Linux · Red Hat · Security advisory · April 28, 2020

RHSA-2020:1605: Security update for 62 packages

RHSA-2020:1605, released April 28, 2020, fixes 7 CVEs across 62 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0693
94th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 4 Routine 3

Fixed package versions

ProductReleaseFixed in
babelRHEL 80:2.5.1-9.module+el8.1.0+3111+de3f2d8e
python-nose-docsRHEL 80:1.3.7-30.module+el8.1.0+3111+de3f2d8e
python-psycopg2-docRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python-sqlalchemy-docRHEL 80:1.3.2-1.module+el8.1.0+2994+98e054d6
python2RHEL 80:2.7.17-1.module+el8.2.0+4561+f4e0d66a
python2-CythonRHEL 80:0.28.1-7.module+el8.1.0+3111+de3f2d8e
python2-PyMySQLRHEL 80:0.8.0-10.module+el8.1.0+3111+de3f2d8e
python2-attrsRHEL 80:17.4.0-10.module+el8.1.0+3111+de3f2d8e
python2-babelRHEL 80:2.5.1-9.module+el8.1.0+3111+de3f2d8e
python2-backportsRHEL 80:1.0-15.module+el8.1.0+3111+de3f2d8e
python2-backports-ssl_match_hostnameRHEL 80:3.5.0.1-11.module+el8.1.0+3111+de3f2d8e
python2-bsonRHEL 80:3.6.1-11.module+el8.1.0+3446+c3d52da3
python2-chardetRHEL 80:3.0.4-10.module+el8.1.0+3111+de3f2d8e
python2-coverageRHEL 80:4.5.1-4.module+el8.1.0+3111+de3f2d8e
python2-debugRHEL 80:2.7.17-1.module+el8.2.0+4561+f4e0d66a
python2-develRHEL 80:2.7.17-1.module+el8.2.0+4561+f4e0d66a
python2-dnsRHEL 80:1.15.0-10.module+el8.1.0+3111+de3f2d8e
python2-docsRHEL 80:2.7.16-2.module+el8.1.0+3111+de3f2d8e
python2-docs-infoRHEL 80:2.7.16-2.module+el8.1.0+3111+de3f2d8e
python2-docutilsRHEL 80:0.14-12.module+el8.1.0+3111+de3f2d8e
python2-funcsigsRHEL 80:1.0.2-13.module+el8.1.0+3111+de3f2d8e
python2-idnaRHEL 80:2.5-7.module+el8.1.0+3111+de3f2d8e
python2-ipaddressRHEL 80:1.0.18-6.module+el8.1.0+3111+de3f2d8e
python2-jinja2RHEL 80:2.10-8.module+el8.1.0+3111+de3f2d8e
python2-libsRHEL 80:2.7.17-1.module+el8.2.0+4561+f4e0d66a
python2-lxmlRHEL 80:4.2.3-3.module+el8.1.0+3111+de3f2d8e
python2-markupsafeRHEL 80:0.23-19.module+el8.1.0+3111+de3f2d8e
python2-mockRHEL 80:2.0.0-13.module+el8.1.0+3111+de3f2d8e
python2-noseRHEL 80:1.3.7-30.module+el8.1.0+3111+de3f2d8e
python2-numpyRHEL 81:1.14.2-13.module+el8.1.0+3323+7ac3e00f
python2-numpy-docRHEL 81:1.14.2-13.module+el8.1.0+3323+7ac3e00f
python2-numpy-f2pyRHEL 81:1.14.2-13.module+el8.1.0+3323+7ac3e00f
python2-pipRHEL 80:9.0.3-16.module+el8.2.0+5478+b505947e
python2-pip-wheelRHEL 80:9.0.3-16.module+el8.2.0+5478+b505947e
python2-pluggyRHEL 80:0.6.0-8.module+el8.1.0+3111+de3f2d8e
python2-psycopg2RHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-debugRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-testsRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-pyRHEL 80:1.5.3-6.module+el8.1.0+3111+de3f2d8e
python2-pygmentsRHEL 80:2.2.0-20.module+el8.1.0+3111+de3f2d8e
python2-pymongoRHEL 80:3.6.1-11.module+el8.1.0+3446+c3d52da3
python2-pymongo-gridfsRHEL 80:3.6.1-11.module+el8.1.0+3446+c3d52da3
python2-pysocksRHEL 80:1.6.8-6.module+el8.1.0+3111+de3f2d8e
python2-pytestRHEL 80:3.4.2-13.module+el8.1.0+3111+de3f2d8e
python2-pytest-mockRHEL 80:1.9.0-4.module+el8.1.0+3111+de3f2d8e
python2-pytzRHEL 80:2017.2-12.module+el8.1.0+3111+de3f2d8e
python2-pyyamlRHEL 80:3.12-16.module+el8.1.0+3111+de3f2d8e
python2-requestsRHEL 80:2.20.0-3.module+el8.2.0+4577+feefd9b8
python2-rpm-macrosRHEL 80:3-38.module+el8.1.0+3111+de3f2d8e
python2-scipyRHEL 80:1.0.0-20.module+el8.1.0+3323+7ac3e00f
python2-setuptoolsRHEL 80:39.0.1-11.module+el8.1.0+3446+c3d52da3
python2-setuptools-wheelRHEL 80:39.0.1-11.module+el8.1.0+3446+c3d52da3
python2-setuptools_scmRHEL 80:1.15.7-6.module+el8.1.0+3111+de3f2d8e
python2-sixRHEL 80:1.11.0-5.module+el8.1.0+3111+de3f2d8e
python2-sqlalchemyRHEL 80:1.3.2-1.module+el8.1.0+2994+98e054d6
python2-testRHEL 80:2.7.17-1.module+el8.2.0+4561+f4e0d66a
python2-tkinterRHEL 80:2.7.17-1.module+el8.2.0+4561+f4e0d66a
python2-toolsRHEL 80:2.7.17-1.module+el8.2.0+4561+f4e0d66a
python2-urllib3RHEL 80:1.24.2-1.module+el8.1.0+3280+19512f10
python2-virtualenvRHEL 80:15.1.0-19.module+el8.1.0+3507+d69c168d
python2-wheelRHEL 81:0.31.1-2.module+el8.1.0+3725+aac5cd17
python2-wheel-wheelRHEL 81:0.31.1-2.module+el8.1.0+3725+aac5cd17

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2018-18074 python3-pip: The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same...7.5 0.0693 None reported
High CVE-2019-16056 Python 3.6 and 2 others: Improper Input Validation7.5 0.0512 None reported
High CVE-2018-20060 babel: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception...9.8 0.0449 None reported
High CVE-2019-11324 babel: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception...7.5 0.0292 None reported
Routine CVE-2019-16935 Python 3.6 and 2 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6.1 0.0465 None reported
Routine CVE-2018-20852 Python 3.6 and 2 others: Improper Input Validation5.3 0.0367 None reported
Routine CVE-2019-11236 babel: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception...6.5 0.0207 None reported
Showing 1 to 7 of 7 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.