critical
CVE-2019-9636
python: Information Disclosure due to urlsplit improper NFKC normalization
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Photon OS. Rated lower by Red Hat (high), AlmaLinux (high), Amazon (high), Oracle (high), Rocky Linux (high), Ubuntu (medium).
Description
Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly. This is fixed in: v2.7.17, v2.7.17rc1, v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1, v3.5.7, v3.5.8, v3.5.8rc1, v3.5.8rc2, v3.5.9; v3.6.10, v3.6.10rc1, v3.6.11, v3.6.11rc1, v3.6.12, v3.6.9, v3.6.9rc1; v3.7.3, v3.7.3rc1, v3.7.4, v3.7.4rc1, v3.7.4rc2, v3.7.5, v3.7.5rc1, v3.7.6, v3.7.6rc1, v3.7.7, v3.7.7rc1, v3.7.8, v3.7.8rc1, v3.7.9.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 1.0 | python2, python3 | 2.7.15-4.ph1 and 1 more |
| Photon OS 2.0 | python2, python3 | 2.7.15-4.ph2 and 1 more |
| Photon OS 3.0 | python2, python3 | 2.7.15-4.ph3 and 1 more |
| alma 8 | python27:2.7::python-psycopg2-doc, python27:2.7::python2-Cython, python27:2.7::python2-PyMySQL and 21 more | 2.7.5-7.module_el8.6.0+2781+fed64c13 and 20 more |
| alpine 3.10 | python2, python2-tkinter | 2.7.16-r1 and 1 more |
| alpine 3.11 | python2, python2-tkinter | 2.7.16-r1 and 1 more |
| alpine 3.12 | python2 | 2.7.16-r1 |
| alpine 3.13 | python2 | 2.7.16-r1 |
| alpine 3.14 | python2 | 2.7.16-r1 |
| alpine 3.15 | python2 | 2.7.16-r1 |
| alpine 3.6 | python3 | 3.6.8-r0 |
| alpine 3.7 | python2, python3 | 2.7.15-r2 and 1 more |
Show all 223 entries from 30 sources
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 1.0 | python2 | 2.7.15-4.ph1 |
| Photon OS 1.0 | python3 | 3.5.6-4.ph1 |
| Photon OS 2.0 | python2 | 2.7.15-4.ph2 |
| Photon OS 2.0 | python3 | 3.6.5-5.ph2 |
| Photon OS 3.0 | python2 | 2.7.15-4.ph3 |
| Photon OS 3.0 | python3 | 3.7.0-5.ph3 |
| alma 8 | python27:2.7::python-psycopg2-doc | 2.7.5-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-Cython | 0.28.1-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-PyMySQL | 0.8.0-10.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-attrs | 17.4.0-10.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-chardet | 3.0.4-10.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-coverage | 4.5.1-4.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-docutils | 0.14-12.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-funcsigs | 1.0.2-13.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-idna | 2.5-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-ipaddress | 1.0.18-6.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-markupsafe | 0.23-19.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-mock | 2.0.0-13.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pluggy | 0.6.0-8.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-psycopg2 | 2.7.5-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-psycopg2-debug | 2.7.5-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-psycopg2-tests | 2.7.5-7.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-py | 1.5.3-6.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pysocks | 1.6.8-6.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pytest | 3.4.2-13.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pytest-mock | 1.9.0-4.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pytz | 2017.2-12.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-pyyaml | 3.12-16.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-rpm-macros | 3-38.module_el8.6.0+2781+fed64c13 |
| alma 8 | python27:2.7::python2-setuptools_scm | 1.15.7-6.module_el8.6.0+2781+fed64c13 |
| alpine 3.10 | python2 | 2.7.16-r1 |
| alpine 3.10 | python2-tkinter | 2.7.17-r0 |
| alpine 3.11 | python2 | 2.7.16-r1 |
| alpine 3.11 | python2-tkinter | 2.7.17-r0 |
| alpine 3.12 | python2 | 2.7.16-r1 |
| alpine 3.13 | python2 | 2.7.16-r1 |
| alpine 3.14 | python2 | 2.7.16-r1 |
| alpine 3.15 | python2 | 2.7.16-r1 |
| alpine 3.6 | python3 | 3.6.8-r0 |
| alpine 3.7 | python2 | 2.7.15-r2 |
| alpine 3.7 | python3 | 3.6.8-r0 |
| alpine 3.8 | python2 | 2.7.15-r2 |
| alpine 3.8 | python3 | 3.6.8-r0 |
| alpine 3.9 | python2 | 2.7.16-r1 |
| amazon linux 1 | python27 | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python27-debuginfo | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python27-devel | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python27-libs | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python27-test | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python27-tools | 2.7.16-1.127.amzn1 |
| amazon linux 1 | python34 | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python34-debuginfo | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python34-devel | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python34-libs | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python34-test | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python34-tools | 3.4.10-1.49.amzn1 |
