0+1817+0b01df83.aarch64.rpm", "scipy-debugsource-0:1.0.0-22.module+el8.10.0+1817+0b01df83.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. A moderate python27 update addresses a Proxy-Authorization leak, enhancing security in Rocky Linux 8.. Rocky Linux Python Security Update. . LinuxSecurity.com Team
Mar 18, 2026
Rocky Linux
219
security advisoryimportantpython27Rocky Linux 8 RLSA-2023:3780 Important URL Bypass Fix in Python27
Important: python27:2.7 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2023:3780", "synopsis": "Important: python27:2.7 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for module.python-jinja2, numpy, module.python-backports, module.python-setuptools_scm, python-funcsigs, python-backports, python-PyMySQL, python-backports-ssl_match_hostname, module.python2-setuptools, module.python-py, module.python2-six, module.python-markupsafe, module.pytz, pytz, python-dns, module.pytest, PyYAML, module.python-coverage, module.python-wheel, python2-setuptools, module.python-virtualenv, module.numpy, module.python-docs, module.python-backports-ssl_match_hostname, module.babel, python2-six, module.python-docutils, python-psycopg2, python-idna, module.Cython, module.python-mock, module.python-funcsigs, module.python-pysocks, module.scipy, module.python-pluggy, module.python-ipaddress, python-wheel, module.python-chardet, python-pysocks, python-py, python-chardet, python-pluggy, python-urllib3, python-coverage, python2-rpm-macros, python-ipaddress, module.python-urllib3, module.python-pygments, module.PyYAML, python-nose, python-docutils, module.python-idna, python-lxml, python-pymongo, python-markupsafe, python-setuptools_scm, module.python-psycopg2, python-pygments, module.python-pytest-mock, python-requests, python-docs, babel, module.python-requests, python-pytest-mock, module.python-nose, python-sqlalchemy, module.python-sqlalchemy, module.python-attrs, module.python-lxml, Cython, module.python-dns, python-mock, module.python2-pip, scipy, python-attrs, module.python-PyMySQL, module.python-pymongo, python2-pip, python-jinja2, pytest, module.python2-rpm-macros.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Python is an interpreted, interactive, object-oriented programming language that supports modules,classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.\n\nSecurity Fix(es):\n\n* python: urllib.parse url blocklisting bypass (CVE-2023-24329)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2173917", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2173917", "description": ""}], "cves": [{"name": "CVE-2023-24329", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2023-24329", "cvss3ScoringVector": "UNKNOWN", "cvss3BaseScore": "UNKNOWN", "cwe": "UNKNOWN"}], "references": [], "publishedAt": "2023-06-24T18:52:51.490480Z", "rpms": {"Rocky Linux 8": {"nvras": ["babel-0:2.5.1-10.module+el8.5.0+706+735ec4b3.noarch.rpm", "babel-0:2.5.1-10.module+el8.5.0+706+735ec4b3.src.rpm", "Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.src.rpm", "Cython-debugsource-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm", "Cython-debugsource-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm", "numpy-1:1.14.2-16.module+el8.5.0+706+735ec4b3.src.rpm", "numpy-debugsource-1:1.14.2-16.module+el8.5.0+706+735ec4b3.aarch64.rpm", "numpy-debugsource-1:1.14.2-16.module+el8.5.0+706+735ec4b3.x86_64.rpm", "pytest-0:3.4.2-13.module+el8.5.0+706+735ec4b3.src.rpm", "python2-attrs-0:17.4.0-10.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-babel-0:2.5.1-10.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-backports-0:1.0-16.module+el8.4.0+403+9ae17a31.aarch64.rpm", "python2-backports-0:1.0-16.module+el8.4.0+403+9ae17a31.x86_64.rpm", "python2-backports-ssl_match_hostname-0:3.5.0.1-12.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-bson-0:3.7.0-1.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-bson-0:3.7.0-1.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-bson-debuginfo-0:3.7.0-1.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-bson-debuginfo-0:3.7.0-1.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-chardet-0:3.0.4-10.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-coverage-debuginfo-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-coverage-debuginfo-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-Cython-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-Cython-debuginfo-0:0.28.1-7.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-Cython-debuginfo-0:0.28.1-7.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-dns-0:1.15.0-10.module+el8.7.0+1062+663ba31c.noarch.rpm", "python2-docs-0:2.7.16-2.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-docs-info-0:2.7.16-2.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-funcsigs-0:1.0.2-13.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-idna-0:2.5-7.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-ipaddress-0:1.0.18-6.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-jinja2-0:2.10-9.module+el8.7.0+1062+663ba31c.noarch.rpm", "python2-lxml-0:4.2.3-6.module+el8.6.0+793+57002515.aarch64.rpm", "python2-lxml-0:4.2.3-6.module+el8.6.0+793+57002515.x86_64.rpm", "python2-lxml-debuginfo-0:4.2.3-6.module+el8.6.0+793+57002515.aarch64.rpm", "python2-lxml-debuginfo-0:4.2.3-6.module+el8.6.0+793+57002515.x86_64.rpm", "python2-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-mock-0:2.0.0-13.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-nose-0:1.3.7-31.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-numpy-1:1.14.2-16.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-numpy-1:1.14.2-16.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-numpy-debuginfo-1:1.14.2-16.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-numpy-debuginfo-1:1.14.2-16.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-numpy-doc-1:1.14.2-16.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-pip-0:9.0.3-19.module+el8.6.0+793+57002515.noarch.rpm", "python2-pip-0:9.0.3-19.module+el8.6.0+793+57002515.src.rpm", "python2-pip-wheel-0:9.0.3-19.module+el8.6.0+793+57002515.noarch.rpm", "python2-pluggy-0:0.6.0-8.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-psycopg2-debug-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-psycopg2-debug-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-psycopg2-debug-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-psycopg2-tests-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-psycopg2-tests-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-py-0:1.5.3-6.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-pygments-0:2.2.0-22.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-pymongo-0:3.7.0-1.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-pymongo-0:3.7.0-1.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-pymongo-debuginfo-0:3.7.0-1.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-pymongo-debuginfo-0:3.7.0-1.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-pymongo-gridfs-0:3.7.0-1.module+el8.5.0+706+735ec4b3.aarch64.rpm","python2-pymongo-gridfs-0:3.7.0-1.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-pysocks-0:1.6.8-6.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-pytest-0:3.4.2-13.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-pytest-mock-0:1.9.0-4.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-pytz-0:2017.2-12.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-pyyaml-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-pyyaml-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-pyyaml-debuginfo-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-pyyaml-debuginfo-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-requests-0:2.20.0-3.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-rpm-macros-0:3-38.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-rpm-macros-0:3-38.module+el8.4.0+403+9ae17a31.src.rpm", "python2-scipy-0:1.0.0-21.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-scipy-0:1.0.0-21.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-scipy-debuginfo-0:1.0.0-21.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python2-scipy-debuginfo-0:1.0.0-21.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python2-setuptools-0:39.0.1-13.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-setuptools-0:39.0.1-13.module+el8.4.0+403+9ae17a31.src.rpm", "python2-setuptools_scm-0:1.15.7-6.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-setuptools-wheel-0:39.0.1-13.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-six-0:1.11.0-6.module+el8.4.0+403+9ae17a31.noarch.rpm", "python2-six-0:1.11.0-6.module+el8.4.0+403+9ae17a31.src.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.4.0+403+9ae17a31.aarch64.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.4.0+403+9ae17a31.x86_64.rpm", "python2-urllib3-0:1.24.2-3.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-wheel-1:0.31.1-3.module+el8.5.0+706+735ec4b3.noarch.rpm", "python2-wheel-wheel-1:0.31.1-3.module+el8.5.0+706+735ec4b3.noarch.rpm", "python-attrs-0:17.4.0-10.module+el8.5.0+706+735ec4b3.src.rpm","python-backports-0:1.0-16.module+el8.4.0+403+9ae17a31.src.rpm", "python-backports-ssl_match_hostname-0:3.5.0.1-12.module+el8.4.0+403+9ae17a31.src.rpm", "python-chardet-0:3.0.4-10.module+el8.5.0+706+735ec4b3.src.rpm", "python-coverage-0:4.5.1-4.module+el8.5.0+706+735ec4b3.src.rpm", "python-coverage-debugsource-0:4.5.1-4.