Moderate: python27:2.7 security update

2022-11-0800:00:00

errata.almalinux.org

python

interpreted

object-oriented

security update

cve-2015-20107

dynamic typing

almalinux

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

COMPLETE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:C/A:P

CVSS3

7.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

EPSS

0.002

Percentile

55.8%

JSON

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing.

Security Fix(es):

python: mailcap: findmatch() function does not sanitize the second argument (CVE-2015-20107).

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
almalinux8noarchpython2-pip< 9.0.3-19.module_el8.6.0+2781+fed64c13python2-pip-9.0.3-19.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython2-pluggy< 0.6.0-8.module_el8.6.0+2781+fed64c13python2-pluggy-0.6.0-8.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython2-pytz< 2017.2-12.module_el8.6.0+2781+fed64c13python2-pytz-2017.2-12.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython2-rpm-macros< 3-38.module_el8.6.0+2781+fed64c13python2-rpm-macros-3-38.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython2-setuptools< 39.0.1-13.module_el8.6.0+2781+fed64c13python2-setuptools-39.0.1-13.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython-sqlalchemy-doc< 1.3.2-2.module_el8.6.0+2781+fed64c13python-sqlalchemy-doc-1.3.2-2.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython2-pip-wheel< 9.0.3-19.module_el8.6.0+2781+fed64c13python2-pip-wheel-9.0.3-19.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython2-setuptools_scm< 1.15.7-6.module_el8.6.0+2781+fed64c13python2-setuptools_scm-1.15.7-6.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython2-docutils< 0.14-12.module_el8.6.0+2781+fed64c13python2-docutils-0.14-12.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux8noarchpython2-dns< 1.15.0-10.module_el8.6.0+2781+fed64c13python2-dns-1.15.0-10.module_el8.6.0+2781+fed64c13.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
almalinux	8	noarch	python2-pip	< 9.0.3-19.module_el8.6.0+2781+fed64c13	python2-pip-9.0.3-19.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python2-pluggy	< 0.6.0-8.module_el8.6.0+2781+fed64c13	python2-pluggy-0.6.0-8.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python2-pytz	< 2017.2-12.module_el8.6.0+2781+fed64c13	python2-pytz-2017.2-12.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python2-rpm-macros	< 3-38.module_el8.6.0+2781+fed64c13	python2-rpm-macros-3-38.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python2-setuptools	< 39.0.1-13.module_el8.6.0+2781+fed64c13	python2-setuptools-39.0.1-13.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python-sqlalchemy-doc	< 1.3.2-2.module_el8.6.0+2781+fed64c13	python-sqlalchemy-doc-1.3.2-2.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python2-pip-wheel	< 9.0.3-19.module_el8.6.0+2781+fed64c13	python2-pip-wheel-9.0.3-19.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python2-setuptools_scm	< 1.15.7-6.module_el8.6.0+2781+fed64c13	python2-setuptools_scm-1.15.7-6.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python2-docutils	< 0.14-12.module_el8.6.0+2781+fed64c13	python2-docutils-0.14-12.module_el8.6.0+2781+fed64c13.noarch.rpm
almalinux	8	noarch	python2-dns	< 1.15.0-10.module_el8.6.0+2781+fed64c13	python2-dns-1.15.0-10.module_el8.6.0+2781+fed64c13.noarch.rpm