CVE-2019-9636
python: Information Disclosure due to urlsplit improper NFKC normalization
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Photon OS. Niedriger laut Red Hat (hoch), AlmaLinux (hoch), Amazon (hoch), Oracle (hoch), Rocky Linux (hoch), Ubuntu (mittel).
Beschreibung
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 1.0 | python2, python3 | 2.7.15-4.ph1 und 1 weitere |
| Photon OS 2.0 | python2, python3 | 2.7.15-4.ph2 und 1 weitere |
| Photon OS 3.0 | python2, python3 | 2.7.15-4.ph3 und 1 weitere |
| alma 8 | python27:2.7::python-psycopg2-doc, python27:2.7::python2-Cython, python27:2.7::python2-PyMySQL und 21 weitere | 2.7.5-7.module_el8.6.0+2781+fed64c13 und 20 weitere |
| alpine 3.10 | python2, python2-tkinter | 2.7.16-r1 und 1 weitere |
| alpine 3.11 | python2, python2-tkinter | 2.7.16-r1 und 1 weitere |
| alpine 3.12 | python2 | 2.7.16-r1 |
| alpine 3.13 | python2 | 2.7.16-r1 |
| alpine 3.14 | python2 | 2.7.16-r1 |
| alpine 3.15 | python2 | 2.7.16-r1 |
| alpine 3.6 | python3 | 3.6.8-r0 |
| alpine 3.7 | python2, python3 | 2.7.15-r2 und 1 weitere |
Alle 223 Einträge aus 30 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 1.0 | python2 | 2.7.15-4.ph1 |
| Photon OS 1.0 | python3 | 3.5.6-4.ph1 |
| Photon OS 2.0 | python2 | 2.7.15-4.ph2 |
| Photon OS 2.0 | python3 | 3.6.5-5.ph2 |
| Photon OS 3.0 | python2 | 2.7.15-4.ph3 |
| Photon OS 3.0 | python3 | 3.7.0-5.ph3 |
| alma 8 | python27:2.7::python-psycopg2-doc | 2.7.5-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-Cython | 0.28.1-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-PyMySQL | 0.8.0-10.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-attrs | 17.4.0-10.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-chardet | 3.0.4-10.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-coverage | 4.5.1-4.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-docutils | 0.14-12.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-funcsigs | 1.0.2-13.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-idna | 2.5-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-ipaddress | 1.0.18-6.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-markupsafe | 0.23-19.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-mock | 2.0.0-13.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pluggy | 0.6.0-8.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-psycopg2 | 2.7.5-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-psycopg2-debug | 2.7.5-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-psycopg2-tests | 2.7.5-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-py | 1.5.3-6.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pysocks | 1.6.8-6.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pytest | 3.4.2-13.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pytest-mock | 1.9.0-4.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pytz | 2017.2-12.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pyyaml | 3.12-16.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-rpm-macros | 3-38.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-setuptools_scm | 1.15.7-6.module_el8.6.0+2781+fed64c13 |
| alpine 3.10 | python2 | 2.7.16-r1 |
| alpine 3.10 | python2-tkinter | 2.7.17-r0 |
| alpine 3.11 | python2 | 2.7.16-r1 |
| alpine 3.11 | python2-tkinter | 2.7.17-r0 |
| alpine 3.12 | python2 | 2.7.16-r1 |
| alpine 3.13 | python2 | 2.7.16-r1 |
| alpine 3.14 | python2 | 2.7.16-r1 |
| alpine 3.15 | python2 | 2.7.16-r1 |
| alpine 3.6 | python3 | 3.6.8-r0 |
| alpine 3.7 | python2 | 2.7.15-r2 |
| alpine 3.7 | python3 | 3.6.8-r0 |
| alpine 3.8 | python2 | 2.7.15-r2 |
| alpine 3.8 | python3 | 3.6.8-r0 |
| alpine 3.9 | python2 | 2.7.16-r1 |
| amazon linux 1 | python27 | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python27-debuginfo | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python27-devel | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python27-libs | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python27-test | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python27-tools | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python34 | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python34-debuginfo | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python34-devel | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python34-libs | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python34-test | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python34-tools | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python35 | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python35-debuginfo | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python35-devel | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python35-libs | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python35-test | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python35-tools | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python36 | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-debug | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-debuginfo | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-devel | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-libs | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-test | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-tools | 3.6.8-1.13.amzn1 |
| amazon linux 2 | python | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-debug | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-debuginfo | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-devel | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-libs | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-test | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-tools | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python3 | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-debug | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-debuginfo | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-devel | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-libs | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-test | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-tkinter | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-tools | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | tkinter | 2.7.16-1.amzn2.0.1 |
