Skip to content
OpenAdvisories
Medium ELSA-2022-1763 1 CVE

Moderate: python39:3.9 and python39-devel:3.9 security update (Oracle Linux 8)

Published May 17, 2022 · Updated May 17, 2022

Ecosystem: Oracle Linux

Summary

mod_wsgi
[4.7.1-4]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[4.7.1-3]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[4.7.1-2]
- Rebuilt for Python 3.9

[4.7.1-1]
- update to 4.7.1 (#1721376)

python39
[3.9.7-1]
- Update to 3.9.7
Resolves: rhbz#2003102

python3x-pip
[20.2.4-7]
- Remove bundled windows executables
- Resolves: rhbz#2006790

python3x-six
[1.15.0-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[1.15.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[1.15.0-1]
- Update to 1.15.0 (#1838702)

[1.14.0-4]
- Rebuilt for Python 3.9

[1.14.0-3]
- Bootstrap for Python 3.9

[1.14.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

[1.14.0-1]
- Update to 1.14.0 (#1768982) for Python 3.9 support (#1788494)
- Drop old obsoletes for platform-python-six

python-cffi
[1.14.3-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[1.14.3-1]
- Update to 1.14.3

[1.14.2-1]
- Update to 1.14.2 (#1869032)

[1.14.1-1]
- Update to 1.14.1
- Fixes: rhbz#1860698
- Fixes: rhbz#1865276

[1.14.0-2]
- Rebuilt for Python 3.9

[1.14.0]
- Update to 1.14.0 (#1800646)

python-cryptography
[3.3.1-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[3.3.1-1]
- Update to 3.3.1 (#1905756)

[3.2.1-1]
- Update to 3.2.1 (#1892153)

[3.2-1]
- Update to 3.2 (#1891378)

[3.1-1]
- Update to 3.1 (#1872978)

[3.0-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[3.0-1]
- Update to 3.0 (#185897)

python-idna
[2.10-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[2.10-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[2.10-1]
- Update to 2.10 (#1851653)

[2.9-2]
- Rebuilt for Python 3.9

[2.9-1]
- Update to 2.9 (#1803654)

python-lxml
[4.6.5-1]
- Update to 4.6.5
- Security fix for CVE-2021-43818
Resolves: rhbz#2032569

[4.6.2-3]
- Security fix for CVE-2021-28957
Resolves: rhbz#1941534

[4.6.2-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430

[4.6.2-1]
- Update to 4.6.2
- Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
- Fixes: rhbz#1855415
- Fixes: rhbz#1901634

[4.5.1-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

[4.5.1-1]
- Update to 4.5.1

Fixed packages 49

ReleasePackageFixed in
Oracle Linux · 8 python39 0:3.9.7-1.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-attrs 0:20.3.0-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-cffi 0:1.14.3-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-chardet 0:3.0.4-19.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-cryptography 0:3.3.1-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-Cython 0:0.29.21-5.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-debug 0:3.9.7-1.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-devel 0:3.9.7-1.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-idle 0:3.9.7-1.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-idna 0:2.10-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-iniconfig 0:1.1.1-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-libs 0:3.9.7-1.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-lxml 0:4.6.5-1.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-mod_wsgi 0:4.7.1-4.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-more-itertools 0:8.5.0-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-numpy 0:1.19.4-3.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-numpy-doc 0:1.19.4-3.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-numpy-f2py 0:1.19.4-3.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-packaging 0:20.4-4.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pip 0:20.2.4-7.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-pip-wheel 0:20.2.4-7.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-pluggy 0:0.13.1-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-ply 0:3.11-10.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-psutil 0:5.8.0-4.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-psycopg2 0:2.8.6-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-psycopg2-doc 0:2.8.6-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-psycopg2-tests 0:2.8.6-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-py 0:1.10.0-1.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pybind11 0:2.7.1-1.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-pybind11-devel 0:2.7.1-1.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-pycparser 0:2.20-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-PyMySQL 0:0.10.1-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pyparsing 0:2.4.7-5.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pysocks 0:1.7.1-4.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pytest 0:6.0.2-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-pyyaml 0:5.4.1-1.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-requests 0:2.25.0-2.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-rpm-macros 0:3.9.7-1.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-scipy 0:1.5.4-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-setuptools 0:50.3.2-4.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-setuptools-wheel 0:50.3.2-4.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-six 0:1.15.0-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-test 0:3.9.7-1.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-tkinter 0:3.9.7-1.module+el8.6.0+20625+ee813db2
Oracle Linux · 8 python39-toml 0:0.10.1-5.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-urllib3 0:1.25.10-4.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-wcwidth 0:0.2.5-3.module+el8.4.0+20109+b7b1db01
Oracle Linux · 8 python39-wheel 1:0.35.1-4.module+el8.5.0+20364+c7fe1181
Oracle Linux · 8 python39-wheel-wheel 1:0.35.1-4.module+el8.5.0+20364+c7fe1181

Vulnerabilities 1

  • High 8.2
    CVE-2021-43818

    HTML Cleaner allows crafted and SVG embedded scripts to pass through

    lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ th…

    lxml lxml lxml lxml Debian Ubuntu Azure Linux Alpine PyPI