Skip to content
OpenAdvisories
High RHSA-2022:1763 1 CVE

Red Hat Security Advisory: python39:3.9 and python39-devel:3.9 security update

Published Sep 13, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 76

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream mod_wsgi 0:4.7.1-4.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream numpy 0:1.19.4-3.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream numpy-debugsource 0:1.19.4-3.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream python-cffi 0:1.14.3-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-cffi-debugsource 0:1.14.3-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-chardet 0:3.0.4-19.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-cryptography 0:3.3.1-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-cryptography-debugsource 0:3.3.1-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-idna 0:2.10-3.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-lxml 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
Red Hat · RHEL 8 enterprise_linux:8::appstream python-lxml-debugsource 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
Red Hat · RHEL 8 enterprise_linux:8::appstream python-ply 0:3.11-10.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psutil 0:5.8.0-4.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psutil-debugsource 0:5.8.0-4.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psycopg2 0:2.8.6-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psycopg2-debugsource 0:2.8.6-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pycparser 0:2.20-3.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-PyMySQL 0:0.10.1-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pysocks 0:1.7.1-4.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-requests 0:2.25.0-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-toml 0:0.10.1-5.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python-urllib3 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
Red Hat · RHEL 8 enterprise_linux:8::appstream python-wheel 1:0.35.1-4.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream python39 0:3.9.7-1.module+el8.6.0+12577+62b8d0a1
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-cffi 0:1.14.3-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-cffi-debuginfo 0:1.14.3-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-chardet 0:3.0.4-19.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-cryptography 0:3.3.1-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-cryptography-debuginfo 0:3.3.1-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-debuginfo 0:3.9.7-1.module+el8.6.0+12577+62b8d0a1
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-debugsource 0:3.9.7-1.module+el8.6.0+12577+62b8d0a1
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-devel 0:3.9.7-1.module+el8.6.0+12577+62b8d0a1
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-idle 0:3.9.7-1.module+el8.6.0+12577+62b8d0a1
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-idna 0:2.10-3.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-libs 0:3.9.7-1.module+el8.6.0+12577+62b8d0a1
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-lxml 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-lxml-debuginfo 0:4.6.5-1.module+el8.6.0+13933+9cf0c87c
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-mod_wsgi 0:4.7.1-4.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-numpy 0:1.19.4-3.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-numpy-debuginfo 0:1.19.4-3.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-numpy-doc 0:1.19.4-3.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-numpy-f2py 0:1.19.4-3.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pip 0:20.2.4-7.module+el8.6.0+13003+6bb2c488
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pip-wheel 0:20.2.4-7.module+el8.6.0+13003+6bb2c488
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-ply 0:3.11-10.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psutil 0:5.8.0-4.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psutil-debuginfo 0:5.8.0-4.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psycopg2 0:2.8.6-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psycopg2-debuginfo 0:2.8.6-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psycopg2-doc 0:2.8.6-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-psycopg2-tests 0:2.8.6-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pycparser 0:2.20-3.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-PyMySQL 0:0.10.1-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pysocks 0:1.7.1-4.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pyyaml 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-pyyaml-debuginfo 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-requests 0:2.25.0-2.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-rpm-macros 0:3.9.7-1.module+el8.6.0+12577+62b8d0a1
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-scipy 0:1.5.4-3.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-scipy-debuginfo 0:1.5.4-3.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-setuptools 0:50.3.2-4.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-setuptools-wheel 0:50.3.2-4.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-six 0:1.15.0-3.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-test 0:3.9.7-1.module+el8.6.0+12577+62b8d0a1
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-tkinter 0:3.9.7-1.module+el8.6.0+12577+62b8d0a1
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-toml 0:0.10.1-5.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-urllib3 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-wheel 1:0.35.1-4.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream python39-wheel-wheel 1:0.35.1-4.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream python3x-pip 0:20.2.4-7.module+el8.6.0+13003+6bb2c488
Red Hat · RHEL 8 enterprise_linux:8::appstream python3x-setuptools 0:50.3.2-4.module+el8.5.0+12204+54860423
Red Hat · RHEL 8 enterprise_linux:8::appstream python3x-six 0:1.15.0-3.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream PyYAML 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
Red Hat · RHEL 8 enterprise_linux:8::appstream PyYAML-debugsource 0:5.4.1-1.module+el8.5.0+10613+59a13ec4
Red Hat · RHEL 8 enterprise_linux:8::appstream scipy 0:1.5.4-3.module+el8.4.0+9822+20bf1249
Red Hat · RHEL 8 enterprise_linux:8::appstream scipy-debugsource 0:1.5.4-3.module+el8.4.0+9822+20bf1249

Vulnerabilities 1

  • High 8.2
    CVE-2021-43818

    HTML Cleaner allows crafted and SVG embedded scripts to pass through

    lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ th…

    lxml lxml lxml lxml Debian Ubuntu Azure Linux Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2003102
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2006790
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2032569
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1763.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-43818
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-43818
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-43818
  • article
    https://github.com/lxml/lxml/blob/lxml-4.6.5/CHANGES.txt