FEDORA-2019-0d3fcae639 — security update for python2 and python2-docs

stable

python2-2.7.17-1.fc31 and python2-docs-2.7.17-1.fc31

FEDORA-2019-0d3fcae639 created by churchyard 3 years ago for Fedora 31

Python 2.7.17 is a bug fix release in the Python 2.7.x series. It is expected to be the penultimate release for Python 2.7.

https://www.python.org/downloads/release/python-2717/

Security fix for CVE-2018-20852.
Security fix for CVE-2019-16056.
Security fix for CVE-2019-16935.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2019-0d3fcae639

This update has been submitted for testing by churchyard.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

atim provided feedback 3 years ago

karma

atim provided feedback 3 years ago

karma

frantisekz provided feedback 3 years ago

karma

This update can be pushed to stable now if the maintainer wishes

3 years ago

pwalter commented & provided feedback 3 years ago

karma

Works

This update has been submitted for stable by churchyard.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

python2-2.7.17-1.fc31

python2-docs-2.7.17-1.fc31

Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

14 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

BZ#1740347 CVE-2018-20852 python: Cookie domain check returns incorrect results

BZ#1740348 CVE-2018-20852 python2: python: cookie domain check returns incorrect results [fedora-all]

BZ#1749839 CVE-2019-16056 python: email.utils.parseaddr wrongly parses email addresses

BZ#1750461 CVE-2019-16056 python2: python: email.utils.parseaddr wrongly parses email addresses [fedora-all]

BZ#1763229 CVE-2019-16935 python: XSS vulnerability in the documentation XML-RPC server in server_title field

BZ#1763232 CVE-2019-16935 python2: python: XSS vulnerability in the documentation XML-RPC server in server_title field [fedora-all]

python2-2.7.17-1.fc31

python2-docs-2.7.17-1.fc31

Automated Test Results

ignored