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python-coverage-debugsource-0:4.5.1-4.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python-dns-0:1.15.0-10.module+el8.7.0+1062+663ba31c.src.rpm", "python-docs-0:2.7.16-2.module+el8.4.0+403+9ae17a31.src.rpm", "python-docutils-0:0.14-12.module+el8.4.0+403+9ae17a31.src.rpm", "python-funcsigs-0:1.0.2-13.module+el8.4.0+403+9ae17a31.src.rpm", "python-idna-0:2.5-7.module+el8.5.0+706+735ec4b3.src.rpm", "python-ipaddress-0:1.0.18-6.module+el8.4.0+403+9ae17a31.src.rpm", "python-jinja2-0:2.10-9.module+el8.7.0+1062+663ba31c.src.rpm", "python-lxml-0:4.2.3-6.module+el8.6.0+793+57002515.src.rpm", "python-lxml-debugsource-0:4.2.3-6.module+el8.6.0+793+57002515.aarch64.rpm", "python-lxml-debugsource-0:4.2.3-6.module+el8.6.0+793+57002515.x86_64.rpm", "python-markupsafe-0:0.23-19.module+el8.5.0+706+735ec4b3.src.rpm", "python-mock-0:2.0.0-13.module+el8.4.0+403+9ae17a31.src.rpm", "python-nose-0:1.3.7-31.module+el8.5.0+671+195e4563.src.rpm", "python-nose-docs-0:1.3.7-31.module+el8.5.0+671+195e4563.noarch.rpm", "python-pluggy-0:0.6.0-8.module+el8.5.0+706+735ec4b3.src.rpm", "python-psycopg2-0:2.7.5-7.module+el8.5.0+706+735ec4b3.src.rpm", "python-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python-psycopg2-debuginfo-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python-psycopg2-debugsource-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python-psycopg2-debugsource-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python-psycopg2-doc-0:2.7.5-7.module+el8.5.0+706+735ec4b3.aarch64.rpm", "python-psycopg2-doc-0:2.7.5-7.module+el8.5.0+706+735ec4b3.x86_64.rpm", "python-py-0:1.5.3-6.module+el8.5.0+706+735ec4b3.src.rpm","python-pygments-0:2.2.0-22.module+el8.5.0+671+195e4563.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.5.0+671+195e4563.src.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.5.0+671+195e4563.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.5.0+671+195e4563.x86_64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.5.0+671+195e4563.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.5.0+671+195e4563.x86_64.rpm", "python-PyMySQL-0:0.8.0-10.module+el8.5.0+706+735ec4b3.src.rpm", "python-pysocks-0:1.6.8-6.module+el8.5.0+706+735ec4b3.src.rpm", "python-pytest-mock-0:1.9.0-4.module+el8.4.0+403+9ae17a31.src.rpm", "python-requests-0:2.20.0-3.module+el8.5.0+706+735ec4b3.src.rpm", "python-setuptools_scm-0:1.15.7-6.module+el8.4.0+403+9ae17a31.src.rpm", "python-sqlalchemy-0:1.3.2-2.module+el8.4.0+403+9ae17a31.src.rpm", "python-sqlalchemy-doc-0:1.3.2-2.module+el8.4.0+403+9ae17a31.noarch.rpm", "python-urllib3-0:1.24.2-3.module+el8.5.0+706+735ec4b3.src.rpm", "python-virtualenv-0:15.1.0-22.module+el8.8.0+1166+572f522f.src.rpm", "python-wheel-1:0.31.1-3.module+el8.5.0+671+195e4563.src.rpm", "pytz-0:2017.2-12.module+el8.5.0+706+735ec4b3.src.rpm", "PyYAML-0:3.12-16.module+el8.5.0+706+735ec4b3.src.rpm", "PyYAML-debugsource-0:3.12-16.module+el8.5.0+706+735ec4b3.aarch64.rpm", "PyYAML-debugsource-0:3.12-16.module+el8.5.0+706+735ec4b3.x86_64.rpm", "scipy-0:1.0.0-21.module+el8.5.0+671+195e4563.src.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.5.0+671+195e4563.aarch64.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.5.0+671+195e4563.x86_64.rpm", "python2-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.aarch64.rpm", "python2-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.src.rpm", "python2-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.x86_64.rpm", "python2-debug-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.aarch64.rpm", "python2-debug-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.x86_64.rpm", "python2-debuginfo-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.aarch64.rpm","python2-debuginfo-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.x86_64.rpm", "python2-debugsource-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.aarch64.rpm", "python2-debugsource-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.x86_64.rpm", "python2-devel-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.aarch64.rpm", "python2-devel-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.x86_64.rpm", "python2-libs-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.aarch64.rpm", "python2-libs-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.x86_64.rpm", "python2-test-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.aarch64.rpm", "python2-test-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.x86_64.rpm", "python2-tkinter-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.aarch64.rpm", "python2-tkinter-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.x86_64.rpm", "python2-tools-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.aarch64.rpm", "python2-tools-0:2.7.18-13.module+el8.8.0+1314+be03569e.1.rocky.0.2.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Essential security patch for python27 resolving url blocklisting evasion on Rocky Linux. Vital for every user.. Rocky Linux python27 security update, Python security patch, Rocky Linux updates. . Severity: Important. LinuxSecurity.com Team
Jun 24, 2023
•Important
Rocky Linux
98
security advisorymoderateupdateRed Hat Enterprise Linux 8 RHSA-2022:1821-01 Moderate: python27 DoS
An update for the python27:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: python27:2.7 security update Advisory ID: RHSA-2022:1821-01 Product: Red Hat Enterprise Linux Advisory URL: Issue date: 2022-05-10 CVE Names: CVE-2021-3733 CVE-2021-3737 CVE-2021-4189 CVE-2021-43818 CVE-2022-0391 ==================================================================== 1. Summary: An update for the python27:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectorsfor MySQL and PostgreSQL. Security Fix(es): * python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733) * python: ftplib should not use the host from the PASV response (CVE-2021-4189) * python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818) * python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391) * python: urllib: HTTP client possible infinite loop on a100 Continue response (CVE-2021-3737) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1995162 - CVE-2021-3737 python: urllib: HTTP client possible infinite loop on a 100 Continue response 1995234 - CVE-2021-3733 python: urllib: Regular expression DoS in AbstractBasicAuthHandler 2006792 - RHEL 8 Python 2.7: pip contains bundled pre-built exe files in site-packages/pip/_vendor/distlib/ 2032569 - CVE-2021-43818 python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through 2036020 - CVE-2021-4189 python: ftplib should not use the host from the PASV response 2047376 - CVE-2022-0391 python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 6. Package List: Red Hat Enterprise Linux AppStream (v.8): Source: Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src.rpm PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src.rpm babel-2.5.1-10.module+el8.5.0+11014+88fc0d0b.src.rpm numpy-1.14.2-16.module+el8.4.0+9406+221a4565.src.rpm pytest-3.4.2-13.module+el8.1.0+3111+de3f2d8e.src.rpm python-PyMySQL-0.8.0-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-attrs-17.4.0-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-backports-1.0-16.module+el8.4.0+9193+f3daf6ef.src.rpm python-backports-ssl_match_hostname-3.5.0.1-12.module+el8.4.0+9193+f3daf6ef.src.rpm python-chardet-3.0.4-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.src.rpm python-dns-1.15.0-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-docs-2.7.16-2.module+el8.1.0+3111+de3f2d8e.src.rpm python-docutils-0.14-12.module+el8.1.0+3111+de3f2d8e.src.rpm python-funcsigs-1.0.2-13.module+el8.1.0+3111+de3f2d8e.src.rpm python-idna-2.5-7.module+el8.1.0+3111+de3f2d8e.src.rpm python-ipaddress-1.0.18-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-jinja2-2.10-9.module+el8.5.0+10541+706bb066.src.rpm python-lxml-4.2.3-6.module+el8.6.0+13959+8e368262.src.rpm python-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.src.rpm python-mock-2.0.0-13.module+el8.1.0+3111+de3f2d8e.src.rpm python-nose-1.3.7-31.module+el8.5.0+12203+77770ab7.src.rpm python-pluggy-0.6.0-8.module+el8.1.0+3111+de3f2d8e.src.rpm python-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.src.rpm python-py-1.5.3-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-pygments-2.2.0-22.module+el8.5.0+10788+a4cea9e0.src.rpm python-pymongo-3.7.0-1.module+el8.5.0+10264+e5753a40.src.rpm python-pysocks-1.6.8-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-pytest-mock-1.9.0-4.module+el8.1.0+3111+de3f2d8e.src.rpm python-requests-2.20.0-3.module+el8.2.0+4577+feefd9b8.src.rpm python-setuptools_scm-1.15.7-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.src.rpm python-urllib3-1.24.2-3.module+el8.4.0+9193+f3daf6ef.src.rpm python-virtualenv-15.1.0-21.module+el8.5.0+12203+77770ab7.src.rpm python-wheel-0.31.1-3.module+el8.5.0+12203+77770ab7.src.rpm python2-2.7.18-10.module+el8.6.0+14191+7fdd52cd.src.rpm python2-pip-9.0.3-19.module+el8.6.0+13001+ad200bd9.src.rpm python2-rpm-macros-3-38.module+el8.1.0+3111+de3f2d8e.src.rpm python2-setuptools-39.0.1-13.module+el8.4.0+9442+27d0e81c.src.rpm python2-six-1.11.0-6.module+el8.4.0+9287+299307c7.src.rpm pytz-2017.2-12.module+el8.1.0+3111+de3f2d8e.src.rpm scipy-1.0.0-21.module+el8.5.0+10858+05337455.src.rpm aarch64: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.aarch64.rpm numpy-debugsource-1.14.2-16.module+el8.4.0+9406+221a4565.aarch64.