Skip to content
OpenAdvisories
Medium ELSA-2021-4160 7 CVEs

Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Summary

mod_wsgi
[4.7.1-4]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[4.7.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[4.7.1-2]
- Rebuilt for Python 3.9

[4.7.1-1]
- update to 4.7.1 (#1721376)

numpy
[1.19.4-3]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055

[1.19.4-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[1:1.19.4-1]
- 1.19.4

python-cffi
[1.14.3-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[1.14.3-1]
- Update to 1.14.3

[1.14.2-1]
- Update to 1.14.2 (#1869032)

[1.14.1-1]
- Update to 1.14.1
- Fixes: rhbz#1860698
- Fixes: rhbz#1865276

python-cryptography
[3.3.1-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[3.3.1-1]
- Update to 3.3.1 (#1905756)

python-idna
[2.10-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[2.10-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[2.10-1]
- Update to 2.10 (#1851653)

[2.9-2]
- Rebuilt for Python 3.9

[2.9-1]
- Update to 2.9 (#1803654)

python-lxml
[4.6.2-3]
- Security fix for CVE-2021-28957
Resolves: rhbz#1941534

[4.6.2-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[4.6.2-1]
- Update to 4.6.2
- Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
- Fixes: rhbz#1855415
- Fixes: rhbz#1901634

python-psutil
[5.8.0-4]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[5.8.0-3]
- Disable test_leak_mem test.

[5.8.0-2]
- Disable test_sensors_temperatures test.

[5.8.0-1]
- Update to 5.8.0. Fixes rhbz#1909321
- Re-enable tests (skipping 2 that fail in mock).

python-psycopg2
[2.8.6-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[2.8.6-1]
- Rebase to upstream version 2.8.6

python-pycparser
[2.20-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[2.20-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[2.20-1]
- Update to 2.20 (#1810349)

python-requests
[2.25.0-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[2.25.0-1]
- Update to 2.25.0

python-toml
[0.10.1-5]
- Convert spec for python39 module in RHEL8
- Revert usage of pyproject-rpm-macros
- Resolves: rhbz#1877430

[0.10.1-4]
- Dont BR pytest-cov

[0.10.1-3]
- Use pyproject-rpm-macros

[0.10.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[0.10.1-1]
- Update to 0.10.1 (#1835567)

python-urllib3
[1.25.10-4]
- Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
Resolves: rhbz#1968074

[1.25.10-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[1.25.10-2]
- Update RECENT_DATE dynamically

[1.25.10-1]
- Update to 1.25.10. Fixed bug #1824900

python-wheel
[1:0.35.1-4]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055

[1:0.35.1-3]
- Add back Epoch 1 to the package version because the original version with the
epoch was available in CentOS Stream for a few days
- Resolves: rhbz#1877430

[1:0.35.1-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[1:0.35.1-1]
- Update to 0.35.1
- Fixes: rhbz#1868821

python39
[3.9.6-2]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055

[3.9.6-1]
- Update to 3.9.6
- Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
Resolves: rhbz#1957458

[3.9.2-2]
- Security fix for CVE-2021-3426: information disclosure via pydoc
Resolves: rhbz#1935913

python3x-pip
[20.2.4-6]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055

[20.2.4-5]
- Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
Resolves: rhbz#1968074

[20.2.4-4]
- Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
Resolves: rhbz#1962856

[20.2.4-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[20.2.4-2]
- Disable tests and documentation in Fedora ELN (and RHEL)

[20.2.4-1]
- Update to 20.2.4 (#1889112)

python3x-setuptools
[50.3.2-4]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055

[50.3.2-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[50.3.2-2]
- Disable tests in Fedora ELN (and RHEL)

[50.3.2-1]
- Update to 50.3.2 (#1889093)

python3x-six
[1.15.0-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[1.15.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.15.0-1]
- Update to 1.15.0 (#1838702)

scipy
[1.5.4-3]
- Specify LDFLAGS explicitly
- Force preprocessing of Fortran sources to make annobin record proper flags
- Resolves: rhbz#1778983 rhbz#1877430

[1.5.4-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[1.5.4-1]
- New upstream release 1.5.4
- Increase test timeout, 300 seconds is not always enough
for test_logpdf_overflow on s390x
resolves: #1894887

pytest
[6.0.2-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[6.0.2-1]
- Update to 6.0.2.

python-iniconfig
[1.1.1-2]
- Convert from Fedora to the python39 module in RHEL8
- Revert usage of pyproject-rpm-macros
- Remove dependency on setuptools_scm
- Resolves: rhbz#1877430

[1.1.1-1]
- Update to 1.1.1 (#1888157)

python-more-itertools
[8.5.0-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[8.5.0-1]
- Update to 8.5.0 (#1873653)

[8.4.0-1]
- Update to 8.4.0
- Fixes rhbz#1778332

python-wcwidth
[0.2.5-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[0.2.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[0.2.5-1]
- Update to 0.2.5 (#1850238)

Fixed packages 49

ReleasePackageFixed in
Oracle Linux · 8 python39 0:3.9.6-2.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-attrs 0:20.3.0-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-cffi 0:1.14.3-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-chardet 0:3.0.4-19.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-cryptography 0:3.3.1-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-Cython 0:0.29.21-5.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-debug 0:3.9.6-2.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-devel 0:3.9.6-2.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-idle 0:3.9.6-2.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-idna 0:2.10-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-iniconfig 0:1.1.1-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-libs 0:3.9.6-2.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-lxml 0:4.6.2-3.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-mod_wsgi 0:4.7.1-4.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-more-itertools 0:8.5.0-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-numpy 0:1.19.4-3.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-numpy-doc 0:1.19.4-3.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-numpy-f2py 0:1.19.4-3.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-packaging 0:20.4-4.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pip 0:20.2.4-6.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-pip-wheel 0:20.2.4-6.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-pluggy 0:0.13.1-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-ply 0:3.11-10.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-psutil 0:5.8.0-4.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-psycopg2 0:2.8.6-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-psycopg2-doc 0:2.8.6-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-psycopg2-tests 0:2.8.6-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-py 0:1.10.0-1.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pybind11 0:2.6.1-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pybind11-devel 0:2.6.1-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pycparser 0:2.20-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-PyMySQL 0:0.10.1-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pyparsing 0:2.4.7-5.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pysocks 0:1.7.1-4.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pytest 0:6.0.2-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pyyaml 0:5.4.1-1.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-requests 0:2.25.0-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-rpm-macros 0:3.9.6-2.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-scipy 0:1.5.4-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-setuptools 0:50.3.2-4.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-setuptools-wheel 0:50.3.2-4.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-six 0:1.15.0-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-test 0:3.9.6-2.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-tkinter 0:3.9.6-2.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-toml 0:0.10.1-5.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-urllib3 0:1.25.10-4.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-wcwidth 0:0.2.5-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-wheel 1:0.35.1-4.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-wheel-wheel 1:0.35.1-4.module+el8.5.0+20364+c7fe1181

Vulnerabilities 7