Fixed packages 29
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | python | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | python-debug | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | python-debuginfo | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | python-devel | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | python-libs | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | python-test | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | python-tools | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::client | tkinter | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | python-debug | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | python-debuginfo | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | python-test | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | python-tools | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::computenode | tkinter | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | python | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | python-debug | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | python-debuginfo | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | python-devel | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | python-libs | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | python-test | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | python-tools | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::server | tkinter | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | python | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | python-debug | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | python-debuginfo | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | python-devel | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | python-libs | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | python-test | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | python-tools | 0:2.7.5-92.el7_9 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | tkinter | 0:2.7.5-92.el7_9 |
Vulnerabilities 3
-
Critical 9.8CVE-2021-3177 EPSS 24%
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code exec…
-
Medium 6.5
CRLF injection in urllib3
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.
-
Unscored —
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF in…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1883014
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1883632
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1896494
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1918168
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5235.json
-
report
https://access.redhat.com/security/cve/CVE-2020-26116
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-26116
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-26116
-
article
https://python-security.readthedocs.io/vuln/http-header-injection-method.html
-
report
https://access.redhat.com/security/cve/CVE-2020-26137
-
advisory
https://www.cve.org/CVERecord?id=CVE-2020-26137
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-26137
-
report
https://access.redhat.com/security/cve/CVE-2021-3177
-
advisory
https://www.cve.org/CVERecord?id=CVE-2021-3177
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-3177