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-lxml-debugsource-4.2.3-6.module+el8.6.0+13959+8e368262.aarch64.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-pymongo-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.aarch64.rpm python-pymongo-debugsource-3.7.0-1.module+el8.5.0+10264+e5753a40.aarch64.rpm python2-2.7.18-10.module+el8.6.0+14191+7fdd52cd.aarch64.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-backports-1.0-16.module+el8.4.0+9193+f3daf6ef.aarch64.rpm python2-bson-3.7.0-1.module+el8.5.0+10264+e5753a40.aarch64.rpm python2-bson-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.aarch64.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-debug-2.7.18-10.module+el8.6.0+14191+7fdd52cd.aarch64.rpm python2-debuginfo-2.7.18-10.module+el8.6.0+14191+7fdd52cd.aarch64.rpm python2-debugsource-2.7.18-10.module+el8.6.0+14191+7fdd52cd.aarch64.rpm python2-devel-2.7.18-10.module+el8.6.0+14191+7fdd52cd.aarch64.rpm python2-libs-2.7.18-10.module+el8.6.0+14191+7fdd52cd.aarch64.rpm python2-lxml-4.2.3-6.module+el8.6.0+13959+8e368262.aarch64.rpm python2-lxml-debuginfo-4.2.3-6.module+el8.6.0+13959+8e368262.aarch64.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-numpy-1.14.2-16.module+el8.4.0+9406+221a4565.aarch64.rpm python2-numpy-debuginfo-1.14.2-16.module+el8.4.0+9406+221a4565.aarch64.rpm python2-numpy-f2py-1.14.2-16.module+el8.4.0+9406+221a4565.aarch64.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-pymongo-3.7.0-1.module+el8.5.0+10264+e5753a40.aarch64.rpm python2-pymongo-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.aarch64.rpm python2-pymongo-gridfs-3.7.0-1.module+el8.5.0+10264+e5753a40.aarch64.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-scipy-1.0.0-21.module+el8.5.0+10858+05337455.aarch64.rpm python2-scipy-debuginfo-1.0.0-21.module+el8.5.0+10858+05337455.aarch64.rpm python2-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.aarch64.rpm python2-test-2.7.18-10.module+el8.6.0+14191+7fdd52cd.aarch64.rpm python2-tkinter-2.7.18-10.module+el8.6.0+14191+7fdd52cd.aarch64.rpm python2-tools-2.7.18-10.module+el8.6.0+14191+7fdd52cd.aarch64.rpm scipy-debugsource-1.0.0-21.module+el8.5.0+10858+05337455.aarch64.rpm noarch: babel-2.5.1-10.module+el8.5.0+11014+88fc0d0b.noarch.rpm python-nose-docs-1.3.7-31.module+el8.5.0+12203+77770ab7.noarch.rpm python-sqlalchemy-doc-1.3.2-2.module+el8.3.0+6647+8d010749.noarch.rpm python2-PyMySQL-0.8.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-attrs-17.4.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-babel-2.5.1-10.module+el8.5.0+11014+88fc0d0b.noarch.rpm python2-backports-ssl_match_hostname-3.5.0.1-12.module+el8.4.0+9193+f3daf6ef.noarch.rpm python2-chardet-3.0.4-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-dns-1.15.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-docs-2.7.16-2.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-docs-info-2.7.16-2.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-docutils-0.14-12.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-funcsigs-1.0.2-13.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-idna-2.5-7.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-ipaddress-1.0.18-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-jinja2-2.10-9.module+el8.5.0+10541+706bb066.noarch.rpm python2-mock-2.0.0-13.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-nose-1.3.7-31.module+el8.5.0+12203+77770ab7.noarch.rpm python2-numpy-doc-1.14.2-16.module+el8.4.0+9406+221a4565.noarch.rpm python2-pip-9.0.3-19.module+el8.6.0+13001+ad200bd9.noarch.rpm python2-pip-wheel-9.0.3-19.module+el8.6.0+13001+ad200bd9.noarch.rpm python2-pluggy-0.6.0-8.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-py-1.5.3-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pygments-2.2.0-22.module+el8.5.0+10788+a4cea9e0.noarch.rpm python2-pysocks-1.6.8-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pytest-3.4.2-13.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pytest-mock-1.9.0-4.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pytz-2017.2-12.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-requests-2.20.0-3.module+el8.2.0+4577+feefd9b8.noarch.rpm python2-rpm-macros-3-38.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-setuptools-39.0.1-13.module+el8.4.0+9442+27d0e81c.noarch.rpm python2-setuptools-wheel-39.0.1-13.module+el8.4.0+9442+27d0e81c.noarch.rpm python2-setuptools_scm-1.15.7-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-six-1.11.0-6.module+el8.4.0+9287+299307c7.noarch.rpm python2-urllib3-1.24.2-3.module+el8.4.0+9193+f3daf6ef.noarch.rpm python2-virtualenv-15.1.0-21.module+el8.5.0+12203+77770ab7.noarch.rpm python2-wheel-0.31.1-3.module+el8.5.0+12203+77770ab7.noarch.rpm python2-wheel-wheel-0.31.1-3.module+el8.5.0+12203+77770ab7.noarch.rpm ppc64le: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm numpy-debugsource-1.14.2-16.module+el8.4.0+9406+221a4565.ppc64le.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-lxml-debugsource-4.2.3-6.module+el8.6.0+13959+8e368262.ppc64le.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-pymongo-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.ppc64le.rpm python-pymongo-debugsource-3.7.0-1.module+el8.5.0+10264+e5753a40.ppc64le.rpm python2-2.7.18-10.module+el8.6.0+14191+7fdd52cd.ppc64le.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-backports-1.0-16.module+el8.4.0+9193+f3daf6ef.ppc64le.rpm python2-bson-3.7.0-1.module+el8.5.0+10264+e5753a40.ppc64le.rpm python2-bson-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.ppc64le.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-debug-2.7.18-10.module+el8.6.0+14191+7fdd52cd.ppc64le.rpm python2-debuginfo-2.7.18-10.module+el8.6.0+14191+7fdd52cd.ppc64le.rpm python2-debugsource-2.7.18-10.module+el8.6.0+14191+7fdd52cd.ppc64le.rpm python2-devel-2.7.18-10.module+el8.6.0+14191+7fdd52cd.ppc64le.rpm python2-libs-2.7.18-10.module+el8.6.0+14191+7fdd52cd.ppc64le.rpm python2-lxml-4.2.3-6.module+el8.6.0+13959+8e368262.ppc64le.rpm python2-lxml-debuginfo-4.2.3-6.module+el8.6.0+13959+8e368262.ppc64le.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-numpy-1.14.2-16.module+el8.4.0+9406+221a4565.ppc64le.rpm python2-numpy-debuginfo-1.14.2-16.module+el8.4.0+9406+221a4565.ppc64le.rpm python2-numpy-f2py-1.14.2-16.module+el8.4.0+9406+221a4565.ppc64le.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-pymongo-3.7.0-1.module+el8.5.0+10264+e5753a40.ppc64le.rpm python2-pymongo-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.ppc64le.rpm python2-pymongo-gridfs-3.7.0-1.module+el8.5.0+10264+e5753a40.ppc64le.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-scipy-1.0.0-21.module+el8.5.0+10858+05337455.ppc64le.rpm python2-scipy-debuginfo-1.0.0-21.module+el8.5.0+10858+05337455.ppc64le.rpm python2-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.ppc64le.rpm python2-test-2.7.18-10.module+el8.6.0+14191+7fdd52cd.ppc64le.rpm python2-tkinter-2.7.18-10.module+el8.6.0+14191+7fdd52cd.ppc64le.rpm python2-tools-2.7.18-10.module+el8.6.0+14191+7fdd52cd.ppc64le.rpm scipy-debugsource-1.0.0-21.module+el8.5.0+10858+05337455.ppc64le.rpm s390x: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.s390x.rpm numpy-debugsource-1.14.2-16.module+el8.4.0+9406+221a4565.s390x.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-lxml-debugsource-4.2.3-6.module+el8.6.0+13959+8e368262.s390x.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-pymongo-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.s390x.rpm python-pymongo-debugsource-3.7.0-1.module+el8.5.0+10264+e5753a40.s390x.rpm python2-2.7.18-10.module+el8.6.0+14191+7fdd52cd.s390x.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-backports-1.0-16.module+el8.4.0+9193+f3daf6ef.s390x.rpm python2-bson-3.7.0-1.module+el8.5.0+10264+e5753a40.s390x.rpm python2-bson-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.s390x.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-debug-2.7.18-10.module+el8.6.0+14191+7fdd52cd.s390x.rpm python2-debuginfo-2.7.18-10.module+el8.6.0+14191+7fdd52cd.s390x.rpm python2-debugsource-2.7.18-10.module+el8.6.0+14191+7fdd52cd.s390x.rpm python2-devel-2.7.18-10.module+el8.6.0+14191+7fdd52cd.s390x.rpm python2-libs-2.7.18-10.module+el8.6.0+14191+7fdd52cd.s390x.rpm python2-lxml-4.2.3-6.module+el8.6.0+13959+8e368262.s390x.rpm python2-lxml-debuginfo-4.2.3-6.module+el8.6.0+13959+8e368262.s390x.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-numpy-1.14.2-16.module+el8.4.0+9406+221a4565.s390x.rpm python2-numpy-debuginfo-1.14.2-16.module+el8.4.0+9406+221a4565.s390x.rpm python2-numpy-f2py-1.14.2-16.module+el8.4.0+9406+221a4565.s390x.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-pymongo-3.7.0-1.module+el8.5.0+10264+e5753a40.s390x.rpm python2-pymongo-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.s390x.rpm python2-pymongo-gridfs-3.7.0-1.module+el8.5.0+10264+e5753a40.s390x.