| debian 11 | python2.7 | 2.7.16-2 |
| debian 8 | python2.7 | 2.7.9-2+deb8u3 |
| debian 8 | python3.4 | 3.4.2-1+deb8u3 |
| debian 9 | python2.7 | 2.7.13-2+deb9u4 |
| debian 9 | python3.5 | 3.5.3-1+deb9u2 |
| Oracle Linux 6 | python | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 6 | python-devel | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 6 | python-libs | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 6 | python-test | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 6 | python-tools | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 6 | tkinter | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 7 | python | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | python-debug | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | python-devel | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | python-libs | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | python-test | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | python-tools | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | tkinter | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 8 | babel | 2.5.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | platform-python | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | platform-python-debug | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | platform-python-devel | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | python-nose-docs | 1.3.7-30.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python-psycopg2-doc | 2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python-sqlalchemy-doc | 1.3.2-1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2 | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-Cython | 0.28.1-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-PyMySQL | 0.8.0-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-attrs | 17.4.0-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-babel | 2.5.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-backports | 1.0-15.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-backports-ssl_match_hostname | 3.5.0.1-11.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-bson | 3.6.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-chardet | 3.0.4-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-coverage | 4.5.1-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-debug | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-devel | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-dns | 1.15.0-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-docs | 2.7.15-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-docs-info | 2.7.15-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-docutils | 0.14-12.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-funcsigs | 1.0.2-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-idna | 2.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-ipaddress | 1.0.18-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-jinja2 | 2.10-8.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-libs | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-lxml | 4.2.3-3.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-markupsafe | 0.23-19.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-mock | 2.0.0-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-nose | 1.3.7-30.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-numpy | 1:1.14.2-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-numpy-doc | 1:1.14.2-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-numpy-f2py | 1:1.14.2-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pip | 9.0.3-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pluggy | 0.6.0-8.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-psycopg2 | 2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-psycopg2-debug | 2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-psycopg2-tests | 2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-py | 1.5.3-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pygments | 2.2.0-20.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pymongo | 3.6.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pymongo-gridfs | 3.6.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pysocks | 1.6.8-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pytest | 3.4.2-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pytest-mock | 1.9.0-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pytz | 2017.2-12.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pyyaml | 3.12-16.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-requests | 2.20.0-2.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-rpm-macros | 3-38.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-scipy | 1.0.0-19.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-setuptools | 39.0.1-11.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-setuptools_scm | 1.15.7-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-six | 1.11.0-5.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-sqlalchemy | 1.3.2-1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-test | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-tkinter | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-tools | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-urllib3 | 1.23-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-virtualenv | 15.1.0-18.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-wheel | 1:0.30.0-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python3-idle | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | python3-libs | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | python3-test | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | python3-tkinter | 3.6.8-2.0.1.el8_0 |
