Fixed packages 109
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | babel | 0:2.7.0-11.module+el8.5.0+11015+9c1c7c42 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | Cython | 0:0.29.14-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | Cython-debugsource | 0:0.29.14-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mod_wsgi | 0:4.6.8-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | numpy | 0:1.17.3-6.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | numpy-debugsource | 0:1.17.3-6.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-asn1crypto | 0:1.2.0-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-cffi | 0:1.13.2-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-cffi-debugsource | 0:1.13.2-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-chardet | 0:3.0.4-19.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-cryptography | 0:2.8-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-cryptography-debugsource | 0:2.8-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-idna | 0:2.8-6.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-jinja2 | 0:2.10.3-5.module+el8.5.0+10542+ba057329 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-lxml | 0:4.4.1-7.module+el8.6.0+13958+214a5473 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-lxml-debugsource | 0:4.4.1-7.module+el8.6.0+13958+214a5473 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-markupsafe | 0:1.1.1-6.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-markupsafe-debugsource | 0:1.1.1-6.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-ply | 0:3.11-10.module+el8.4.0+9579+e9717e18 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psutil | 0:5.6.4-4.module+el8.5.0+12031+10ce4870 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psutil-debugsource | 0:5.6.4-4.module+el8.5.0+12031+10ce4870 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psycopg2 | 0:2.8.4-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psycopg2-debugsource | 0:2.8.4-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pycparser | 0:2.19-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-PyMySQL | 0:0.10.1-1.module+el8.4.0+9692+8e86ab84 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pysocks | 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-requests | 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-urllib3 | 0:1.25.7-5.module+el8.5.0+11639+ea5b349d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-wheel | 0:0.33.6-6.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38 | 0:3.8.12-1.module+el8.6.0+12642+c3710b74 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-asn1crypto | 0:1.2.0-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-babel | 0:2.7.0-11.module+el8.5.0+11015+9c1c7c42 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-cffi | 0:1.13.2-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-cffi-debuginfo | 0:1.13.2-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-chardet | 0:3.0.4-19.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-cryptography | 0:2.8-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-cryptography-debuginfo | 0:2.8-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-Cython | 0:0.29.14-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-Cython-debuginfo | 0:0.29.14-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-debug | 0:3.8.12-1.module+el8.6.0+12642+c3710b74 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-debuginfo | 0:3.8.12-1.module+el8.6.0+12642+c3710b74 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-debugsource | 0:3.8.12-1.module+el8.6.0+12642+c3710b74 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-devel | 0:3.8.12-1.module+el8.6.0+12642+c3710b74 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-idle | 0:3.8.12-1.module+el8.6.0+12642+c3710b74 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-idna | 0:2.8-6.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-jinja2 | 0:2.10.3-5.module+el8.5.0+10542+ba057329 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-libs | 0:3.8.12-1.module+el8.6.0+12642+c3710b74 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-lxml | 0:4.4.1-7.module+el8.6.0+13958+214a5473 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-lxml-debuginfo | 0:4.4.1-7.module+el8.6.0+13958+214a5473 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-markupsafe | 0:1.1.1-6.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-markupsafe-debuginfo | 0:1.1.1-6.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-mod_wsgi | 0:4.6.8-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-numpy | 0:1.17.3-6.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-numpy-debuginfo | 0:1.17.3-6.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-numpy-doc | 0:1.17.3-6.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-numpy-f2py | 0:1.17.3-6.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-pip | 0:19.3.1-5.module+el8.6.0+13002+70cfc74a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-pip-wheel | 0:19.3.1-5.module+el8.6.0+13002+70cfc74a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-ply | 0:3.11-10.module+el8.4.0+9579+e9717e18 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-psutil | 0:5.6.4-4.module+el8.5.0+12031+10ce4870 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-psutil-debuginfo | 0:5.6.4-4.module+el8.5.0+12031+10ce4870 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-psycopg2 | 0:2.8.4-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-psycopg2-debuginfo | 0:2.8.4-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-psycopg2-doc | 0:2.8.4-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-psycopg2-tests | 0:2.8.4-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-pycparser | 0:2.19-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-PyMySQL | 0:0.10.1-1.module+el8.4.0+9692+8e86ab84 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-pysocks | 0:1.7.1-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-pytz | 0:2019.3-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-pyyaml | 0:5.4.1-1.module+el8.5.0+10721+14d8e0d5 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-pyyaml-debuginfo | 0:5.4.1-1.module+el8.5.0+10721+14d8e0d5 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-requests | 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-rpm-macros | 0:3.8.12-1.module+el8.6.0+12642+c3710b74 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-scipy | 0:1.3.1-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-scipy-debuginfo | 0:1.3.1-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-setuptools | 0:41.6.0-5.