Advisories » MGASA-2019-0165

Updated python packages fix security vulnerability

Publication date: 12 May 2019
Modification date: 12 May 2019
Type: security
Affected Mageia releases : 6
CVE: CVE-2019-9948

Description

Updated python packages fix security vulnerability:

A 'file:' blacklist bypass in URIs by using the 'local-file:' scheme
instead (CVE-2019-9948).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=24758
• https://lists.opensuse.org/opensuse-updates/2019-04/msg00187.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9948

SRPMS

6/core

• python-2.7.15-1.4.mga6