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-scipy-1.0.0-21.module+el8.5.0+10858+05337455.s390x.rpm python2-scipy-debuginfo-1.0.0-21.module+el8.5.0+10858+05337455.s390x.rpm python2-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.s390x.rpm python2-test-2.7.18-10.module+el8.6.0+14191+7fdd52cd.s390x.rpm python2-tkinter-2.7.18-10.module+el8.6.0+14191+7fdd52cd.s390x.rpm python2-tools-2.7.18-10.module+el8.6.0+14191+7fdd52cd.s390x.rpm scipy-debugsource-1.0.0-21.module+el8.5.0+10858+05337455.s390x.rpm x86_64: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.x86_64.rpm numpy-debugsource-1.14.2-16.module+el8.4.0+9406+221a4565.x86_64.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-lxml-debugsource-4.2.3-6.module+el8.6.0+13959+8e368262.x86_64.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-pymongo-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.x86_64.rpm python-pymongo-debugsource-3.7.0-1.module+el8.5.0+10264+e5753a40.x86_64.rpm python2-2.7.18-10.module+el8.6.0+14191+7fdd52cd.x86_64.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-backports-1.0-16.module+el8.4.0+9193+f3daf6ef.x86_64.rpm python2-bson-3.7.0-1.module+el8.5.0+10264+e5753a40.x86_64.rpm python2-bson-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.x86_64.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-debug-2.7.18-10.module+el8.6.0+14191+7fdd52cd.x86_64.rpm python2-debuginfo-2.7.18-10.module+el8.6.0+14191+7fdd52cd.x86_64.rpm python2-debugsource-2.7.18-10.module+el8.6.0+14191+7fdd52cd.x86_64.rpm python2-devel-2.7.18-10.module+el8.6.0+14191+7fdd52cd.x86_64.rpm python2-libs-2.7.18-10.module+el8.6.0+14191+7fdd52cd.x86_64.rpm python2-lxml-4.2.3-6.module+el8.6.0+13959+8e368262.x86_64.rpm python2-lxml-debuginfo-4.2.3-6.module+el8.6.0+13959+8e368262.x86_64.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-numpy-1.14.2-16.module+el8.4.0+9406+221a4565.x86_64.rpm python2-numpy-debuginfo-1.14.2-16.module+el8.4.0+9406+221a4565.x86_64.rpm python2-numpy-f2py-1.14.2-16.module+el8.4.0+9406+221a4565.x86_64.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-pymongo-3.7.0-1.module+el8.5.0+10264+e5753a40.x86_64.rpm python2-pymongo-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.x86_64.rpm python2-pymongo-gridfs-3.7.0-1.module+el8.5.0+10264+e5753a40.x86_64.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-scipy-1.0.0-21.module+el8.5.0+10858+05337455.x86_64.rpm python2-scipy-debuginfo-1.0.0-21.module+el8.5.0+10858+05337455.x86_64.rpm python2-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.x86_64.rpm python2-test-2.7.18-10.module+el8.6.0+14191+7fdd52cd.x86_64.rpm python2-tkinter-2.7.18-10.module+el8.6.0+14191+7fdd52cd.x86_64.rpm python2-tools-2.7.18-10.module+el8.6.0+14191+7fdd52cd.x86_64.rpm scipy-debugsource-1.0.0-21.module+el8.5.0+10858+05337455.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2021-3733 https://access.redhat.com/security/cve/CVE-2021-3737 https://access.redhat.com/security/cve/CVE-2021-4189 https://access.redhat.com/security/cve/CVE-2021-43818 https://access.redhat.com/security/cve/CVE-2022-0391 https://access.redhat.com/security/updates/classification#moderate https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/8/html/8.6_release_notes/index 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2022 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBYnqQ0NzjgjWX9erEAQjqKQ/+KDenJ7lXVRA8UWcqJDFLRP/HuuIJ+Ftd KKg/C562FkZoG9ek2zzW8vAikT6M6hT47jFczvSZ4crPRoKiY2bLn5YQ4SZfy7h7 C2Xhen6hQroLMUrK7iB6BzUIbVJ8Ms4e5F/fH2HTBwdIOv8+hAcmKeIcn3G2Ntvl I4rHqJUQ3sTXVptobXIfE0S7QwG0Gsy0rQRSC9N8A+SKsd9bJDdIdjf9/OL8BaF2 bkHTWsyViriuZPUfhjmVYX/lITxwwm9do6Y40QJbIC2AtGugGRfG0tMEx7kQNELu kZzGCiRuHnCDUONtSeu6zDS4TDqaaulmPTvcXah0MJiZrbCEMgSaVD02ZW8k8iSR mOn3YcKBgGgMHCq+qmDojbkfcqghqj+rFFbOV2NdGBkt3CFVncLQLKgKwvu2wiCN AaMhQKsjgAIOAQxrVIwRqY8PT2xQ23E8KM38qpx0eYFtEvm0YNmm1DZG/X+MGK5P P0uwJTk/qOZxl6AuzV7/CgTSX3PfvlVFmyJKH3bOI1QFbqT8aL8VpKUFb2XcWNGJ U5wrZKxk3zRBm2Alc80hn/XHk8e57sPHdrzARNCMzPtM9orofsuLUuRDmx/xBAUq vm/DEY1I2C2BCszZyTDernLNNNv6+yi+dj3yQq/wadAkpVrLKbymPgz4fFDYz9jO vpcBQ/797cU=5Qic -----END PGP SIGNATURE----- -- RHSA-announce mailing list
May 10, 2022
Red Hat
98
security advisorysecurity updatedirectory traversalRed Hat: RHSA-2020-4654-01 Moderate: Python27 Infinite Loop & Traversal
An update for the python27:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: python27:2.7 security update Advisory ID: RHSA-2020:4654-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2020:4654 Issue date: 2020-11-03 CVE Names: CVE-2019-20907 CVE-2019-20916 ==================================================================== 1. Summary: An update for the python27:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectorsfor MySQL and PostgreSQL. Security Fix(es): * python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907) * python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py (CVE-2019-20916) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailedinformation on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1856481 - CVE-2019-20907 python: infinite loop in the tarfile module via crafted TAR archive 1868135 - CVE-2019-20916 python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py 6. Package List: Red Hat Enterprise Linux AppStream (v.8): Source: Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src.rpm PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src.rpm babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.src.rpm numpy-1.14.2-13.module+el8.1.0+3323+7ac3e00f.src.rpm pytest-3.4.2-13.module+el8.1.0+3111+de3f2d8e.src.rpm python-PyMySQL-0.8.0-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-attrs-17.4.0-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-backports-1.0-15.module+el8.1.0+3111+de3f2d8e.src.rpm python-backports-ssl_match_hostname-3.5.0.1-11.module+el8.1.0+3111+de3f2d8e.src.rpm python-chardet-3.0.4-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.src.rpm python-dns-1.15.0-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-docs-2.7.16-2.module+el8.1.0+3111+de3f2d8e.src.rpm python-docutils-0.14-12.module+el8.1.0+3111+de3f2d8e.src.rpm python-funcsigs-1.0.2-13.module+el8.1.0+3111+de3f2d8e.src.rpm python-idna-2.5-7.module+el8.1.0+3111+de3f2d8e.src.rpm python-ipaddress-1.0.18-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-jinja2-2.10-8.module+el8.1.0+3111+de3f2d8e.src.rpm python-lxml-4.2.3-3.module+el8.1.0+3111+de3f2d8e.src.rpm python-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.src.rpm python-mock-2.0.0-13.module+el8.1.0+3111+de3f2d8e.src.rpm python-nose-1.3.7-30.module+el8.1.0+3111+de3f2d8e.src.rpm python-pluggy-0.6.0-8.module+el8.1.0+3111+de3f2d8e.src.rpm python-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.src.rpm python-py-1.5.3-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-pygments-2.2.0-20.module+el8.1.0+3111+de3f2d8e.src.rpm python-pymongo-3.6.1-11.module+el8.1.0+3446+c3d52da3.src.rpm python-pysocks-1.6.8-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-pytest-mock-1.9.0-4.module+el8.1.0+3111+de3f2d8e.src.rpm python-requests-2.20.0-3.module+el8.2.0+4577+feefd9b8.src.rpm python-setuptools_scm-1.15.7-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-six-1.11.0-5.module+el8.1.0+3111+de3f2d8e.src.rpm python-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.src.rpm python-urllib3-1.24.2-1.module+el8.1.0+3280+19512f10.src.rpm python-virtualenv-15.1.0-19.module+el8.1.0+3507+d69c168d.src.rpm python-wheel-0.31.1-2.module+el8.1.0+3725+aac5cd17.src.rpm python2-2.7.17-2.module+el8.3.0+7681+f1f02ded.src.rpm python2-pip-9.0.3-18.module+el8.3.0+7707+eb4bba01.src.rpm python2-rpm-macros-3-38.module+el8.1.0+3111+de3f2d8e.src.rpm python2-setuptools-39.0.1-12.module+el8.3.0+7075+8484f0d0.src.rpm pytz-2017.2-12.module+el8.1.0+3111+de3f2d8e.src.rpm scipy-1.0.0-20.module+el8.1.0+3323+7ac3e00f.src.rpm aarch64: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.aarch64.rpm numpy-debugsource-1.14.2-13.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-lxml-debugsource-4.2.3-3.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python-pymongo-debugsource-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-2.7.17-2.module+el8.3.0+7681+f1f02ded.aarch64.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-backports-1.0-15.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-bson-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-bson-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-debug-2.7.17-2.module+el8.3.0+7681+f1f02ded.aarch64.rpm python2-debuginfo-2.7.17-2.module+el8.3.0+7681+f1f02ded.aarch64.rpm python2-debugsource-2.7.17-2.module+el8.3.0+7681+f1f02ded.aarch64.rpm python2-devel-2.7.17-2.module+el8.3.0+7681+f1f02ded.aarch64.rpm python2-libs-2.7.17-2.module+el8.3.0+7681+f1f02ded.aarch64.rpm python2-lxml-4.2.3-3.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-lxml-debuginfo-4.2.3-3.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-numpy-1.14.2-13.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python2-numpy-debuginfo-1.14.2-13.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python2-numpy-f2py-1.14.2-13.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-pymongo-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-pymongo-gridfs-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-scipy-1.0.0-20.