Stay Secure with the Latest Linux Advisories

security advisorysecurity issuecritical

Mageia: 2020-1234 Critical Ruby Security Vulnerability Report

A vulnerability was found in Python 2.x through 2.7.16. An improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization could lead to an Information Disclosure (credentials, cookies, etc. that are cached against a given hostname) in the urllib.parse.urlsplit, urllib.parse.urlparse components. A specially . MGASA-2019-0148 - Updated python packages fix security vulnerability Publication date: 10 Apr 2019 URL: https://advisories.mageia.org/MGASA-2019-0148.html Type: security Affected Mageia releases: 6 CVE: CVE-2019-9636 A vulnerability was found in Python 2.x through 2.7.16. An improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization could lead to an Information Disclosure (credentials, cookies, etc. that are cached against a given hostname) in the urllib.parse.urlsplit, urllib.parse.urlparse components. A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly (CVE-2019-9636). References: - https://bugs.mageia.org/show_bug.cgi?id=24640 - https://access.redhat.com/errata/RHSA-2019:0710 - https://www.cve.org/CVERecord?id=CVE-2019-9636 SRPMS: - 6/core/python-2.7.15-1.3.mga6 . Revised Java libraries resolve a significant security vulnerability linked to mishandling of character encoding, preventing sensitive data leaks.. Python Security Update, Mageia Advisory, Unicode Vulnerability, Information Disclosure, Security Fix. . Severity: Critical. LinuxSecurity.com Team

Apr 10, 2019 •Critical Mageia