Moderate: python27:2.7 security update

2020-11-0312:24:08

errata.almalinux.org

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.012 Low

EPSS

Percentile

85.1%

JSON

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.

Security Fix(es):

python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907)
python-pip: directory traversal in _download_http_url() function in src/pip/_internal/download.py (CVE-2019-20916)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchpython2-pluggy< 0.6.0-8.module_el8.6.0+2781+fed64c13python2-pluggy-0.6.0-8.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython2-pytz< 2017.2-12.module_el8.6.0+2781+fed64c13python2-pytz-2017.2-12.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython2-rpm-macros< 3-38.module_el8.6.0+2781+fed64c13python2-rpm-macros-3-38.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8aarch64python-psycopg2-doc< 2.7.5-7.module_el8.6.0+2781+fed64c13python-psycopg2-doc-2.7.5-7.module_el8.6.0+2781+fed64c13.aarch64.rpm
almalinux8noarchpython2-setuptools_scm< 1.15.7-6.module_el8.6.0+2781+fed64c13python2-setuptools_scm-1.15.7-6.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython-sqlalchemy-doc< 1.3.2-2.module_el8.5.0+2569+5c5719bcpython-sqlalchemy-doc-1.3.2-2.module_el8.5.0+2569+5c5719bc.noarch.rpm
almalinux8noarchpython2-docutils< 0.14-12.module_el8.6.0+2781+fed64c13python2-docutils-0.14-12.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8aarch64python2-psycopg2-debug< 2.7.5-7.module_el8.6.0+2781+fed64c13python2-psycopg2-debug-2.7.5-7.module_el8.6.0+2781+fed64c13.aarch64.rpm
almalinux8noarchpython2-dns< 1.15.0-10.module_el8.6.0+2781+fed64c13python2-dns-1.15.0-10.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8aarch64python2-cython< 0.28.1-7.module_el8.6.0+2781+fed64c13python2-Cython-0.28.1-7.module_el8.6.0+2781+fed64c13.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	python2-pluggy	< 0.6.0-8.module_el8.6.0+2781+fed64c13	python2-pluggy-0.6.0-8.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python2-pytz	< 2017.2-12.module_el8.6.0+2781+fed64c13	python2-pytz-2017.2-12.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python2-rpm-macros	< 3-38.module_el8.6.0+2781+fed64c13	python2-rpm-macros-3-38.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	aarch64	python-psycopg2-doc	< 2.7.5-7.module_el8.6.0+2781+fed64c13	python-psycopg2-doc-2.7.5-7.module_el8.6.0+2781+fed64c13.aarch64.rpm
almalinux	8	noarch	python2-setuptools_scm	< 1.15.7-6.module_el8.6.0+2781+fed64c13	python2-setuptools_scm-1.15.7-6.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python-sqlalchemy-doc	< 1.3.2-2.module_el8.5.0+2569+5c5719bc	python-sqlalchemy-doc-1.3.2-2.module_el8.5.0+2569+5c5719bc.noarch.rpm
almalinux	8	noarch	python2-docutils	< 0.14-12.module_el8.6.0+2781+fed64c13	python2-docutils-0.14-12.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	aarch64	python2-psycopg2-debug	< 2.7.5-7.module_el8.6.0+2781+fed64c13	python2-psycopg2-debug-2.7.5-7.module_el8.6.0+2781+fed64c13.aarch64.rpm
almalinux	8	noarch	python2-dns	< 1.15.0-10.module_el8.6.0+2781+fed64c13	python2-dns-1.15.0-10.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	aarch64	python2-cython	< 0.28.1-7.module_el8.6.0+2781+fed64c13	python2-Cython-0.28.1-7.module_el8.6.0+2781+fed64c13.aarch64.rpm