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-setuptools-wheel | 0:41.6.0-5.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-six | 0:1.12.0-10.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-test | 0:3.8.12-1.module+el8.6.0+12642+c3710b74 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-tkinter | 0:3.8.12-1.module+el8.6.0+12642+c3710b74 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-urllib3 | 0:1.25.7-5.module+el8.5.0+11639+ea5b349d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-wheel | 0:0.33.6-6.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python38-wheel-wheel | 0:0.33.6-6.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3x-pip | 0:19.3.1-5.module+el8.6.0+13002+70cfc74a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3x-setuptools | 0:41.6.0-5.module+el8.5.0+12205+a865257a |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3x-six | 0:1.12.0-10.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | pytz | 0:2019.3-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | PyYAML | 0:5.4.1-1.module+el8.5.0+10721+14d8e0d5 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | PyYAML-debugsource | 0:5.4.1-1.module+el8.5.0+10721+14d8e0d5 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | scipy | 0:1.3.1-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | scipy-debugsource | 0:1.3.1-4.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | pytest | 0:4.6.6-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python-atomicwrites | 0:1.3.0-8.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python-attrs | 0:19.3.0-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python-more-itertools | 0:7.2.0-5.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python-packaging | 0:19.2-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python-pluggy | 0:0.13.0-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python-py | 0:1.8.0-8.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python-wcwidth | 0:0.1.7-16.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python38-atomicwrites | 0:1.3.0-8.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python38-attrs | 0:19.3.0-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python38-more-itertools | 0:7.2.0-5.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python38-packaging | 0:19.2-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python38-pluggy | 0:0.13.0-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python38-py | 0:1.8.0-8.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python38-pyparsing | 0:2.4.5-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python38-pytest | 0:4.6.6-3.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python38-wcwidth | 0:0.1.7-16.module+el8.4.0+8888+89bc7e79 |
| Red Hat · RHEL 8 enterprise_linux:8::crb | python3x-pyparsing | 0:2.4.5-3.module+el8.4.0+8888+89bc7e79 |
Vulnerabilities 4
-
High 8.2
HTML Cleaner allows crafted and SVG embedded scripts to pass through
lxml is a library for processing XML and HTML in the Python language. Prior to version 4.6.5, the HTML Cleaner in lxml.html lets certain crafted script content pass through, as well as script content in SVG files embedded using data URIs. Users that employ th…
-
High 7.5CVE-2021-3737 EPSS 13%
A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote at…
-
High 7.5
A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locat…
-
Unscored —
There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTT…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1995162
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1995234
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2004587
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2006789
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2032569
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2047376
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1764.json
-
report
https://access.redhat.com/security/cve/CVE-2021-3733
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-3733
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-3733
-
article
https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-14-final
-
article
https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-11-final
-
article
https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-10-final
-
article
https://docs.python.org/3.9/whatsnew/changelog.html#python-3-9-5-final
-
report
https://access.redhat.com/security/cve/CVE-2021-3737
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-3737
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-3737
-
report
https://access.redhat.com/security/cve/CVE-2021-43818
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-43818
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-43818
-
article
https://github.com/lxml/lxml/blob/lxml-4.6.5/CHANGES.txt
-
report
https://access.redhat.com/security/cve/CVE-2022-0391
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-0391
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-0391