RHSA-2019:0981: Important: python27:2.7 security update
Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing.SQLAlchemy is an Object Relational Mapper (ORM) that provides a flexible, high-level interface to SQL databases.Security Fix(es): python: Information Disclosure due to urlsplit improper NFKC normalization (CVE-2019-9636) python-sqlalchemy: SQL Injection when the orderby parameter can be controlled (CVE-2019-7164) python-sqlalchemy: SQL Injection when the groupby parameter can be controlled (CVE-2019-7548) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/babelto a version that resolves this vulnerability.Fixed in 2.5.1-9.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/numpyto a version that resolves this vulnerability.Fixed in 1.14.2-10.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/pytestto a version that resolves this vulnerability.Fixed in 3.4.2-13.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-attrsto a version that resolves this vulnerability.Fixed in 17.4.0-10.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-backportsto a version that resolves this vulnerability.Fixed in 1.0-15.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-chardetto a version that resolves this vulnerability.Fixed in 3.0.4-10.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-coverageto a version that resolves this vulnerability.Fixed in 4.5.1-4.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-dnsto a version that resolves this vulnerability.Fixed in 1.15.0-9.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-docsto a version that resolves this vulnerability.Fixed in 2.7.15-4.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-docutilsto a version that resolves this vulnerability.Fixed in 0.14-12.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-funcsigsto a version that resolves this vulnerability.Fixed in 1.0.2-13.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-idnato a version that resolves this vulnerability.Fixed in 2.5-7.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-ipaddressto a version that resolves this vulnerability.Fixed in 1.0.18-6.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-jinja2to a version that resolves this vulnerability.Fixed in 2.10-8.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-lxmlto a version that resolves this vulnerability.Fixed in 4.2.3-3.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-markupsafeto a version that resolves this vulnerability.Fixed in 0.23-19.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-mockto a version that resolves this vulnerability.Fixed in 2.0.0-13.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-noseto a version that resolves this vulnerability.Fixed in 1.3.7-30.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-pluggyto a version that resolves this vulnerability.Fixed in 0.6.0-8.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-psycopg2to a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-pyto a version that resolves this vulnerability.Fixed in 1.5.3-6.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-pygmentsto a version that resolves this vulnerability.Fixed in 2.2.0-20.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-pymongoto a version that resolves this vulnerability.Fixed in 3.6.1-9.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-pysocksto a version that resolves this vulnerability.Fixed in 1.6.8-6.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-pytest-mockto a version that resolves this vulnerability.Fixed in 1.9.0-4.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-requeststo a version that resolves this vulnerability.Fixed in 2.20.0-2.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-sixto a version that resolves this vulnerability.Fixed in 1.11.0-5.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-sqlalchemyto a version that resolves this vulnerability.Fixed in 1.3.2-1.module+el8.0.0+2974+76d21d2e - Upgrade
Upgrade
redhat/python-urllib3to a version that resolves this vulnerability.Fixed in 1.23-7.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-virtualenvto a version that resolves this vulnerability.Fixed in 15.1.0-18.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-wheelto a version that resolves this vulnerability.Fixed in 0.30.0-13.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2to a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pipto a version that resolves this vulnerability.Fixed in 9.0.3-13.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-rpm-macrosto a version that resolves this vulnerability.Fixed in 3-38.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-setuptoolsto a version that resolves this vulnerability.Fixed in 39.0.1-11.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/pytzto a version that resolves this vulnerability.Fixed in 2017.2-12.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/scipyto a version that resolves this vulnerability.Fixed in 1.0.0-19.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-nose-docsto a version that resolves this vulnerability.Fixed in 1.3.7-30.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-sqlalchemy-docto a version that resolves this vulnerability.Fixed in 1.3.2-1.module+el8.0.0+2974+76d21d2e - Upgrade
Upgrade
redhat/python2-attrsto a version that resolves this vulnerability.Fixed in 17.4.0-10.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-babelto a version that resolves this vulnerability.Fixed in 2.5.1-9.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-chardetto a version that resolves this vulnerability.Fixed in 3.0.4-10.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-dnsto a version that resolves this vulnerability.Fixed in 1.15.0-9.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-docsto a version that resolves this vulnerability.Fixed in 2.7.15-4.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-docs-infoto a version that resolves this vulnerability.Fixed in 2.7.15-4.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-docutilsto a version that resolves this vulnerability.Fixed in 0.14-12.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-funcsigsto a version that resolves this vulnerability.Fixed in 1.0.2-13.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-idnato a version that resolves this vulnerability.Fixed in 2.5-7.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-ipaddressto a version that resolves this vulnerability.Fixed in 1.0.18-6.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-jinja2to a version that resolves this vulnerability.Fixed in 2.10-8.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-mockto a version that resolves this vulnerability.Fixed in 2.0.0-13.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-noseto a version that resolves this vulnerability.Fixed in 1.3.7-30.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-numpy-docto a version that resolves this vulnerability.Fixed in 1.14.2-10.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pluggyto a version that resolves this vulnerability.Fixed in 0.6.0-8.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pyto a version that resolves this vulnerability.Fixed in 1.5.3-6.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pygmentsto a version that resolves this vulnerability.Fixed in 2.2.0-20.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pysocksto a version that resolves this vulnerability.Fixed in 1.6.8-6.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pytestto a version that resolves this vulnerability.Fixed in 3.4.2-13.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pytest-mockto a version that resolves this vulnerability.Fixed in 1.9.0-4.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pytzto a version that resolves this vulnerability.Fixed in 2017.2-12.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-requeststo a version that resolves this vulnerability.Fixed in 2.20.0-2.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-sixto a version that resolves this vulnerability.Fixed in 1.11.0-5.