High ELSA-2021-9100 1 CVE

Important: python3 security update (Oracle Linux 8)

Published Mar 10, 2021 · Updated Mar 10, 2021

Ecosystem: Oracle Linux

Summary

[3.6.8-31.0.3]
- Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 8	platform-python	0:3.6.8-31.0.3.el8
Oracle Linux · 8	platform-python-debug	0:3.6.8-31.0.3.el8
Oracle Linux · 8	platform-python-devel	0:3.6.8-31.0.3.el8
Oracle Linux · 8	python3-idle	0:3.6.8-31.0.3.el8
Oracle Linux · 8	python3-libs	0:3.6.8-31.0.3.el8
Oracle Linux · 8	python3-test	0:3.6.8-31.0.3.el8
Oracle Linux · 8	python3-tkinter	0:3.6.8-31.0.3.el8

Vulnerabilities 1

Critical 9.8

CVE-2021-3177 EPSS 24%

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code exec…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine

Jan 19, 2021