Skip to content
OpenAdvisories
Medium ALAS2-2021-1611 1 CVE

Moderate: python security update (Amazon Linux 2)

Published Feb 19, 2021 · Updated Feb 19, 2021

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2021-3177: A flaw was found in python. A stack-based buffer overflow was discovered in the ctypes module provided within Python. Applications that use ctypes without carefully validating the input passed to it may be vulnerable to this flaw, which would allow an attacker to overflow a buffer on the stack and crash the application. The highest threat from this vulnerability is to system availability. 1918168: CVE-2021-3177 python: stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

Fixed packages 16

ReleasePackageFixed in
Amazon Linux · 2 python 0:2.7.18-1.amzn2.0.3
Amazon Linux · 2 python-debug 0:2.7.18-1.amzn2.0.3
Amazon Linux · 2 python-debuginfo 0:2.7.18-1.amzn2.0.3
Amazon Linux · 2 python-devel 0:2.7.18-1.amzn2.0.3
Amazon Linux · 2 python-libs 0:2.7.18-1.amzn2.0.3
Amazon Linux · 2 python-test 0:2.7.18-1.amzn2.0.3
Amazon Linux · 2 python-tools 0:2.7.18-1.amzn2.0.3
Amazon Linux · 2 python3 0:3.7.9-1.amzn2.0.2
Amazon Linux · 2 python3-debug 0:3.7.9-1.amzn2.0.2
Amazon Linux · 2 python3-debuginfo 0:3.7.9-1.amzn2.0.2
Amazon Linux · 2 python3-devel 0:3.7.9-1.amzn2.0.2
Amazon Linux · 2 python3-libs 0:3.7.9-1.amzn2.0.2
Amazon Linux · 2 python3-test 0:3.7.9-1.amzn2.0.2
Amazon Linux · 2 python3-tkinter 0:3.7.9-1.amzn2.0.2
Amazon Linux · 2 python3-tools 0:3.7.9-1.amzn2.0.2
Amazon Linux · 2 tkinter 0:2.7.18-1.amzn2.0.3

Vulnerabilities 1

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2021-3177.html