| amazon linux 1 | python35 | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python35-debuginfo | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python35-devel | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python35-libs | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python35-test | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python35-tools | 3.5.7-1.22.amzn1 |
| amazon linux 1 | python36 | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-debug | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-debuginfo | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-devel | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-libs | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-test | 3.6.8-1.13.amzn1 |
| amazon linux 1 | python36-tools | 3.6.8-1.13.amzn1 |
| amazon linux 2 | python | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-debug | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-debuginfo | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-devel | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-libs | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-test | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python-tools | 2.7.16-1.amzn2.0.1 |
| amazon linux 2 | python3 | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-debug | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-debuginfo | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-devel | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-libs | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-test | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-tkinter | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | python3-tools | 3.7.3-1.amzn2.0.1 |
| amazon linux 2 | tkinter | 2.7.16-1.amzn2.0.1 |
| debian 11 | python2.7 | 2.7.16-2 |
| debian 8 | python2.7 | 2.7.9-2+deb8u3 |
| debian 8 | python3.4 | 3.4.2-1+deb8u3 |
| debian 9 | python2.7 | 2.7.13-2+deb9u4 |
| debian 9 | python3.5 | 3.5.3-1+deb9u2 |
| Oracle Linux 6 | python | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 6 | python-devel | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 6 | python-libs | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 6 | python-test | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 6 | python-tools | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 6 | tkinter | 2.6.6-68.0.1.el6_10 |
| Oracle Linux 7 | python | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | python-debug | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | python-devel | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | python-libs | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | python-test | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | python-tools | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 7 | tkinter | 2.7.5-77.0.1.el7_6 |
| Oracle Linux 8 | babel | 2.5.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | platform-python | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | platform-python-debug | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | platform-python-devel | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | python-nose-docs | 1.3.7-30.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python-psycopg2-doc | 2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python-sqlalchemy-doc | 1.3.2-1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2 | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-Cython | 0.28.1-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-PyMySQL | 0.8.0-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-attrs | 17.4.0-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-babel | 2.5.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-backports | 1.0-15.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-backports-ssl_match_hostname | 3.5.0.1-11.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-bson | 3.6.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-chardet | 3.0.4-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-coverage | 4.5.1-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-debug | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-devel | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-dns | 1.15.0-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-docs | 2.7.15-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-docs-info | 2.7.15-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-docutils | 0.14-12.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-funcsigs | 1.0.2-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-idna | 2.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-ipaddress | 1.0.18-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-jinja2 | 2.10-8.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-libs | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-lxml | 4.2.3-3.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-markupsafe | 0.23-19.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-mock | 2.0.0-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-nose | 1.3.7-30.