Linux · Oracle Linux · Security advisory · November 14, 2019

ELSA-2019-3335: Security update for 62 packages

ELSA-2019-3335, released November 14, 2019, fixes 6 CVEs across 62 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.2727
98th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 3 Routine 3

Fixed package versions

ProductReleaseFixed in
babelol 80:2.5.1-9.module+el8.1.0+5396+a4103ad2
python-nose-docsol 80:1.3.7-30.module+el8.1.0+5396+a4103ad2
python-psycopg2-docol 80:2.7.5-7.module+el8.1.0+5396+a4103ad2
python-sqlalchemy-docol 80:1.3.2-1.module+el8.1.0+5396+a4103ad2
python2ol 80:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2
python2-Cythonol 80:0.28.1-7.module+el8.1.0+5396+a4103ad2
python2-PyMySQLol 80:0.8.0-10.module+el8.1.0+5396+a4103ad2
python2-attrsol 80:17.4.0-10.module+el8.1.0+5396+a4103ad2
python2-babelol 80:2.5.1-9.module+el8.1.0+5396+a4103ad2
python2-backportsol 80:1.0-15.0.1.module+el8.1.0+5396+a4103ad2
python2-backports-ssl_match_hostnameol 80:3.5.0.1-11.module+el8.1.0+5396+a4103ad2
python2-bsonol 80:3.6.1-11.module+el8.1.0+5396+a4103ad2
python2-chardetol 80:3.0.4-10.module+el8.1.0+5396+a4103ad2
python2-coverageol 80:4.5.1-4.module+el8.1.0+5396+a4103ad2
python2-debugol 80:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2
python2-develol 80:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2
python2-dnsol 80:1.15.0-10.module+el8.1.0+5396+a4103ad2
python2-docsol 80:2.7.16-2.module+el8.1.0+5396+a4103ad2
python2-docs-infool 80:2.7.16-2.module+el8.1.0+5396+a4103ad2
python2-docutilsol 80:0.14-12.module+el8.1.0+5396+a4103ad2
python2-funcsigsol 80:1.0.2-13.module+el8.1.0+5396+a4103ad2
python2-idnaol 80:2.5-7.module+el8.1.0+5396+a4103ad2
python2-ipaddressol 80:1.0.18-6.module+el8.1.0+5396+a4103ad2
python2-jinja2ol 80:2.10-8.module+el8.1.0+5396+a4103ad2
python2-libsol 80:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2
python2-lxmlol 80:4.2.3-3.module+el8.1.0+5396+a4103ad2
python2-markupsafeol 80:0.23-19.module+el8.1.0+5396+a4103ad2
python2-mockol 80:2.0.0-13.module+el8.1.0+5396+a4103ad2
python2-noseol 80:1.3.7-30.module+el8.1.0+5396+a4103ad2
python2-numpyol 81:1.14.2-13.module+el8.1.0+5396+a4103ad2
python2-numpy-docol 81:1.14.2-13.module+el8.1.0+5396+a4103ad2
python2-numpy-f2pyol 81:1.14.2-13.module+el8.1.0+5396+a4103ad2
python2-pipol 80:9.0.3-14.module+el8.1.0+5396+a4103ad2
python2-pip-wheelol 80:9.0.3-14.module+el8.1.0+5396+a4103ad2
python2-pluggyol 80:0.6.0-8.module+el8.1.0+5396+a4103ad2
python2-psycopg2ol 80:2.7.5-7.module+el8.1.0+5396+a4103ad2
python2-psycopg2-debugol 80:2.7.5-7.module+el8.1.0+5396+a4103ad2
python2-psycopg2-testsol 80:2.7.5-7.module+el8.1.0+5396+a4103ad2
python2-pyol 80:1.5.3-6.module+el8.1.0+5396+a4103ad2
python2-pygmentsol 80:2.2.0-20.module+el8.1.0+5396+a4103ad2
python2-pymongool 80:3.6.1-11.module+el8.1.0+5396+a4103ad2
python2-pymongo-gridfsol 80:3.6.1-11.module+el8.1.0+5396+a4103ad2
python2-pysocksol 80:1.6.8-6.module+el8.1.0+5396+a4103ad2
python2-pytestol 80:3.4.2-13.module+el8.1.0+5396+a4103ad2
python2-pytest-mockol 80:1.9.0-4.module+el8.1.0+5396+a4103ad2
python2-pytzol 80:2017.2-12.module+el8.1.0+5396+a4103ad2
python2-pyyamlol 80:3.12-16.module+el8.1.0+5396+a4103ad2
python2-requestsol 80:2.20.0-2.module+el8.1.0+5396+a4103ad2
python2-rpm-macrosol 80:3-38.module+el8.1.0+5396+a4103ad2
python2-scipyol 80:1.0.0-20.module+el8.1.0+5396+a4103ad2
python2-setuptoolsol 80:39.0.1-11.module+el8.1.0+5396+a4103ad2
python2-setuptools-wheelol 80:39.0.1-11.module+el8.1.0+5396+a4103ad2
python2-setuptools_scmol 80:1.15.7-6.module+el8.1.0+5396+a4103ad2
python2-sixol 80:1.11.0-5.module+el8.1.0+5396+a4103ad2
python2-sqlalchemyol 80:1.3.2-1.module+el8.1.0+5396+a4103ad2
python2-testol 80:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2
python2-tkinterol 80:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2
python2-toolsol 80:2.7.16-12.0.1.module+el8.1.0+5396+a4103ad2
python2-urllib3ol 80:1.24.2-1.0.2.module+el8.1.0+5396+a4103ad2
python2-virtualenvol 80:15.1.0-19.module+el8.1.0+5396+a4103ad2
python2-wheelol 81:0.31.1-2.module+el8.1.0+5396+a4103ad2
python2-wheel-wheelol 81:0.31.1-2.module+el8.1.0+5396+a4103ad2

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2019-6446 babel: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception...9.8 0.2727 None reported
High CVE-2019-9948 Python 3.6 and 2 others: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')9.1 0.1184 None reported
High CVE-2019-11324 babel: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception...7.5 0.0292 None reported
Routine CVE-2019-9740 Python 3.6 and 2 others: Improper Neutralization of CRLF Sequences ('CRLF Injection')6.5 0.0541 None reported
Routine CVE-2019-9947 Python 3.6 and 2 others: Improper Neutralization of CRLF Sequences ('CRLF Injection')6.5 0.0525 None reported
Routine CVE-2019-11236 babel: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception...6.5 0.0207 None reported
Showing 1 to 6 of 6 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.