Security update to Python 3.5.7. Security fix for CVE-2019-5010, CVE-2018-20406, CVE-2018-1060, CVE-2018-1061, CVE-2019-9636.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for python fixes the following issues :

Updated to version 2.7.17 to unify packages among openSUSE:Factory and SLE versions (bsc#1159035).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic     backtracking in the difflib.IS_LINE_JUNK method. An attacker could use this flaw to cause denial of     service. (CVE-2018-1061)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3684:02 advisory.

    * python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib     (CVE-2018-1061)
      * python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib     (CVE-2018-1060)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
123480	Fedora 28 : python35 (2019-cf725dd20b)	Nessus	Fedora Local Security Checks	3/29/2019	6/7/2024	critical
133259	SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2020:0234-1) (BEAST) (httpoxy)	Nessus	SuSE Local Security Checks	1/27/2020	3/28/2024	critical
221312	Linux Distros Unpatched Vulnerability : CVE-2018-1061	Nessus	Misc.	3/4/2025	8/20/2025	high
289113	MiracleLinux 7 : python-2.7.5-76.0.1.el7.AXS7 (AXSA:2019-3684:02)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	high

Detections

Analytics

Plugins Search

critical

critical

high

high