Red Hat Security Advisory: rh-python38 security, bug fix, and enhancement update

Fixed packages 20

Vulnerabilities 17

• Critical 9.8
  CVE-2021-3177 EPSS 24%

  Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code exec…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine
  Jan 19, 2021
• Critical 9.1
  CVE-2020-36242

  PyCA Cryptography symmetrically encrypting large values can lead to integer overflow

  In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.

  cryptography python-cryptography py3-cryptography Debian Alpine PyPI
  Feb 7, 2021
• High 7.8
  CVE-2021-42771

  Directory Traversal in Babel

  Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

  babel python-babel babel py3-babel Debian Azure Linux Alpine PyPI
  Oct 20, 2021
• High 7.5
  CVE-2021-33503

  Catastrophic backtracking in URL authority parser when passed URL containing many @ characters

  An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a para…

  python-pip urllib3 python-urllib3 python-urllib3 Debian Ubuntu Azure Linux PyPI
  Jun 29, 2021
• High 7.5
  CVE-2022-0391

  A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locat…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux
  Feb 9, 2022
• Medium 6.1
  CVE-2020-27783

  lxml vulnerable to Cross-site Scripting

  A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML…

  lxml lxml lxml python-lxml Debian Ubuntu Azure Linux Alpine PyPI
  Dec 3, 2020
• Medium 6.1
  CVE-2021-28957

  lxml vulnerable to Cross-Site Scripting

  An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attac…

  lxml lxml python-lxml lxml Debian Ubuntu Azure Linux Alpine PyPI
  Mar 21, 2021
• Medium 5.9
  CVE-2020-25659

  RSA decryption vulnerable to Bleichenbacher timing vulnerability

  python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.

  cryptography python-cryptography python-cryptography py3-cryptography Debian Ubuntu Alpine PyPI
  Jan 11, 2021
• Medium 5.9
  CVE-2021-23336 EPSS 41%

  Web Cache Poisoning

  The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called par…

  python-django python-django python3.4 python3.5 Debian Ubuntu Azure Linux Alpine
  Feb 15, 2021
• Medium 5.7
  CVE-2021-3426

  There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or …

  python3.4 python3.5 python3.6 python3.8 Debian Ubuntu Azure Linux Alpine
  May 20, 2021
• Medium 5.7
  CVE-2021-3572 Public exploit

  Improper Input Validation in pip

  A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This i…

  python-pip pip python-pip python-IPy Debian Ubuntu Azure Linux PyPI
  Nov 10, 2021
• Medium 5.3
  CVE-2020-28493

  Regular Expression Denial of Service (ReDoS)

  This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the most exploitable as it searches for trailing punctuation. T…

  nodejs nodejs24 jinja2 jinja2 Debian Ubuntu Azure Linux Alpine PyPI
  Feb 1, 2021
• Medium 5.3
  CVE-2021-4189

  A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu
  Aug 24, 2022
• Unscored —
  CVE-2020-27619

  In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via …

  python3.4 python3.5 python3.6 python3.8 Debian Ubuntu
  Oct 22, 2020
• Unscored —
  CVE-2021-20095 Rejected

  DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  python-babel Ubuntu
  Apr 29, 2021
• Unscored —
  CVE-2021-29921

  In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string.…

  python3.8 python3.9 pypy3 python3 Debian Ubuntu Alpine
  May 6, 2021
• Unscored —
  CVE-2021-3733

  There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTT…

  python3.4 python3.5 python3.6 python3.8 Debian Ubuntu Azure Linux
  Mar 7, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/articles/5860431
• article
  https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html-single/3.7_release_notes/index#sect-RHSCL-Other-notes
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889886
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1889988
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1901633
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1918168
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1926226
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1928707
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1928904
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1935913
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1941534
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1955615
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1957458
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1962856
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1968074
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1969523
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3254.json
• report
  https://access.redhat.com/security/cve/CVE-2020-25659
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-25659
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-25659
• article
  https://cryptography.io/en/latest/changelog.html#v3-2
• report
  https://access.redhat.com/security/cve/CVE-2020-27619
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-27619
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-27619
• report
  https://access.redhat.com/security/cve/CVE-2020-27783
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-27783
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-27783
• report
  https://access.redhat.com/security/cve/CVE-2020-28493
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-28493
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-28493
• report
  https://access.redhat.com/security/cve/CVE-2020-36242
• advisory
  https://www.cve.org/CVERecord?id=CVE-2020-36242
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2020-36242
• article
  https://cryptography.io/en/latest/changelog.html#v3-3-2
• report
  https://access.redhat.com/security/cve/CVE-2021-3177
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3177
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3177
• report
  https://access.redhat.com/security/cve/CVE-2021-3426