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python2-scipy-debuginfo-1.0.0-20.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python2-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.aarch64.rpm python2-test-2.7.17-2.module+el8.3.0+7681+f1f02ded.aarch64.rpm python2-tkinter-2.7.17-2.module+el8.3.0+7681+f1f02ded.aarch64.rpm python2-tools-2.7.17-2.module+el8.3.0+7681+f1f02ded.aarch64.rpm scipy-debugsource-1.0.0-20.module+el8.1.0+3323+7ac3e00f.aarch64.rpm noarch: babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.noarch.rpm python-nose-docs-1.3.7-30.module+el8.1.0+3111+de3f2d8e.noarch.rpm python-sqlalchemy-doc-1.3.2-2.module+el8.3.0+6647+8d010749.noarch.rpm python2-PyMySQL-0.8.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-attrs-17.4.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-backports-ssl_match_hostname-3.5.0.1-11.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-chardet-3.0.4-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-dns-1.15.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-docs-2.7.16-2.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-docs-info-2.7.16-2.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-docutils-0.14-12.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-funcsigs-1.0.2-13.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-idna-2.5-7.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-ipaddress-1.0.18-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-jinja2-2.10-8.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-mock-2.0.0-13.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-nose-1.3.7-30.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-numpy-doc-1.14.2-13.module+el8.1.0+3323+7ac3e00f.noarch.rpm python2-pip-9.0.3-18.module+el8.3.0+7707+eb4bba01.noarch.rpm python2-pip-wheel-9.0.3-18.module+el8.3.0+7707+eb4bba01.noarch.rpm python2-pluggy-0.6.0-8.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-py-1.5.3-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pygments-2.2.0-20.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pysocks-1.6.8-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pytest-3.4.2-13.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pytest-mock-1.9.0-4.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pytz-2017.2-12.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-requests-2.20.0-3.module+el8.2.0+4577+feefd9b8.noarch.rpm python2-rpm-macros-3-38.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-setuptools-39.0.1-12.module+el8.3.0+7075+8484f0d0.noarch.rpm python2-setuptools-wheel-39.0.1-12.module+el8.3.0+7075+8484f0d0.noarch.rpm python2-setuptools_scm-1.15.7-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-six-1.11.0-5.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-urllib3-1.24.2-1.module+el8.1.0+3280+19512f10.noarch.rpm python2-virtualenv-15.1.0-19.module+el8.1.0+3507+d69c168d.noarch.rpm python2-wheel-0.31.1-2.module+el8.1.0+3725+aac5cd17.noarch.rpm python2-wheel-wheel-0.31.1-2.module+el8.1.0+3725+aac5cd17.noarch.rpm ppc64le: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm numpy-debugsource-1.14.2-13.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-lxml-debugsource-4.2.3-3.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python-pymongo-debugsource-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-2.7.17-2.module+el8.3.0+7681+f1f02ded.ppc64le.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-backports-1.0-15.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-bson-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-bson-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-debug-2.7.17-2.module+el8.3.0+7681+f1f02ded.ppc64le.rpm python2-debuginfo-2.7.17-2.module+el8.3.0+7681+f1f02ded.ppc64le.rpm python2-debugsource-2.7.17-2.module+el8.3.0+7681+f1f02ded.ppc64le.rpm python2-devel-2.7.17-2.module+el8.3.0+7681+f1f02ded.ppc64le.rpm python2-libs-2.7.17-2.module+el8.3.0+7681+f1f02ded.ppc64le.rpm python2-lxml-4.2.3-3.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-lxml-debuginfo-4.2.3-3.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-numpy-1.14.2-13.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python2-numpy-debuginfo-1.14.2-13.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python2-numpy-f2py-1.14.2-13.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-pymongo-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-pymongo-gridfs-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-scipy-1.0.0-20.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python2-scipy-debuginfo-1.0.0-20.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python2-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.ppc64le.rpm python2-test-2.7.17-2.module+el8.3.0+7681+f1f02ded.ppc64le.rpm python2-tkinter-2.7.17-2.module+el8.3.0+7681+f1f02ded.ppc64le.rpm python2-tools-2.7.17-2.module+el8.3.0+7681+f1f02ded.ppc64le.rpm scipy-debugsource-1.0.0-20.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm s390x: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.s390x.rpm numpy-debugsource-1.14.2-13.module+el8.1.0+3323+7ac3e00f.s390x.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-lxml-debugsource-4.2.3-3.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python-pymongo-debugsource-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-2.7.17-2.module+el8.3.0+7681+f1f02ded.s390x.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-backports-1.0-15.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-bson-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-bson-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-debug-2.7.17-2.module+el8.3.0+7681+f1f02ded.s390x.rpm python2-debuginfo-2.7.17-2.module+el8.3.0+7681+f1f02ded.s390x.rpm python2-debugsource-2.7.17-2.module+el8.3.0+7681+f1f02ded.s390x.rpm python2-devel-2.7.17-2.module+el8.3.0+7681+f1f02ded.s390x.rpm python2-libs-2.7.17-2.module+el8.3.0+7681+f1f02ded.s390x.rpm python2-lxml-4.2.3-3.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-lxml-debuginfo-4.2.3-3.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-numpy-1.14.2-13.module+el8.1.0+3323+7ac3e00f.s390x.rpm python2-numpy-debuginfo-1.14.2-13.module+el8.1.0+3323+7ac3e00f.s390x.rpm python2-numpy-f2py-1.14.2-13.module+el8.1.0+3323+7ac3e00f.s390x.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-pymongo-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-pymongo-gridfs-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-scipy-1.0.0-20.module+el8.1.0+3323+7ac3e00f.s390x.rpm python2-scipy-debuginfo-1.0.0-20.module+el8.1.0+3323+7ac3e00f.s390x.rpm python2-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.s390x.rpm python2-test-2.7.17-2.module+el8.3.0+7681+f1f02ded.s390x.rpm python2-tkinter-2.7.17-2.module+el8.3.0+7681+f1f02ded.s390x.rpm python2-tools-2.7.17-2.module+el8.3.0+7681+f1f02ded.s390x.rpm scipy-debugsource-1.0.0-20.module+el8.1.0+3323+7ac3e00f.s390x.rpm x86_64: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.x86_64.rpm numpy-debugsource-1.14.2-13.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-lxml-debugsource-4.2.3-3.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python-pymongo-debugsource-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-2.7.17-2.module+el8.3.0+7681+f1f02ded.x86_64.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-backports-1.0-15.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-bson-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-bson-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-debug-2.7.17-2.module+el8.3.0+7681+f1f02ded.x86_64.rpm python2-debuginfo-2.7.17-2.module+el8.3.0+7681+f1f02ded.x86_64.rpm python2-debugsource-2.7.17-2.module+el8.3.0+7681+f1f02ded.x86_64.rpm python2-devel-2.7.17-2.module+el8.3.0+7681+f1f02ded.x86_64.rpm python2-libs-2.7.17-2.module+el8.3.0+7681+f1f02ded.x86_64.rpm python2-lxml-4.2.3-3.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-lxml-debuginfo-4.2.3-3.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-numpy-1.14.2-13.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python2-numpy-debuginfo-1.14.2-13.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python2-numpy-f2py-1.14.2-13.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-pymongo-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-pymongo-gridfs-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-scipy-1.0.0-20.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python2-scipy-debuginfo-1.0.0-20.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python2-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.x86_64.rpm python2-test-2.7.17-2.module+el8.3.0+7681+f1f02ded.x86_64.rpm python2-tkinter-2.7.17-2.module+el8.3.0+7681+f1f02ded.x86_64.rpm python2-tools-2.7.17-2.module+el8.3.0+7681+f1f02ded.x86_64.rpm scipy-debugsource-1.0.0-20.module+el8.1.0+3323+7ac3e00f.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-20907 https://access.redhat.com/security/cve/CVE-2019-20916 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/ 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBX6I5IdzjgjWX9erEAQh8RxAAidYoeA2EjtCC1uz2XsXRZqjjHNYlUo1Q aGi5iHIYpCvNMOBbvCxkEh5q6t+7RloF9GQb3ZdyxGCNUnAqrdecWtsAyGOVzj1F lTlugMsGJq2UwiATu/lEn1PzEL57dBU/yI3KM0iNr3Il3wi5yuMzOX7uw3Pwz0C7 ltt4nN7LE7i569SHouUHgFkblKEY2ZlEC184RiMo0+Mo3AjW80pzCuqccpzwWBYv g3M58MJA66U3EUwpkErh47/gp5om9yYM+iqle9fkAqSPYoCh4G3tJLEZ2Rlbm9TB L6J/a9Kig+SIgbfKeiq7aEH8Jj/g0NtIC4ahwd9Q6RBdLw8K2um7Q5WQsy/7MrZ+ Jx9Tns5jqbqRVaou1qGSpRjVnrYZHmbVAdnHRyfsZ7gD4TS8TuO9X4PBuciDQEg4 5VFUJjvLZONvySYZWlUp6vIasYw4J4I7zoBWCvAp/oJ1rPCTsPliYlvK9dx1/AIh cy6Ilt2/E4wr7A5sI9yhTjUN0MuIEWFOBezuPNYx27SlJibDBTnhvlvuph89mkam Yz9box/JN0CGx0wphoGkEzecPqU6I4rQeWaM+Ev/utU+W+UTK6Wcn/egP4hf1pd2 u5NnJB7dmbEJ0U2PWUUmTiHK5FWeOM3QwQD2re8lo9Uwq98hUKoO+Axcmk3jFS3m MYC+yDALK+I=mUqa -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Nov 04, 2020
