Skip to content
OpenAdvisories
Medium ELSA-2021-4150 2 CVEs

Moderate: python36:3.6 security and bug fix update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Summary

python-docs
[3.6.7-2]
- Bumping due to problems with modular RPM upgrade path
- Resolves: rhbz#1695587

[3.6.7-1]
- Modify for RHEL8
- Update to new Python version
- Resolves: rhbz#1656044

python-wheel
[1:0.31.1-3]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055

[1:0.31.1-2]
- Removed wheels own implementation of crypto due to FIPS concerns
Resolves: rhbz#1731526

[1:0.31.1-1]
- Update to 0.31.1
Resolves: rhbz#1671681

python36
[3.6.8-38]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055

[3.6.8-37]
- Bump the release to a number higher than RHEL7
- Resolves: rhbz#1954567

scipy

Fixed packages 22

ReleasePackageFixed in
Oracle Linux · 8 python-nose-docs 0:1.3.7-31.module+el8.5.0+20329+5c5719bc
Oracle Linux · 8 python-pymongo-doc 0:3.7.0-1.module+el8.4.0+20103+1849b5f9
Oracle Linux · 8 python-sqlalchemy-doc 0:1.3.2-2.module+el8.3.0+7694+550a8252
Oracle Linux · 8 python-virtualenv-doc 0:15.1.0-21.module+el8.5.0+20329+5c5719bc
Oracle Linux · 8 python3-bson 0:3.7.0-1.module+el8.4.0+20103+1849b5f9
Oracle Linux · 8 python3-distro 0:1.4.0-2.module+el8.3.0+7694+550a8252
Oracle Linux · 8 python3-docs 0:3.6.7-2.module+el8.3.0+7694+550a8252
Oracle Linux · 8 python3-docutils 0:0.14-12.module+el8.3.0+7694+550a8252
Oracle Linux · 8 python3-nose 0:1.3.7-31.module+el8.5.0+20329+5c5719bc
Oracle Linux · 8 python3-pygments 0:2.2.0-22.module+el8.5.0+20329+5c5719bc
Oracle Linux · 8 python3-pymongo 0:3.7.0-1.module+el8.4.0+20103+1849b5f9
Oracle Linux · 8 python3-pymongo-gridfs 0:3.7.0-1.module+el8.4.0+20103+1849b5f9
Oracle Linux · 8 python3-PyMySQL 0:0.10.1-2.module+el8.4.0+20103+1849b5f9
Oracle Linux · 8 python3-scipy 0:1.0.0-21.module+el8.5.0+20329+5c5719bc
Oracle Linux · 8 python3-sqlalchemy 0:1.3.2-2.module+el8.3.0+7694+550a8252
Oracle Linux · 8 python3-virtualenv 0:15.1.0-21.module+el8.5.0+20329+5c5719bc
Oracle Linux · 8 python3-wheel 1:0.31.1-3.module+el8.5.0+20329+5c5719bc
Oracle Linux · 8 python3-wheel-wheel 1:0.31.1-3.module+el8.5.0+20329+5c5719bc
Oracle Linux · 8 python36 0:3.6.8-38.module+el8.5.0+20329+5c5719bc
Oracle Linux · 8 python36-debug 0:3.6.8-38.module+el8.5.0+20329+5c5719bc
Oracle Linux · 8 python36-devel 0:3.6.8-38.module+el8.5.0+20329+5c5719bc
Oracle Linux · 8 python36-rpm-macros 0:3.6.8-38.module+el8.5.0+20329+5c5719bc

Vulnerabilities 2

  • High 7.5

    Infinite Loop in Pygments

    An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

  • High 7.5

    Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

    In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an …