Summary
mod_wsgi
[4.7.1-4]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[4.7.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
[4.7.1-2]
- Rebuilt for Python 3.9
[4.7.1-1]
- update to 4.7.1 (#1721376)
numpy
[1.19.4-3]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055
[1.19.4-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1:1.19.4-1]
- 1.19.4
python-cffi
[1.14.3-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1.14.3-1]
- Update to 1.14.3
[1.14.2-1]
- Update to 1.14.2 (#1869032)
[1.14.1-1]
- Update to 1.14.1
- Fixes: rhbz#1860698
- Fixes: rhbz#1865276
python-cryptography
[3.3.1-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[3.3.1-1]
- Update to 3.3.1 (#1905756)
python-idna
[2.10-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[2.10-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
[2.10-1]
- Update to 2.10 (#1851653)
[2.9-2]
- Rebuilt for Python 3.9
[2.9-1]
- Update to 2.9 (#1803654)
python-lxml
[4.6.2-3]
- Security fix for CVE-2021-28957
Resolves: rhbz#1941534
[4.6.2-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[4.6.2-1]
- Update to 4.6.2
- Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
- Fixes: rhbz#1855415
- Fixes: rhbz#1901634
python-psutil
[5.8.0-4]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[5.8.0-3]
- Disable test_leak_mem test.
[5.8.0-2]
- Disable test_sensors_temperatures test.
[5.8.0-1]
- Update to 5.8.0. Fixes rhbz#1909321
- Re-enable tests (skipping 2 that fail in mock).
python-psycopg2
[2.8.6-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[2.8.6-1]
- Rebase to upstream version 2.8.6
python-pycparser
[2.20-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[2.20-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
[2.20-1]
- Update to 2.20 (#1810349)
python-requests
[2.25.0-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[2.25.0-1]
- Update to 2.25.0
python-toml
[0.10.1-5]
- Convert spec for python39 module in RHEL8
- Revert usage of pyproject-rpm-macros
- Resolves: rhbz#1877430
[0.10.1-4]
- Dont BR pytest-cov
[0.10.1-3]
- Use pyproject-rpm-macros
[0.10.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
[0.10.1-1]
- Update to 0.10.1 (#1835567)
python-urllib3
[1.25.10-4]
- Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
Resolves: rhbz#1968074
[1.25.10-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1.25.10-2]
- Update RECENT_DATE dynamically
[1.25.10-1]
- Update to 1.25.10. Fixed bug #1824900
python-wheel
[1:0.35.1-4]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055
[1:0.35.1-3]
- Add back Epoch 1 to the package version because the original version with the
epoch was available in CentOS Stream for a few days
- Resolves: rhbz#1877430
[1:0.35.1-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1:0.35.1-1]
- Update to 0.35.1
- Fixes: rhbz#1868821
python39
[3.9.6-2]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055
[3.9.6-1]
- Update to 3.9.6
- Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module
Resolves: rhbz#1957458
[3.9.2-2]
- Security fix for CVE-2021-3426: information disclosure via pydoc
Resolves: rhbz#1935913
python3x-pip
[20.2.4-6]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055
[20.2.4-5]
- Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
Resolves: rhbz#1968074
[20.2.4-4]
- Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references
Resolves: rhbz#1962856
[20.2.4-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[20.2.4-2]
- Disable tests and documentation in Fedora ELN (and RHEL)
[20.2.4-1]
- Update to 20.2.4 (#1889112)
python3x-setuptools
[50.3.2-4]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055
[50.3.2-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[50.3.2-2]
- Disable tests in Fedora ELN (and RHEL)
[50.3.2-1]
- Update to 50.3.2 (#1889093)
python3x-six
[1.15.0-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1.15.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
[1.15.0-1]
- Update to 1.15.0 (#1838702)
scipy
[1.5.4-3]
- Specify LDFLAGS explicitly
- Force preprocessing of Fortran sources to make annobin record proper flags
- Resolves: rhbz#1778983 rhbz#1877430
[1.5.4-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1.5.4-1]
- New upstream release 1.5.4
- Increase test timeout, 300 seconds is not always enough
for test_logpdf_overflow on s390x
resolves: #1894887
pytest
[6.0.2-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[6.0.2-1]
- Update to 6.0.2.
python-iniconfig
[1.1.1-2]
- Convert from Fedora to the python39 module in RHEL8
- Revert usage of pyproject-rpm-macros
- Remove dependency on setuptools_scm
- Resolves: rhbz#1877430
[1.1.1-1]
- Update to 1.1.1 (#1888157)
python-more-itertools
[8.5.0-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[8.5.0-1]
- Update to 8.5.0 (#1873653)
[8.4.0-1]
- Update to 8.4.0
- Fixes rhbz#1778332
python-wcwidth
[0.2.5-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[0.2.5-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
[0.2.5-1]
- Update to 0.2.5 (#1850238)
Fixed packages 49
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python39 | 0:3.9.6-2.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-attrs | 0:20.3.0-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-cffi | 0:1.14.3-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-chardet | 0:3.0.4-19.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-cryptography | 0:3.3.1-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-Cython | 0:0.29.21-5.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-debug | 0:3.9.6-2.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-devel | 0:3.9.6-2.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-idle | 0:3.9.6-2.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-idna | 0:2.10-3.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-iniconfig | 0:1.1.1-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-libs | 0:3.9.6-2.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-lxml | 0:4.6.2-3.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-mod_wsgi | 0:4.7.1-4.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-more-itertools | 0:8.5.0-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-numpy | 0:1.19.4-3.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-numpy-doc | 0:1.19.4-3.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-numpy-f2py | 0:1.19.4-3.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-packaging | 0:20.4-4.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-pip | 0:20.2.4-6.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-pip-wheel | 0:20.2.4-6.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-pluggy | 0:0.13.1-3.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-ply | 0:3.11-10.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-psutil | 0:5.8.0-4.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-psycopg2 | 0:2.8.6-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-psycopg2-doc | 0:2.8.6-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-psycopg2-tests | 0:2.8.6-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-py | 0:1.10.0-1.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-pybind11 | 0:2.6.1-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-pybind11-devel | 0:2.6.1-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-pycparser | 0:2.20-3.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-PyMySQL | 0:0.10.1-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-pyparsing | 0:2.4.7-5.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-pysocks | 0:1.7.1-4.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-pytest | 0:6.0.2-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-pyyaml | 0:5.4.1-1.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-requests | 0:2.25.0-2.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-rpm-macros | 0:3.9.6-2.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-scipy | 0:1.5.4-3.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-setuptools | 0:50.3.2-4.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-setuptools-wheel | 0:50.3.2-4.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-six | 0:1.15.0-3.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-test | 0:3.9.6-2.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-tkinter | 0:3.9.6-2.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-toml | 0:0.10.1-5.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-urllib3 | 0:1.25.10-4.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-wcwidth | 0:0.2.5-3.module+el8.4.0+20109+b7b1db01 |
| Oracle Linux · 8 | python39-wheel | 1:0.35.1-4.module+el8.5.0+20364+c7fe1181 |
| Oracle Linux · 8 | python39-wheel-wheel | 1:0.35.1-4.module+el8.5.0+20364+c7fe1181 |
Vulnerabilities 7
-
High 7.5
Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a para…
-
High 7.5CVE-2021-3737 EPSS 13%
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote at…
-
Medium 6.1
lxml vulnerable to Cross-Site Scripting
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attac…
-
Medium 5.7
There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or …
-
Medium 5.7CVE-2021-3572 Public exploit
Improper Input Validation in pip
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This i…
-
Unscored —
In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string.…
-
Unscored —
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTT…