High ELSA-2021-9101 1 CVE

Important: python3 security update (Oracle Linux 7)

Published Mar 10, 2021 · Updated Mar 10, 2021

Ecosystem: Oracle Linux

Summary

[3.6.8-18.0.3]
- Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 7	python3	0:3.6.8-18.0.3.el7
Oracle Linux · 7	python3-debug	0:3.6.8-18.0.3.el7
Oracle Linux · 7	python3-devel	0:3.6.8-18.0.3.el7
Oracle Linux · 7	python3-idle	0:3.6.8-18.0.3.el7
Oracle Linux · 7	python3-libs	0:3.6.8-18.0.3.el7
Oracle Linux · 7	python3-test	0:3.6.8-18.0.3.el7
Oracle Linux · 7	python3-tkinter	0:3.6.8-18.0.3.el7

Vulnerabilities 1

Critical 9.8

CVE-2021-3177 EPSS 24%

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code exec…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine

Jan 19, 2021