Red Hat Security Advisory: python27-python and python27-python-pip security update

Fixed packages 8

Vulnerabilities 4

• High 7.5
  CVE-2021-3737 EPSS 13%

  A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote at…

  python3.4 python3.5 python3.6 python3.8 Debian Ubuntu
  Mar 4, 2022
• High 7.5
  CVE-2022-0391

  A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locat…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu
  Feb 9, 2022
• Medium 5.3
  CVE-2021-4189

  A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu
  Aug 24, 2022
• Unscored —
  CVE-2021-3733

  There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTT…

  python3.4 python3.5 python3.6 python3.8 Debian Ubuntu
  Mar 7, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1995162
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1995234
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2036020
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2047376
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2064442
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1663.json
• report
  https://access.redhat.com/security/cve/CVE-2021-3733
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3733
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3733
• article
  https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-14-final
• article
  https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-11-final
• article
  https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-10-final
• article
  https://docs.python.org/3.9/whatsnew/changelog.html#python-3-9-5-final
• report
  https://access.redhat.com/security/cve/CVE-2021-3737
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-3737
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-3737
• report
  https://access.redhat.com/security/cve/CVE-2021-4189
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-4189
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-4189
• article
  https://bugs.python.org/issue43285
• report
  https://access.redhat.com/security/cve/CVE-2022-0391
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-0391
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-0391