High ELSA-2021-9107 1 CVE

Important: python security update (Oracle Linux 7)

Published Mar 15, 2021 · Updated Mar 15, 2021

Ecosystem: Oracle Linux

Summary

[2.7.5-90.0.3]
- Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177]

Fixed packages 7

Release	Package	Fixed in
Oracle Linux · 7	python	0:2.7.5-90.0.3.el7
Oracle Linux · 7	python-debug	0:2.7.5-90.0.3.el7
Oracle Linux · 7	python-devel	0:2.7.5-90.0.3.el7
Oracle Linux · 7	python-libs	0:2.7.5-90.0.3.el7
Oracle Linux · 7	python-test	0:2.7.5-90.0.3.el7
Oracle Linux · 7	python-tools	0:2.7.5-90.0.3.el7
Oracle Linux · 7	tkinter	0:2.7.5-90.0.3.el7

Vulnerabilities 1

Critical 9.8

CVE-2021-3177 EPSS 24%

Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code exec…

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine

Jan 19, 2021