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-numpy | 1:1.14.2-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-numpy-doc | 1:1.14.2-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-numpy-f2py | 1:1.14.2-10.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pip | 9.0.3-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pluggy | 0.6.0-8.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-psycopg2 | 2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-psycopg2-debug | 2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-psycopg2-tests | 2.7.5-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-py | 1.5.3-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pygments | 2.2.0-20.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pymongo | 3.6.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pymongo-gridfs | 3.6.1-9.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pysocks | 1.6.8-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pytest | 3.4.2-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pytest-mock | 1.9.0-4.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pytz | 2017.2-12.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-pyyaml | 3.12-16.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-requests | 2.20.0-2.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-rpm-macros | 3-38.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-scipy | 1.0.0-19.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-setuptools | 39.0.1-11.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-setuptools_scm | 1.15.7-6.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-six | 1.11.0-5.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-sqlalchemy | 1.3.2-1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-test | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-tkinter | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-tools | 2.7.15-22.0.1.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-urllib3 | 1.23-7.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-virtualenv | 15.1.0-18.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python2-wheel | 1:0.30.0-13.module+el8.0.0+5233+93973c75 |
| Oracle Linux 8 | python3-idle | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | python3-libs | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | python3-test | 3.6.8-2.0.1.el8_0 |
| Oracle Linux 8 | python3-tkinter | 3.6.8-2.0.1.el8_0 |
| rapidfort fedora 43 | python3.15 | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-debug | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-devel | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-debug | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-devel | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-idle | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-libs | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-test | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-freethreading-tkinter | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-idle | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-libs | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-test | 3.15.0-1.fc43 |
| rapidfort fedora 43 | python3.15-tkinter | 3.15.0-1.fc43 |
| rocky 8 | python27:2.7::babel | 2.5.1-9.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python-psycopg2-doc | 2.7.5-7.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-Cython | 0.28.1-7.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-PyMySQL | 0.8.0-10.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-attrs | 17.4.0-10.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-babel | 2.5.1-9.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-chardet | 3.0.4-10.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-coverage | 4.5.1-4.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-docutils | 0.14-12.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-funcsigs | 1.0.2-13.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-idna | 2.5-7.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-ipaddress | 1.0.18-6.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-jinja2 | 2.10-8.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-markupsafe | 0.23-19.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-mock | 2.0.0-13.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-pluggy | 0.6.0-8.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-psycopg2 | 2.7.5-7.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-psycopg2-debug | 2.7.5-7.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-psycopg2-tests | 2.7.5-7.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-py | 1.5.3-6.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-pysocks | 1.6.8-6.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-pytest | 3.4.2-13.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-pytest-mock | 1.9.0-4.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-pytz | 2017.2-12.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-pyyaml | 3.12-16.module+el8.5.0+706+735ec4b3 |
