Security update for python
This update for python fixes the following issues: Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).
- Update to 2.7.17-7.32.2
Published Updated
PatchFirst · Latest vulnerabilities
python vulnerabilities
Vulnerabilities published for python in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 7
Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9947: Fixed an insufficient validation of URL paths with embedded whitespace or control characters that could allow HTTP header injections. (bsc#1130840) - CVE-2019-16056: Fixed a parser issue in the email module. (bsc#1149955) - CVE-2019-16935: Fixed a reflected XSS in python/Lib/DocXMLRPCServer.py (bsc#1153238).
- Update to 2.7.14-7.24.1
Published UpdatedSecurity update for python
This update for python fixes the following issues: - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853).
- Update to 2.7.14-7.17.1
Published UpdatedSecurity update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-10160: Fixed a regression in urlparse() and urlsplit() introduced by the fix for CVE-2019-9636 (bsc#1138459).
- Update to 2.7.14-7.14.2
Published UpdatedSecurity update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2019-9948: Fixed a 'file:' blacklist bypass in URIs by using the 'local-file:' scheme instead (bsc#1130847). - CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization (bsc#1129346).
- Update to 2.7.14-7.11.1
Published UpdatedSecurity update for python
This update for python fixes the following issues: Security issue fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191)
- Update to 2.7.14-7.6.1
Published UpdatedSecurity update for python
This update for python fixes the following issue: - CVE-2018-1000802: Prevent command injection in shutil module (make_archive function) via passage of unfiltered user input (bsc#1109663)
- Update to 2.7.14-7.3.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.