Red Hat Security Advisory: python3.9 security, bug fix, and enhancement update

Fixed packages 17

Vulnerabilities 2

• High 7.8
  CVE-2015-20107 Public exploit

  In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the…

  python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Azure Linux Alpine
  Apr 13, 2022
• Medium 6.5
  CVE-2021-28861

  Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multip…

  python3.5 python3.9 python3 python3.10 Debian Ubuntu Azure Linux
  Aug 23, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2054702
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2059951
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2075390
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2120642
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2128249
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8353.json
• report
  https://access.redhat.com/security/cve/CVE-2015-20107
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-20107
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-20107
• article
  https://python-security.readthedocs.io/vuln/mailcap-shell-injection.html
• report
  https://access.redhat.com/security/cve/CVE-2021-28861
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-28861
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-28861