Red Hat
98
security advisorybug fixRed Hat Enterprise LinuxRed Hat Enterprise Linux 8 python27 Moderate Advisory RHSA-2020:1605-01
An update for the python27:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: python27:2.7 security, bug fix, and enhancement update Advisory ID: RHSA-2020:1605-01 Product: Red Hat Enterprise Linux Advisory URL: Issue date: 2020-04-28 CVE Names: CVE-2018-18074 CVE-2018-20060 CVE-2018-20852 CVE-2019-11236 CVE-2019-11324 CVE-2019-16056 ==================================================================== 1. Summary: An update for the python27:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectorsfor MySQL and PostgreSQL. The following packages have been upgraded to a later upstream version: python2 (2.7.17). (BZ#1759944) Security Fix(es): * python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure (CVE-2018-20060) * python: Cookie domain check returns incorrect results (CVE-2018-20852) * python-urllib3: CRLF injection due to not encoding the ' ' sequence leadingto possible attack on internal service (CVE-2019-11236) * python-urllib3: Certification mishandle when error should be thrown (CVE-2019-11324) * python: email.utils.parseaddr wrongly parses email addresses (CVE-2019-16056) * python-requests: Redirect from HTTPS to HTTP does not remove Authorization header (CVE-2018-18074) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1643829 - CVE-2018-18074 python-requests: Redirect from HTTPS to HTTP does not remove Authorization header 1649153 - CVE-2018-20060 python-urllib3: Cross-host redirect does not remove Authorization header allow for credential exposure 1659551 - python-virtualenv bundles pip and pip is using bundled requests and a bundled root certificate 1700824 - CVE-2019-11236 python-urllib3: CRLF injection due to not encoding the ' ' sequence leading to possible attack on internal service 1702473 - CVE-2019-11324 python-urllib3: Certification mishandle when error should be thrown 1740347 - CVE-2018-20852 python: Cookie domain check returns incorrect results 1749839 - CVE-2019-16056 python: email.utils.parseaddr wrongly parses email addresses 1762422 - The fix CVE-2018-18074 leads to a regression 6. Package List: Red Hat Enterprise Linux AppStream (v.8): Source: Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src.rpm PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src.rpm babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.src.rpm numpy-1.14.2-13.module+el8.1.0+3323+7ac3e00f.src.rpm pytest-3.4.2-13.module+el8.1.0+3111+de3f2d8e.src.rpm python-PyMySQL-0.8.0-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-attrs-17.4.0-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-backports-1.0-15.module+el8.1.0+3111+de3f2d8e.src.rpm python-backports-ssl_match_hostname-3.5.0.1-11.module+el8.1.0+3111+de3f2d8e.src.rpm python-chardet-3.0.4-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.src.rpm python-dns-1.15.0-10.module+el8.1.0+3111+de3f2d8e.src.rpm python-docs-2.7.16-2.module+el8.1.0+3111+de3f2d8e.src.rpm python-docutils-0.14-12.module+el8.1.0+3111+de3f2d8e.src.rpm python-funcsigs-1.0.2-13.module+el8.1.0+3111+de3f2d8e.src.rpm python-idna-2.5-7.module+el8.1.0+3111+de3f2d8e.src.rpm python-ipaddress-1.0.18-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-jinja2-2.10-8.module+el8.1.0+3111+de3f2d8e.src.rpm python-lxml-4.2.3-3.module+el8.1.0+3111+de3f2d8e.src.rpm python-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.src.rpm python-mock-2.0.0-13.module+el8.1.0+3111+de3f2d8e.src.rpm python-nose-1.3.7-30.module+el8.1.0+3111+de3f2d8e.src.rpm python-pluggy-0.6.0-8.module+el8.1.0+3111+de3f2d8e.src.rpm python-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.src.rpm python-py-1.5.3-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-pygments-2.2.0-20.module+el8.1.0+3111+de3f2d8e.src.rpm python-pymongo-3.6.1-11.module+el8.1.0+3446+c3d52da3.src.rpm python-pysocks-1.6.8-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-pytest-mock-1.9.0-4.module+el8.1.0+3111+de3f2d8e.src.rpm python-requests-2.20.0-3.module+el8.2.0+4577+feefd9b8.src.rpm python-setuptools_scm-1.15.7-6.module+el8.1.0+3111+de3f2d8e.src.rpm python-six-1.11.0-5.module+el8.1.0+3111+de3f2d8e.src.rpm python-sqlalchemy-1.3.2-1.module+el8.1.0+2994+98e054d6.src.rpm python-urllib3-1.24.2-1.module+el8.1.0+3280+19512f10.src.rpm python-virtualenv-15.1.0-19.module+el8.1.0+3507+d69c168d.src.rpm python-wheel-0.31.1-2.module+el8.1.0+3725+aac5cd17.src.rpm python2-2.7.17-1.module+el8.2.0+4561+f4e0d66a.src.rpm python2-pip-9.0.3-16.module+el8.2.0+5478+b505947e.src.rpm python2-rpm-macros-3-38.module+el8.1.0+3111+de3f2d8e.src.rpm python2-setuptools-39.0.1-11.module+el8.1.0+3446+c3d52da3.src.rpm pytz-2017.2-12.module+el8.1.0+3111+de3f2d8e.src.rpm scipy-1.0.0-20.module+el8.1.0+3323+7ac3e00f.src.rpm aarch64: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.aarch64.rpm numpy-debugsource-1.14.2-13.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-lxml-debugsource-4.2.3-3.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python-pymongo-debugsource-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-2.7.17-1.module+el8.2.0+4561+f4e0d66a.aarch64.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-backports-1.0-15.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-bson-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-bson-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-debug-2.7.17-1.module+el8.2.0+4561+f4e0d66a.aarch64.rpm python2-debuginfo-2.7.17-1.module+el8.2.0+4561+f4e0d66a.aarch64.rpm python2-debugsource-2.7.17-1.module+el8.2.0+4561+f4e0d66a.aarch64.rpm python2-devel-2.7.17-1.module+el8.2.0+4561+f4e0d66a.aarch64.rpm python2-libs-2.7.17-1.module+el8.2.0+4561+f4e0d66a.aarch64.rpm python2-lxml-4.2.3-3.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-lxml-debuginfo-4.2.3-3.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-numpy-1.14.2-13.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python2-numpy-debuginfo-1.14.2-13.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python2-numpy-f2py-1.14.2-13.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-pymongo-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-pymongo-gridfs-3.6.1-11.module+el8.1.0+3446+c3d52da3.aarch64.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.aarch64.rpm python2-scipy-1.0.0-20.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python2-scipy-debuginfo-1.0.0-20.module+el8.1.0+3323+7ac3e00f.aarch64.rpm python2-sqlalchemy-1.3.2-1.module+el8.1.0+2994+98e054d6.aarch64.rpm python2-test-2.7.17-1.module+el8.2.0+4561+f4e0d66a.aarch64.rpm python2-tkinter-2.7.17-1.module+el8.2.0+4561+f4e0d66a.aarch64.rpm python2-tools-2.7.17-1.module+el8.2.0+4561+f4e0d66a.aarch64.rpm scipy-debugsource-1.0.0-20.module+el8.1.0+3323+7ac3e00f.aarch64.rpm noarch: babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.noarch.rpm python-nose-docs-1.3.7-30.module+el8.1.0+3111+de3f2d8e.noarch.rpm python-sqlalchemy-doc-1.3.2-1.module+el8.1.0+2994+98e054d6.noarch.rpm python2-PyMySQL-0.8.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-attrs-17.4.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-babel-2.5.1-9.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-backports-ssl_match_hostname-3.5.0.1-11.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-chardet-3.0.4-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-dns-1.15.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-docs-2.7.16-2.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-docs-info-2.7.16-2.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-docutils-0.14-12.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-funcsigs-1.0.2-13.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-idna-2.5-7.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-ipaddress-1.0.18-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-jinja2-2.10-8.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-mock-2.0.0-13.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-nose-1.3.7-30.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-numpy-doc-1.14.2-13.module+el8.1.0+3323+7ac3e00f.noarch.rpm python2-pip-9.0.3-16.module+el8.2.0+5478+b505947e.noarch.rpm python2-pip-wheel-9.0.3-16.module+el8.2.0+5478+b505947e.noarch.rpm python2-pluggy-0.6.0-8.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-py-1.5.3-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pygments-2.2.0-20.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pysocks-1.6.8-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pytest-3.4.2-13.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pytest-mock-1.9.0-4.