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-urllib3to a version that resolves this vulnerability.Fixed in 1.23-7.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-virtualenvto a version that resolves this vulnerability.Fixed in 15.1.0-18.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-wheelto a version that resolves this vulnerability.Fixed in 0.30.0-13.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-psycopg2-docto a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-backportsto a version that resolves this vulnerability.Fixed in 1.0-15.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-bsonto a version that resolves this vulnerability.Fixed in 3.6.1-9.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-bson-debuginfoto a version that resolves this vulnerability.Fixed in 3.6.1-9.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-coverageto a version that resolves this vulnerability.Fixed in 4.5.1-4.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-coverage-debuginfoto a version that resolves this vulnerability.Fixed in 4.5.1-4.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-debugto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-debugsourceto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-develto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-libsto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-lxmlto a version that resolves this vulnerability.Fixed in 4.2.3-3.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-lxml-debuginfoto a version that resolves this vulnerability.Fixed in 4.2.3-3.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-markupsafeto a version that resolves this vulnerability.Fixed in 0.23-19.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-numpyto a version that resolves this vulnerability.Fixed in 1.14.2-10.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-numpy-debuginfoto a version that resolves this vulnerability.Fixed in 1.14.2-10.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-numpy-f2pyto a version that resolves this vulnerability.Fixed in 1.14.2-10.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-psycopg2to a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-psycopg2-debugto a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-psycopg2-debug-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-psycopg2-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-psycopg2-teststo a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pymongoto a version that resolves this vulnerability.Fixed in 3.6.1-9.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pymongo-debuginfoto a version that resolves this vulnerability.Fixed in 3.6.1-9.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pymongo-gridfsto a version that resolves this vulnerability.Fixed in 3.6.1-9.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pyyamlto a version that resolves this vulnerability.Fixed in 3.12-16.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-pyyaml-debuginfoto a version that resolves this vulnerability.Fixed in 3.12-16.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-scipyto a version that resolves this vulnerability.Fixed in 1.0.0-19.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-scipy-debuginfoto a version that resolves this vulnerability.Fixed in 1.0.0-19.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-sqlalchemyto a version that resolves this vulnerability.Fixed in 1.3.2-1.module+el8.0.0+2974+76d21d2e - Upgrade
Upgrade
redhat/python2-testto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-tkinterto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python2-toolsto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223 - Upgrade
Upgrade
redhat/python-psycopg2-docto a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2to a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-backportsto a version that resolves this vulnerability.Fixed in 1.0-15.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-bsonto a version that resolves this vulnerability.Fixed in 3.6.1-9.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-bson-debuginfoto a version that resolves this vulnerability.Fixed in 3.6.1-9.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-coverageto a version that resolves this vulnerability.Fixed in 4.5.1-4.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-coverage-debuginfoto a version that resolves this vulnerability.Fixed in 4.5.1-4.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-debugto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-debugsourceto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-develto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-libsto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-lxmlto a version that resolves this vulnerability.Fixed in 4.2.3-3.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-lxml-debuginfoto a version that resolves this vulnerability.Fixed in 4.2.3-3.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-markupsafeto a version that resolves this vulnerability.Fixed in 0.23-19.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-numpyto a version that resolves this vulnerability.Fixed in 1.14.2-10.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-numpy-debuginfoto a version that resolves this vulnerability.Fixed in 1.14.2-10.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-numpy-f2pyto a version that resolves this vulnerability.Fixed in 1.14.2-10.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-psycopg2to a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-psycopg2-debugto a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-psycopg2-debug-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-psycopg2-debuginfoto a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-psycopg2-teststo a version that resolves this vulnerability.Fixed in 2.7.5-7.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-pymongoto a version that resolves this vulnerability.Fixed in 3.6.1-9.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-pymongo-debuginfoto a version that resolves this vulnerability.Fixed in 3.6.1-9.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-pymongo-gridfsto a version that resolves this vulnerability.Fixed in 3.6.1-9.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-pyyamlto a version that resolves this vulnerability.Fixed in 3.12-16.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-pyyaml-debuginfoto a version that resolves this vulnerability.Fixed in 3.12-16.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-scipyto a version that resolves this vulnerability.Fixed in 1.0.0-19.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-scipy-debuginfoto a version that resolves this vulnerability.Fixed in 1.0.0-19.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-sqlalchemyto a version that resolves this vulnerability.Fixed in 1.3.2-1.module+el8.0.0+2974+76d21d2e.aa - Upgrade
Upgrade
redhat/python2-testto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-tkinterto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223.aa - Upgrade
Upgrade
redhat/python2-toolsto a version that resolves this vulnerability.Fixed in 2.7.15-22.module+el8.0.0+2961+596d0223.aa
Event History
Frequently Asked Questions
What is the severity of RHSA-2019:0981?
The severity of RHSA-2019:0981 is classified as moderate.
How do I fix RHSA-2019:0981?
To fix RHSA-2019:0981, update the affected packages to the specified remedial versions provided by Red Hat.
What packages are affected by RHSA-2019:0981?
RHSA-2019:0981 affects multiple packages including python, numpy, and SQLAlchemy among others.
Is RHSA-2019:0981 related to security vulnerabilities?
Yes, RHSA-2019:0981 addresses security vulnerabilities found in specific Python-related packages.
How do I tell if my system is impacted by RHSA-2019:0981?
You can determine if your system is impacted by checking the installed versions of the affected packages against the remediation versions listed in the advisory.