{
  "fix": "ELSA-2022-9341",
  "url": "https://patchblox.com/security/fix/linux/elsa-2022-9341",
  "summary": "ELSA-2022-9341, released April 27, 2022, fixes 11 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 3 packages",
  "released": "2022-04-27T00:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2017-18342, high severity",
  "supported": true,
  "cveCount": 11,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.0557,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2022-9341.html",
  "appliesTo": [
    {
      "product": "ol-automation-manager",
      "productUrl": "https://patchblox.com/security/product/linux/ol-automation-manager",
      "release": "ol 8",
      "fixedVersion": "0:1.0.2-1.el8",
      "supported": true
    },
    {
      "product": "ol-automation-manager-cli",
      "productUrl": "https://patchblox.com/security/product/linux/ol-automation-manager-cli",
      "release": "ol 8",
      "fixedVersion": "0:1.0.2-1.el8",
      "supported": true
    },
    {
      "product": "python3-olamkit",
      "productUrl": "https://patchblox.com/security/product/linux/python3-olamkit",
      "release": "ol 8",
      "fixedVersion": "0:1.0.2-1.el8",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2017-18342",
      "url": "https://patchblox.com/security/cve/CVE-2017-18342",
      "title": "ol-automation-manager: [1.0.2-1.el8]\n- Fix multiple CVEs : CVE-2017-18342, CVE-2020-10109, CVE-2020-10108,\n  CVE-2021-33203, CVE-2021-33571,...",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.0557,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-31542",
      "url": "https://patchblox.com/security/cve/CVE-2021-31542",
      "title": "python3-django: In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile all...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.05334,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33571",
      "url": "https://patchblox.com/security/cve/CVE-2021-33571",
      "title": "python3-django: In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and valida...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.0526,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-28957",
      "url": "https://patchblox.com/security/cve/CVE-2021-28957",
      "title": "python39-rpm-macros: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.04035,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-10108",
      "url": "https://patchblox.com/security/cve/CVE-2020-10108",
      "title": "python3-twisted: In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.03973,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-10109",
      "url": "https://patchblox.com/security/cve/CVE-2020-10109",
      "title": "python3-twisted: In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.03289,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-43818",
      "url": "https://patchblox.com/security/cve/CVE-2021-43818",
      "title": "python39-urllib3: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.02663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-44420",
      "url": "https://patchblox.com/security/cve/CVE-2021-44420",
      "title": "python-django: In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.3,
      "epss": 0.02421,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-27783",
      "url": "https://patchblox.com/security/cve/CVE-2020-27783",
      "title": "babel: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.03982,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-28658",
      "url": "https://patchblox.com/security/cve/CVE-2021-28658",
      "title": "python3-django: In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8,MultiPartParser allowed directory traversal via...",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.3,
      "epss": 0.03761,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-33203",
      "url": "https://patchblox.com/security/cve/CVE-2021-33203",
      "title": "python3-django: Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contri...",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.9,
      "epss": 0.02737,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T12:40:37Z"
}