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-pytz-2017.2-12.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-requests-2.20.0-3.module+el8.2.0+4577+feefd9b8.noarch.rpm python2-rpm-macros-3-38.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-setuptools-39.0.1-11.module+el8.1.0+3446+c3d52da3.noarch.rpm python2-setuptools-wheel-39.0.1-11.module+el8.1.0+3446+c3d52da3.noarch.rpm python2-setuptools_scm-1.15.7-6.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-six-1.11.0-5.module+el8.1.0+3111+de3f2d8e.noarch.rpm python2-urllib3-1.24.2-1.module+el8.1.0+3280+19512f10.noarch.rpm python2-virtualenv-15.1.0-19.module+el8.1.0+3507+d69c168d.noarch.rpm python2-wheel-0.31.1-2.module+el8.1.0+3725+aac5cd17.noarch.rpm python2-wheel-wheel-0.31.1-2.module+el8.1.0+3725+aac5cd17.noarch.rpm ppc64le: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm numpy-debugsource-1.14.2-13.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-lxml-debugsource-4.2.3-3.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python-pymongo-debugsource-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-2.7.17-1.module+el8.2.0+4561+f4e0d66a.ppc64le.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-backports-1.0-15.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-bson-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-bson-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-debug-2.7.17-1.module+el8.2.0+4561+f4e0d66a.ppc64le.rpm python2-debuginfo-2.7.17-1.module+el8.2.0+4561+f4e0d66a.ppc64le.rpm python2-debugsource-2.7.17-1.module+el8.2.0+4561+f4e0d66a.ppc64le.rpm python2-devel-2.7.17-1.module+el8.2.0+4561+f4e0d66a.ppc64le.rpm python2-libs-2.7.17-1.module+el8.2.0+4561+f4e0d66a.ppc64le.rpm python2-lxml-4.2.3-3.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-lxml-debuginfo-4.2.3-3.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-numpy-1.14.2-13.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python2-numpy-debuginfo-1.14.2-13.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python2-numpy-f2py-1.14.2-13.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-pymongo-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-pymongo-gridfs-3.6.1-11.module+el8.1.0+3446+c3d52da3.ppc64le.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm python2-scipy-1.0.0-20.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python2-scipy-debuginfo-1.0.0-20.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm python2-sqlalchemy-1.3.2-1.module+el8.1.0+2994+98e054d6.ppc64le.rpm python2-test-2.7.17-1.module+el8.2.0+4561+f4e0d66a.ppc64le.rpm python2-tkinter-2.7.17-1.module+el8.2.0+4561+f4e0d66a.ppc64le.rpm python2-tools-2.7.17-1.module+el8.2.0+4561+f4e0d66a.ppc64le.rpm scipy-debugsource-1.0.0-20.module+el8.1.0+3323+7ac3e00f.ppc64le.rpm s390x: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.s390x.rpm numpy-debugsource-1.14.2-13.module+el8.1.0+3323+7ac3e00f.s390x.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-lxml-debugsource-4.2.3-3.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python-pymongo-debugsource-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-2.7.17-1.module+el8.2.0+4561+f4e0d66a.s390x.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-backports-1.0-15.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-bson-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-bson-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-debug-2.7.17-1.module+el8.2.0+4561+f4e0d66a.s390x.rpm python2-debuginfo-2.7.17-1.module+el8.2.0+4561+f4e0d66a.s390x.rpm python2-debugsource-2.7.17-1.module+el8.2.0+4561+f4e0d66a.s390x.rpm python2-devel-2.7.17-1.module+el8.2.0+4561+f4e0d66a.s390x.rpm python2-libs-2.7.17-1.module+el8.2.0+4561+f4e0d66a.s390x.rpm python2-lxml-4.2.3-3.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-lxml-debuginfo-4.2.3-3.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-numpy-1.14.2-13.module+el8.1.0+3323+7ac3e00f.s390x.rpm python2-numpy-debuginfo-1.14.2-13.module+el8.1.0+3323+7ac3e00f.s390x.rpm python2-numpy-f2py-1.14.2-13.module+el8.1.0+3323+7ac3e00f.s390x.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-pymongo-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-pymongo-gridfs-3.6.1-11.module+el8.1.0+3446+c3d52da3.s390x.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.s390x.rpm python2-scipy-1.0.0-20.module+el8.1.0+3323+7ac3e00f.s390x.rpm python2-scipy-debuginfo-1.0.0-20.module+el8.1.0+3323+7ac3e00f.s390x.rpm python2-sqlalchemy-1.3.2-1.module+el8.1.0+2994+98e054d6.s390x.rpm python2-test-2.7.17-1.module+el8.2.0+4561+f4e0d66a.s390x.rpm python2-tkinter-2.7.17-1.module+el8.2.0+4561+f4e0d66a.s390x.rpm python2-tools-2.7.17-1.module+el8.2.0+4561+f4e0d66a.s390x.rpm scipy-debugsource-1.0.0-20.module+el8.1.0+3323+7ac3e00f.s390x.rpm x86_64: Cython-debugsource-0.28.1-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm PyYAML-debugsource-3.12-16.module+el8.1.0+3111+de3f2d8e.x86_64.rpm numpy-debugsource-1.14.2-13.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-lxml-debugsource-4.2.3-3.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-psycopg2-doc-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python-pymongo-debugsource-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-2.7.17-1.module+el8.2.0+4561+f4e0d66a.x86_64.rpm python2-Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-backports-1.0-15.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-bson-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-bson-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-coverage-4.5.1-4.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-coverage-debuginfo-4.5.1-4.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-debug-2.7.17-1.module+el8.2.0+4561+f4e0d66a.x86_64.rpm python2-debuginfo-2.7.17-1.module+el8.2.0+4561+f4e0d66a.x86_64.rpm python2-debugsource-2.7.17-1.module+el8.2.0+4561+f4e0d66a.x86_64.rpm python2-devel-2.7.17-1.module+el8.2.0+4561+f4e0d66a.x86_64.rpm python2-libs-2.7.17-1.module+el8.2.0+4561+f4e0d66a.x86_64.rpm python2-lxml-4.2.3-3.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-lxml-debuginfo-4.2.3-3.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-numpy-1.14.2-13.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python2-numpy-debuginfo-1.14.2-13.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python2-numpy-f2py-1.14.2-13.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python2-psycopg2-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-debug-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-debug-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-debuginfo-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-pymongo-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-pymongo-debuginfo-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-pymongo-gridfs-3.6.1-11.module+el8.1.0+3446+c3d52da3.x86_64.rpm python2-pyyaml-3.12-16.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-pyyaml-debuginfo-3.12-16.module+el8.1.0+3111+de3f2d8e.x86_64.rpm python2-scipy-1.0.0-20.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python2-scipy-debuginfo-1.0.0-20.module+el8.1.0+3323+7ac3e00f.x86_64.rpm python2-sqlalchemy-1.3.2-1.module+el8.1.0+2994+98e054d6.x86_64.rpm python2-test-2.7.17-1.module+el8.2.0+4561+f4e0d66a.x86_64.rpm python2-tkinter-2.7.17-1.module+el8.2.0+4561+f4e0d66a.x86_64.rpm python2-tools-2.7.17-1.module+el8.2.0+4561+f4e0d66a.x86_64.rpm scipy-debugsource-1.0.0-20.module+el8.1.0+3323+7ac3e00f.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2018-18074 https://access.redhat.com/security/cve/CVE-2018-20060 https://access.redhat.com/security/cve/CVE-2018-20852 https://access.redhat.com/security/cve/CVE-2019-11236 https://access.redhat.com/security/cve/CVE-2019-11324 https://access.redhat.com/security/cve/CVE-2019-16056 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index 8. Contact: The Red Hat security contactis . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXqhWFNzjgjWX9erEAQgp/Q//T+YdsmzyRB0ERmYaGVJw2F9TGcPtJ9ig X1Kfd7yEIdYe4WfjAov+iUyZ6h09ZXjlGtoUOukoUzVx+84P4XVADZjwQPGPbkYd HvUKy/4eHx8OYp29RVKeqT8zapeqEBIWp+nc56HKF5DkvOQbmpudnhIh+bnq3Cip p5YtU8+umOBTdAPTgYdkQ9Nc/x7MCiOCMfHkvdECja81WW1Y/Zrym8xvp9AGmdu6 7S1r51PoFq3kMBApjD7VVZpPFW0iZQ90jpSHVoV9E1x1O89IAkkGIWOuZTxpu2lM fISmuBvZhnuqdSrJb04B7YWEcnd8//GpxP0kUqVx76vzPEnUj5Ddy1IIt29YBXnQ 8Rh37yGELG3LkuMgjgpXwD73FHeaoByB8WmBa61okwfYDgh9O4a1G5KC8PRiXAzf uh+Wle2CuJK7+BdUdyYJABDvVpZ4BppNjT/TKaIgxwU3daQeo/tbVU4p+IhOGvky UB1cq+s44R01jvRngoU50c+q4l5Ykawrap8jX8AKFX/JPkzz1IGJ7baia8Nyg2te s7I90TdSZRDhJlMx2c+BcAO9zhFv39VvTy8t3hkocQoiU+3ZbufUQZI20DPw62eN X6AFDZqMrcR6TZuc++iGdN0aui80Tmu7bay8S88v5MhLvjFqmITSjM4DDGBxi6sC fykW5HV23Qg=uSEj -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Apr 28, 2020
•Important
Red Hat
98
security advisoryupdatered hatRed Hat Software Collections: RHSA-2019-1700-01 Important Remote Access
