# ELSA-2022-9341: Security update for 3 packages

ELSA-2022-9341, released April 27, 2022, fixes 11 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/elsa-2022-9341
- Platform: Linux
- Released: Apr 27, 2022
- Priority: High (Closes CVE-2017-18342, high severity)
- CVEs: 11, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2022-9341.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [ol-automation-manager](https://patchblox.com/security/data/product/linux/ol-automation-manager.md) | ol 8 | 0:1.0.2-1.el8 |
| [ol-automation-manager-cli](https://patchblox.com/security/data/product/linux/ol-automation-manager-cli.md) | ol 8 | 0:1.0.2-1.el8 |
| [python3-olamkit](https://patchblox.com/security/data/product/linux/python3-olamkit.md) | ol 8 | 0:1.0.2-1.el8 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2017-18342](https://patchblox.com/security/data/cve/CVE-2017-18342.md) | High | ol-automation-manager: [1.0.2-1.el8] - Fix multiple CVEs : CVE-2017-18342, CVE-2020-10109, CVE-2020-10108,   CVE-2021-33203, CVE-2021-33571,... | 9.8 | 0.0557 |  |
| [CVE-2021-31542](https://patchblox.com/security/data/cve/CVE-2021-31542.md) | High | python3-django: In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile all... | 7.5 | 0.0533 |  |
| [CVE-2021-33571](https://patchblox.com/security/data/cve/CVE-2021-33571.md) | High | python3-django: In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and valida... | 7.5 | 0.0526 |  |
| [CVE-2021-28957](https://patchblox.com/security/data/cve/CVE-2021-28957.md) | High | python39-rpm-macros: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti... | 9.1 | 0.0404 |  |
| [CVE-2020-10108](https://patchblox.com/security/data/cve/CVE-2020-10108.md) | High | python3-twisted: In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability | 9.8 | 0.0397 |  |
| [CVE-2020-10109](https://patchblox.com/security/data/cve/CVE-2020-10109.md) | High | python3-twisted: In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability | 9.8 | 0.0329 |  |
| [CVE-2021-43818](https://patchblox.com/security/data/cve/CVE-2021-43818.md) | High | python39-urllib3: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti... | 8.8 | 0.0266 |  |
| [CVE-2021-44420](https://patchblox.com/security/data/cve/CVE-2021-44420.md) | High | python-django: In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines... | 7.3 | 0.0242 |  |
| [CVE-2020-27783](https://patchblox.com/security/data/cve/CVE-2020-27783.md) | Routine | babel: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception... | 6.1 | 0.0398 |  |
| [CVE-2021-28658](https://patchblox.com/security/data/cve/CVE-2021-28658.md) | Routine | python3-django: In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8,MultiPartParser allowed directory traversal via... | 5.3 | 0.0376 |  |
| [CVE-2021-33203](https://patchblox.com/security/data/cve/CVE-2021-33203.md) | Routine | python3-django: Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contri... | 4.9 | 0.0274 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo