Skip to content
OpenAdvisories
High RHSA-2021:4150 2 CVEs

Red Hat Security Advisory: python36:3.6 security and bug fix update

Published Sep 13, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 39

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream python-distro 0:1.4.0-2.module+el8.1.0+3334+5cb623d7
Red Hat · RHEL 8 enterprise_linux:8::appstream python-docs 0:3.6.7-2.module+el8.1.0+3334+5cb623d7
Red Hat · RHEL 8 enterprise_linux:8::appstream python-docutils 0:0.14-12.module+el8.1.0+3334+5cb623d7
Red Hat · RHEL 8 enterprise_linux:8::appstream python-nose 0:1.3.7-31.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python-nose-docs 0:1.3.7-31.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pygments 0:2.2.0-22.module+el8.5.0+10789+e4939b94
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pymongo 0:3.7.0-1.module+el8.4.0+9670+1849b5f9
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pymongo-debuginfo 0:3.7.0-1.module+el8.4.0+9670+1849b5f9
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pymongo-debugsource 0:3.7.0-1.module+el8.4.0+9670+1849b5f9
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pymongo-doc 0:3.7.0-1.module+el8.4.0+9670+1849b5f9
Red Hat · RHEL 8 enterprise_linux:8::appstream python-PyMySQL 0:0.10.1-2.module+el8.4.0+9657+a4b6a102
Red Hat · RHEL 8 enterprise_linux:8::appstream python-sqlalchemy 0:1.3.2-2.module+el8.3.0+6646+6b4b10ec
Red Hat · RHEL 8 enterprise_linux:8::appstream python-sqlalchemy-doc 0:1.3.2-2.module+el8.3.0+6646+6b4b10ec
Red Hat · RHEL 8 enterprise_linux:8::appstream python-virtualenv 0:15.1.0-21.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python-virtualenv-doc 0:15.1.0-21.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python-wheel 1:0.31.1-3.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-bson 0:3.7.0-1.module+el8.4.0+9670+1849b5f9
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-bson-debuginfo 0:3.7.0-1.module+el8.4.0+9670+1849b5f9
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-distro 0:1.4.0-2.module+el8.1.0+3334+5cb623d7
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-docs 0:3.6.7-2.module+el8.1.0+3334+5cb623d7
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-docutils 0:0.14-12.module+el8.1.0+3334+5cb623d7
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-nose 0:1.3.7-31.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-pygments 0:2.2.0-22.module+el8.5.0+10789+e4939b94
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-pymongo 0:3.7.0-1.module+el8.4.0+9670+1849b5f9
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-pymongo-debuginfo 0:3.7.0-1.module+el8.4.0+9670+1849b5f9
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-pymongo-gridfs 0:3.7.0-1.module+el8.4.0+9670+1849b5f9
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-PyMySQL 0:0.10.1-2.module+el8.4.0+9657+a4b6a102
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-scipy 0:1.0.0-21.module+el8.5.0+10916+41bd434d
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-scipy-debuginfo 0:1.0.0-21.module+el8.5.0+10916+41bd434d
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-sqlalchemy 0:1.3.2-2.module+el8.3.0+6646+6b4b10ec
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-virtualenv 0:15.1.0-21.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-wheel 1:0.31.1-3.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-wheel-wheel 1:0.31.1-3.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python36 0:3.6.8-38.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python36-debug 0:3.6.8-38.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python36-devel 0:3.6.8-38.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream python36-rpm-macros 0:3.6.8-38.module+el8.5.0+12207+5c5719bc
Red Hat · RHEL 8 enterprise_linux:8::appstream scipy 0:1.0.0-21.module+el8.5.0+10916+41bd434d
Red Hat · RHEL 8 enterprise_linux:8::appstream scipy-debugsource 0:1.0.0-21.module+el8.5.0+10916+41bd434d

Vulnerabilities 2

  • High 7.5
    CVE-2021-20270

    Infinite Loop in Pygments

    An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the "exception" keyword.

    mediawiki pygments pygments pygments Debian Ubuntu Azure Linux Alpine PyPI
  • High 7.5
    CVE-2021-27291

    Pygments vulnerable to Regular Expression Denial of Service (ReDoS)

    In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an …

    mediawiki pygments pygments pygments Debian Ubuntu Azure Linux Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1917971
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1922136
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1934199
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1940603
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4150.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-20270
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-20270
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-20270
  • report
    https://access.redhat.com/security/cve/CVE-2021-27291
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-27291
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-27291