An update for python27-python is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: python27-python security update Advisory ID: RHSA-2019:1700-01 Product: Red Hat Software Collections Advisory URL: https://access.redhat.com/errata/RHSA-2019:1700 Issue date: 2019-07-08 CVE Names: CVE-2019-9948 CVE-2019-10160 ==================================================================== 1. Summary: An update for python27-python is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.4) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.5) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.6) - ppc64le, s390x, x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6) - x86_64 Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7) - x86_64 3. Description: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces tomany system calls and libraries, as well as to various windowing systems. Security Fix(es): * python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc (CVE-2019-10160) * python: undocumented local_file protocol allows remote attackers to bypass protection mechanisms (CVE-2019-9948) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 5. Bugs fixed (https://bugzilla.redhat.com/): 1695570 - CVE-2019-9948 python: undocumented local_file protocol allows remote attackers to bypass protection mechanisms 1718388 - CVE-2019-10160 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc 6. Package List: Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6): Source: python27-python-2.7.16-6.el6.src.rpm x86_64: python27-python-2.7.16-6.el6.x86_64.rpm python27-python-debug-2.7.16-6.el6.x86_64.rpm python27-python-debuginfo-2.7.16-6.el6.x86_64.rpm python27-python-devel-2.7.16-6.el6.x86_64.rpm python27-python-libs-2.7.16-6.el6.x86_64.rpm python27-python-test-2.7.16-6.el6.x86_64.rpm python27-python-tools-2.7.16-6.el6.x86_64.rpm python27-tkinter-2.7.16-6.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 6): Source: python27-python-2.7.16-6.el6.src.rpm x86_64: python27-python-2.7.16-6.el6.x86_64.rpm python27-python-debug-2.7.16-6.el6.x86_64.rpm python27-python-debuginfo-2.7.16-6.el6.x86_64.rpm python27-python-devel-2.7.16-6.el6.x86_64.rpm python27-python-libs-2.7.16-6.el6.x86_64.rpm python27-python-test-2.7.16-6.el6.x86_64.rpm python27-python-tools-2.7.16-6.el6.x86_64.rpm python27-tkinter-2.7.16-6.el6.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server (v.7): Source: python27-python-2.7.16-6.el7.src.rpm ppc64le: python27-python-2.7.16-6.el7.ppc64le.rpm python27-python-debug-2.7.16-6.el7.ppc64le.rpm python27-python-debuginfo-2.7.16-6.el7.ppc64le.rpm python27-python-devel-2.7.16-6.el7.ppc64le.rpm python27-python-libs-2.7.16-6.el7.ppc64le.rpm python27-python-test-2.7.16-6.el7.ppc64le.rpm python27-python-tools-2.7.16-6.el7.ppc64le.rpm python27-tkinter-2.7.16-6.el7.ppc64le.rpm s390x: python27-python-2.7.16-6.el7.s390x.rpm python27-python-debug-2.7.16-6.el7.s390x.rpm python27-python-debuginfo-2.7.16-6.el7.s390x.rpm python27-python-devel-2.7.16-6.el7.s390x.rpm python27-python-libs-2.7.16-6.el7.s390x.rpm python27-python-test-2.7.16-6.el7.s390x.rpm python27-python-tools-2.7.16-6.el7.s390x.rpm python27-tkinter-2.7.16-6.el7.s390x.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7): Source: python27-python-2.7.16-6.el7.src.rpm ppc64le: python27-python-2.7.16-6.el7.ppc64le.rpm python27-python-debug-2.7.16-6.el7.ppc64le.rpm python27-python-debuginfo-2.7.16-6.el7.ppc64le.rpm python27-python-devel-2.7.16-6.el7.ppc64le.rpm python27-python-libs-2.7.16-6.el7.ppc64le.rpm python27-python-test-2.7.16-6.el7.ppc64le.rpm python27-python-tools-2.7.16-6.el7.ppc64le.rpm python27-tkinter-2.7.16-6.el7.ppc64le.rpm s390x: python27-python-2.7.16-6.el7.s390x.rpm python27-python-debug-2.7.16-6.el7.s390x.rpm python27-python-debuginfo-2.7.16-6.el7.s390x.rpm python27-python-devel-2.7.16-6.el7.s390x.rpm python27-python-libs-2.7.16-6.el7.s390x.rpm python27-python-test-2.7.16-6.el7.s390x.rpm python27-python-tools-2.7.16-6.el7.s390x.rpm python27-tkinter-2.7.16-6.el7.s390x.rpm x86_64: python27-python-2.7.16-6.el7.x86_64.rpm python27-python-debug-2.7.16-6.el7.x86_64.rpm python27-python-debuginfo-2.7.16-6.el7.x86_64.rpm python27-python-devel-2.7.16-6.el7.x86_64.rpm python27-python-libs-2.7.16-6.el7.x86_64.rpm python27-python-test-2.7.16-6.el7.x86_64.rpm python27-python-tools-2.7.16-6.el7.x86_64.rpm python27-tkinter-2.7.16-6.el7.x86_64.rpm Red Hat Software Collections for RedHat Enterprise Linux Server EUS (v. 7.4): Source: python27-python-2.7.16-6.el7.src.rpm ppc64le: python27-python-2.7.16-6.el7.ppc64le.rpm python27-python-debug-2.7.16-6.el7.ppc64le.rpm python27-python-debuginfo-2.7.16-6.el7.ppc64le.rpm python27-python-devel-2.7.16-6.el7.ppc64le.rpm python27-python-libs-2.7.16-6.el7.ppc64le.rpm python27-python-test-2.7.16-6.el7.ppc64le.rpm python27-python-tools-2.7.16-6.el7.ppc64le.rpm python27-tkinter-2.7.16-6.el7.ppc64le.rpm s390x: python27-python-2.7.16-6.el7.s390x.rpm python27-python-debug-2.7.16-6.el7.s390x.rpm python27-python-debuginfo-2.7.16-6.el7.s390x.rpm python27-python-devel-2.7.16-6.el7.s390x.rpm python27-python-libs-2.7.16-6.el7.s390x.rpm python27-python-test-2.7.16-6.el7.s390x.rpm python27-python-tools-2.7.16-6.el7.s390x.rpm python27-tkinter-2.7.16-6.el7.s390x.rpm x86_64: python27-python-2.7.16-6.el7.x86_64.rpm python27-python-debug-2.7.16-6.el7.x86_64.rpm python27-python-debuginfo-2.7.16-6.el7.x86_64.rpm python27-python-devel-2.7.16-6.el7.x86_64.rpm python27-python-libs-2.7.16-6.el7.x86_64.rpm python27-python-test-2.7.16-6.el7.x86_64.rpm python27-python-tools-2.7.16-6.el7.x86_64.rpm python27-tkinter-2.7.16-6.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v.7.5): Source: python27-python-2.7.16-6.el7.src.rpm ppc64le: python27-python-2.7.16-6.el7.ppc64le.rpm python27-python-debug-2.7.16-6.el7.ppc64le.rpm python27-python-debuginfo-2.7.16-6.el7.ppc64le.rpm python27-python-devel-2.7.16-6.el7.ppc64le.rpm python27-python-libs-2.7.16-6.el7.ppc64le.rpm python27-python-test-2.7.16-6.el7.ppc64le.rpm python27-python-tools-2.7.16-6.el7.ppc64le.rpm python27-tkinter-2.7.16-6.el7.ppc64le.rpm s390x: python27-python-2.7.16-6.el7.s390x.rpm python27-python-debug-2.7.16-6.el7.s390x.rpm python27-python-debuginfo-2.7.16-6.el7.s390x.rpm python27-python-devel-2.7.16-6.el7.s390x.rpm python27-python-libs-2.7.16-6.el7.s390x.rpm python27-python-test-2.7.16-6.el7.s390x.rpm python27-python-tools-2.7.16-6.el7.s390x.rpm python27-tkinter-2.7.16-6.el7.s390x.rpm x86_64: python27-python-2.7.16-6.el7.x86_64.rpm python27-python-debug-2.7.16-6.el7.x86_64.rpm python27-python-debuginfo-2.7.16-6.el7.x86_64.rpm python27-python-devel-2.7.16-6.el7.x86_64.rpm python27-python-libs-2.7.16-6.el7.x86_64.rpm python27-python-test-2.7.16-6.el7.x86_64.rpm python27-python-tools-2.7.16-6.el7.x86_64.rpm python27-tkinter-2.7.16-6.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v.7.6): Source: python27-python-2.7.16-6.el7.src.rpm ppc64le: python27-python-2.7.16-6.el7.ppc64le.rpm python27-python-debug-2.7.16-6.el7.ppc64le.rpm python27-python-debuginfo-2.7.16-6.el7.ppc64le.rpm python27-python-devel-2.7.16-6.el7.ppc64le.rpm python27-python-libs-2.7.16-6.el7.ppc64le.rpm python27-python-test-2.7.16-6.el7.ppc64le.rpm python27-python-tools-2.7.16-6.el7.ppc64le.rpm python27-tkinter-2.7.16-6.el7.ppc64le.rpm s390x: python27-python-2.7.16-6.el7.s390x.rpm python27-python-debug-2.7.16-6.el7.s390x.rpm python27-python-debuginfo-2.7.16-6.el7.s390x.rpm python27-python-devel-2.7.16-6.el7.s390x.rpm python27-python-libs-2.7.16-6.el7.s390x.rpm python27-python-test-2.7.16-6.el7.s390x.rpm python27-python-tools-2.7.16-6.el7.s390x.rpm python27-tkinter-2.7.16-6.el7.s390x.rpm x86_64: python27-python-2.7.16-6.el7.x86_64.rpm python27-python-debug-2.7.16-6.el7.x86_64.rpm python27-python-debuginfo-2.7.16-6.el7.x86_64.rpm python27-python-devel-2.7.16-6.el7.x86_64.rpm python27-python-libs-2.7.16-6.el7.x86_64.rpm python27-python-test-2.7.16-6.el7.x86_64.rpm python27-python-tools-2.7.16-6.el7.x86_64.rpm python27-tkinter-2.7.16-6.el7.x86_64.rpm Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7): Source: python27-python-2.7.16-6.el7.src.rpm x86_64: python27-python-2.7.16-6.el7.x86_64.rpm python27-python-debug-2.7.16-6.el7.x86_64.rpm python27-python-debuginfo-2.7.16-6.el7.x86_64.rpm python27-python-devel-2.7.16-6.el7.x86_64.rpm python27-python-libs-2.7.16-6.el7.x86_64.rpm python27-python-test-2.7.16-6.el7.x86_64.rpm python27-python-tools-2.7.16-6.el7.x86_64.rpm python27-tkinter-2.7.16-6.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7.References: https://access.redhat.com/security/cve/CVE-2019-9948 https://access.redhat.com/security/cve/CVE-2019-10160 https://access.redhat.com/security/updates/classification#important https://bugs.python.org/issue35907 https://bugs.python.org/issue36742 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXSNUI9zjgjWX9erEAQhlNg/7BgHl9+FbpsIPZZ2dnY6wcOr0XSIXRBOF 8YYynMLQEfd+2JdKS4H/fABKtuBbgD6vZCgNR9ySFUit6bRll6ZS8R4KCOzW980H wt4o1+ihQLS3T5ys6EfMSnVRG+aaSOpx9oTJ7m07Y2yiRLrtaI985bdOk49MmuTs MDIMjd/Yv30GEHhsAyFCzbc2QCVSXsdpOKgE1407I4mzt3QU7t7k4daTOA0WU4LG wZrk29/6jLSqtV7xSu/02XfVg/zafafBXVHXYMLzHwsYcIyY2OgfUUvheXon8hRK +7hVH+fTjtN28kLJZUevizwM8xVqwWCLhljWxjbKZ3nHY+M3coEIRn8LJys5IOL8 SM6kiOlEDuYRRMd5SnsLnhXhHliSXAiDa0ikKfw3lCMyc80mqsEu/1Hj5ZQ+zKfU +3Dc/ETDgaohwmurBgasYu8AXEeFUpa6Qce393jYsxWmyUgk8yh9OYC53LcgG9XD 7gUPhTxk1YQvBvleFbyT7GtXQrU0Y/mrBePMzHhKJ8hCrjFQNIDFpsxBXGPT/Iiu igyUCcwIZw0bdZ7w/6IR5RKXYytZL4M2FfdJrPXQzz+71Z4GvBBh3oIJ/CyOLaTk vVUuU2+JBSMsg8mB+vKROJ4iA7ESEPqEgl1JWaWNOzGXq2oQ2Ek54NwnvMg2sn5d WMTGaU6Bbp8=OvGB -----END PGP SIGNATURE----- -- RHSA-announce mailing list
Jul 08, 2019
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!