| rocky 8 | python27:2.7::python2-rpm-macros | 3-38.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python27:2.7::python2-setuptools_scm | 1.15.7-6.module+el8.4.0+403+9ae17a31 |
| rocky 8 | python36:3.6::python-nose-docs | 1.3.7-30.module+el8.3.0+120+426d8baf |
| ubuntu 14.04-ESM | python2.7 | 2.7.6-8ubuntu0.6+esm2 |
| ubuntu 14.04-ESM | python3.4 | 3.4.3-1ubuntu1~14.04.7+esm2 |
| ubuntu 14.04-ESM | python3.5 | 3.5.2-2ubuntu0~16.04.4~14.04.1+esm1 |
| ubuntu 16.04 | python2.7 | 2.7.12-1ubuntu0~16.04.8 |
| ubuntu 16.04 | python3.5 | 3.5.2-2ubuntu0~16.04.8 |
| ubuntu 16.04-ESM | python2.7 | 2.7.12-1ubuntu0~16.04.8 |
| ubuntu 16.04-ESM | python3.5 | 3.5.2-2ubuntu0~16.04.8 |
| ubuntu 18.04 | python2.7 | 2.7.15-4ubuntu4~18.04.1 |
| ubuntu 18.04 | python3.6 | 3.6.8-1~18.04.2 |
| ubuntu 18.04-ESM | python2.7 | 2.7.15-4ubuntu4~18.04.1 |
| ubuntu 18.04-ESM | python3.6 | 3.6.8-1~18.04.2 |
| ubuntu 18.10 | python2.7 | 2.7.16-2~18.10 |
References
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00092.html
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00097.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00024.html
- http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00040.html
- http://www.securityfocus.com/bid/107400
- https://access.redhat.com/errata/RHBA-2019:0763
All 69 references
- https://access.redhat.com/errata/RHBA-2019:0764
- https://access.redhat.com/errata/RHBA-2019:0959
- https://access.redhat.com/errata/RHSA-2019:0710
- https://access.redhat.com/errata/RHSA-2019:0765
- https://access.redhat.com/errata/RHSA-2019:0806
- https://access.redhat.com/errata/RHSA-2019:0902
- https://access.redhat.com/errata/RHSA-2019:0981
- https://access.redhat.com/errata/RHSA-2019:0997
- https://access.redhat.com/errata/RHSA-2019:1467
- https://access.redhat.com/errata/RHSA-2019:2980
- https://access.redhat.com/errata/RHSA-2019:3170
- https://access.redhat.com/security/cve/CVE-2019-9636
- https://bugs.python.org/issue36216
- https://bugzilla.redhat.com/show_bug.cgi?id=1674059
- https://bugzilla.redhat.com/show_bug.cgi?id=1678520
- https://bugzilla.redhat.com/show_bug.cgi?id=1688543
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7164
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7548
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9636
- https://errata.almalinux.org/8/ALSA-2019-0981.html
- https://errata.rockylinux.org/RLSA-2019:0981
- https://github.com/python/cpython/pull/12201
- https://linux.oracle.com/cve/CVE-2019-9636.html
- https://linux.oracle.com/errata/ELSA-2019-1467.html
- https://lists.debian.org/debian-lts-announce/2019/06/msg00022.html
- https://lists.debian.org/debian-lts-announce/2019/06/msg00023.html
- https://lists.debian.org/debian-lts-announce/2020/07/msg00011.html
- https://lists.debian.org/debian-lts-announce/2020/08/msg00034.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2ORNTF62QPLMJXIQ7KTZQ2776LMIXEKL/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/44TS66GJMO5H3RLMVZEBGEFTB6O2LJJU/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/46PVWY5LFP4BRPG3BVQ5QEEFYBVEXHCK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4X3HW5JRZ7GCPSR7UHJOLD7AWLTQCDVR/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AEZ5IQT7OF7Q2NCGIVABOWYGKO7YU3NJ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFBAAGM27H73OLYBUA2IAZFSUN6KGLME/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D3LXPABKVLFYUHRYJPM3CSS5MS6FXKS7/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E2HP37NUVLQSBW3J735A2DQDOZ4ZGBLY/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ER6LONC2B2WYIO56GBQUDU6QTWZDPUNQ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HQEQLXLOCR3SNM3AA5RRYJFQ5AZBYJ4L/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ICBEGRHIPHWPG2VGYS6R4EVKVUUF4AQW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IFAXBEY2TGOBDRKTR556JBXBVFSAKD6I/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JCPGLTTOBB3QEARDX4JOYURP6ELNNA2V/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMWSKTNOHSUOT3L25QFJAVCFYZX46FYK/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JSKPGPZQNTAULHW4UH63KGOOUIDE4RRB/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JXASHCDD4PQFKTMKQN4YOP5ZH366ABN4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KRYFIMISZ47NTAU3XWZUOFB7CYL62KES/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L25RTMKCF62DLC2XVSNXGX7C7HXISLVM/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M34WOYCDKTDE5KLUACE2YIEH7D37KHRX/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TR6GCO3WTV4D5L23WTCBF275VE6BVNI3/
- https://nvd.nist.gov/vuln/detail/CVE-2019-9636
- https://python-security.readthedocs.io/vuln/urlsplit-nfkc-normalization.html
- https://security.gentoo.org/glsa/202003-26
- https://security.netapp.com/advisory/ntap-20190517-0001/
- https://ubuntu.com/security/notices/USN-4127-1
- https://ubuntu.com/security/notices/USN-4127-2
- https://ubuntu.com/security/notices/USN-6891-1
- https://usn.ubuntu.com/4127-1/
- https://usn.ubuntu.com/4127-2/
- https://www.cve.org/CVERecord?id=CVE-2019-9636
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2022.html