| rapidfort fedora 43 | python3.15 | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-debug | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-devel | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-debug | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-devel | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-idle | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-libs | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-test | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-tkinter | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-idle | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-libs | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-test | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-tkinter | 3.15.0-1.fc43 |
| rocky 8 | python27:2.7::babel | 2.5.1-9.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python-psycopg2-doc | 2.7.5-7.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-Cython | 0.28.1-7.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-PyMySQL | 0.8.0-10.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-attrs | 17.4.0-10.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-babel | 2.5.1-9.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-chardet | 3.0.4-10.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-coverage | 4.5.1-4.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-docutils | 0.14-12.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-funcsigs | 1.0.2-13.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-idna | 2.5-7.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-ipaddress | 1.0.18-6.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-jinja2 | 2.10-8.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-markupsafe | 0.23-19.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-mock | 2.0.0-13.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-pluggy | 0.6.0-8.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-psycopg2 | 2.7.5-7.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-psycopg2-debug | 2.7.5-7.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-psycopg2-tests | 2.7.5-7.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-py | 1.5.3-6.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-pysocks | 1.6.8-6.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-pytest | 3.4.2-13.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-pytest-mock | 1.9.0-4.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-pytz | 2017.2-12.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-pyyaml | 3.12-16.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-rpm-macros | 3-38.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-setuptools_scm | 1.15.7-6.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python36:3.6::python-nose-docs | 1.3.7-30.module+el8.3.0+120+426d8baf |
| ubuntu 14.04-ESM | python2.7 | 2.7.6-8ubuntu0.6+esm2 |
| ubuntu 14.04-ESM | python3.4 | 3.4.3-1ubuntu1~14.04.7+esm2 |
| ubuntu 14.04-ESM | python3.5 | 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1 |
| ubuntu 16.04 | python2.7 | 2.7.12-1ubuntu0~16.04.8 |
| ubuntu 16.04 | python3.5 | 3.5.2-2ubuntu0~16.04.8 |
| ubuntu 16.04-ESM | python2.7 | 2.7.12-1ubuntu0~16.04.8 |
| ubuntu 16.04-ESM | python3.5 | 3.5.2-2ubuntu0~16.04.8 |
| ubuntu 18.04 | python2.7 | 2.7.15-4ubuntu4~18.04.1 |
| ubuntu 18.04 | python3.6 | 3.6.8-1~18.04.2 |
| ubuntu 18.04-ESM | python2.7 | 2.7.15-4ubuntu4~18.04.1 |
| ubuntu 18.04-ESM | python3.6 | 3.6.8-1~18.04.2 |
| ubuntu 18.10 | python2.7 | 2.7.16-2~18.10 |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00097.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
- http://www.securityfocus.com/bid/107400
- https://access.redhat.com/errata/RHBA-2019:0763
Alle 69 Referenzen
- https://access.redhat.com/errata/RHBA-2019:0764
- https://access.redhat.com/errata/RHBA-2019:0959
- https://access.redhat.com/errata/RHSA-2019:0710
- https://access.redhat.com/errata/RHSA-2019:0765
- https://access.redhat.com/errata/RHSA-2019:0806
- https://access.redhat.com/errata/RHSA-2019:0902
- https://access.redhat.com/errata/RHSA-2019:0981
- https://access.redhat.com/errata/RHSA-2019:0997
- https://access.redhat.com/errata/RHSA-2019:1467
- https://access.redhat.com/errata/RHSA-2019:2980
- https://access.redhat.com/errata/RHSA-2019:3170
- https://access.redhat.com/security/cve/CVE-2019-9636
- https://bugs.python.org/issue36216
- https://bugzilla.redhat.com/show_bug.cgi?id=1674059
- https://bugzilla.redhat.com/show_bug.cgi?id=1678520
- https://bugzilla.redhat.com/show_bug.cgi?id=1688543
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7164
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7548
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9636
- https://errata.almalinux.org/8/ALSA-2019-0981.html
- https://errata.rockylinux.org/RLSA-2019:0981
- https://github.com/python/cpython/pull/12201
- https://linux.oracle.com/cve/CVE-2019-9636.html
- https://linux.oracle.com/errata/ELSA-2019-1467.html
- https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html
- https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html
- https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html
- https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFBAAGM27H73OLYBUA2IAZFSUN6KGLME/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D3LXPABKVLFYUHRYJPM3CSS5MS6FXKS7/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ICBEGRHIPHWPG2VGYS6R4EVKVUUF4AQW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFAXBEY2TGOBDRKTR556JBXBVFSAKD6I/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L25RTMKCF62DLC2XVSNXGX7C7HXISLVM/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TR6GCO3WTV4D5L23WTCBF275VE6BVNI3/
- https://nvd.nist.gov/vuln/detail/CVE-2019-9636
- https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization.html
- https://security.gentoo.org/glsa/202003-26
- https://security.netapp.com/advisory/ntap-20190517-0001/
- https://ubuntu.com/security/notices/USN-4127-1
- https://ubuntu.com/security/notices/USN-4127-2
- https://ubuntu.com/security/notices/USN-6891-1
- https://usn.ubuntu.com/4127-1/
- https://usn.ubuntu.com/4127-2/
- https://www.cve.org/CVERecord?id=CVE-2019-9636
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2022.html