Linux · Security advisory · November 9, 2021
ALSA-2021:4150: Security update for 20 packages
ALSA-2021:4150, released November 9, 2021, fixes 2 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0391
90th percentile
Priority of the 2 CVEs
Patch now 0
Urgent 0
High 2
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| python-pymongo-doc | almalinux 8 | 3.7.0-1.module_el8.5.0+135+5ce32bc4 |
| python-virtualenv-doc | almalinux 8 | 15.1.0-21.module_el8.5.0+2569+5c5719bc |
| python3-PyMySQL | almalinux 8 | 0.10.1-2.module_el8.5.0+2569+5c5719bc |
| python3-bson | almalinux 8 | 3.7.0-1.module_el8.5.0+135+5ce32bc4 |
| python3-distro | almalinux 8 | 1.4.0-2.module_el8.5.0+135+5ce32bc4 |
| python3-docs | almalinux 8 | 3.6.7-2.module_el8.5.0+2569+5c5719bc |
| python3-docutils | almalinux 8 | 0.14-12.module_el8.5.0+2569+5c5719bc |
| python3-nose | almalinux 8 | 1.3.7-31.module_el8.5.0+2569+5c5719bc |
| python3-pygments | almalinux 8 | 2.2.0-22.module_el8.5.0+2569+5c5719bc |
| python3-pymongo | almalinux 8 | 3.7.0-1.module_el8.5.0+135+5ce32bc4 |
| python3-pymongo-gridfs | almalinux 8 | 3.7.0-1.module_el8.5.0+2569+5c5719bc |
| python3-scipy | almalinux 8 | 1.0.0-21.module_el8.5.0+135+5ce32bc4 |
| python3-sqlalchemy | almalinux 8 | 1.3.2-2.module_el8.5.0+2569+5c5719bc |
| python3-virtualenv | almalinux 8 | 15.1.0-21.module_el8.5.0+135+5ce32bc4 |
| python3-wheel | almalinux 8 | 1:0.31.1-3.module_el8.5.0+2569+5c5719bc |
| python3-wheel-wheel | almalinux 8 | 1:0.31.1-3.module_el8.5.0+2569+5c5719bc |
| python36 | almalinux 8 | 3.6.8-38.module_el8.5.0+135+5ce32bc4 |
| python36-debug | almalinux 8 | 3.6.8-38.module_el8.5.0+2569+5c5719bc |
| python36-devel | almalinux 8 | 3.6.8-38.module_el8.5.0+2569+5c5719bc |
| python36-rpm-macros | almalinux 8 | 3.6.8-38.module_el8.5.0+135+5ce32bc4 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-27291 | python3-pygments: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programminglanguages rely heavily on regular expressions | 7.8 | 0.0391 | None reported | |
| High | CVE-2021-20270 | resource-agents: The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts | 7.8 | 0.0276 | None reported |
Showing 1 to 2 of 2
1