Linux · Security advisory · November 16, 2021
ELSA-2021-4150: Security update for 22 packages
ELSA-2021-4150, released November 16, 2021, fixes 2 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0391
90th percentile
Priority of the 2 CVEs
Patch now 0
Urgent 0
High 2
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| python-nose-docs | ol 8 | 0:1.3.7-31.module+el8.5.0+20329+5c5719bc |
| python-pymongo-doc | ol 8 | 0:3.7.0-1.module+el8.4.0+20103+1849b5f9 |
| python-sqlalchemy-doc | ol 8 | 0:1.3.2-2.module+el8.3.0+7694+550a8252 |
| python-virtualenv-doc | ol 8 | 0:15.1.0-21.module+el8.5.0+20329+5c5719bc |
| python3-PyMySQL | ol 8 | 0:0.10.1-2.module+el8.4.0+20103+1849b5f9 |
| python3-bson | ol 8 | 0:3.7.0-1.module+el8.4.0+20103+1849b5f9 |
| python3-distro | ol 8 | 0:1.4.0-2.module+el8.3.0+7694+550a8252 |
| python3-docs | ol 8 | 0:3.6.7-2.module+el8.3.0+7694+550a8252 |
| python3-docutils | ol 8 | 0:0.14-12.module+el8.3.0+7694+550a8252 |
| python3-nose | ol 8 | 0:1.3.7-31.module+el8.5.0+20329+5c5719bc |
| python3-pygments | ol 8 | 0:2.2.0-22.module+el8.5.0+20329+5c5719bc |
| python3-pymongo | ol 8 | 0:3.7.0-1.module+el8.4.0+20103+1849b5f9 |
| python3-pymongo-gridfs | ol 8 | 0:3.7.0-1.module+el8.4.0+20103+1849b5f9 |
| python3-scipy | ol 8 | 0:1.0.0-21.module+el8.5.0+20329+5c5719bc |
| python3-sqlalchemy | ol 8 | 0:1.3.2-2.module+el8.3.0+7694+550a8252 |
| python3-virtualenv | ol 8 | 0:15.1.0-21.module+el8.5.0+20329+5c5719bc |
| python3-wheel | ol 8 | 1:0.31.1-3.module+el8.5.0+20329+5c5719bc |
| python3-wheel-wheel | ol 8 | 1:0.31.1-3.module+el8.5.0+20329+5c5719bc |
| python36 | ol 8 | 0:3.6.8-38.module+el8.5.0+20329+5c5719bc |
| python36-debug | ol 8 | 0:3.6.8-38.module+el8.5.0+20329+5c5719bc |
| python36-devel | ol 8 | 0:3.6.8-38.module+el8.5.0+20329+5c5719bc |
| python36-rpm-macros | ol 8 | 0:3.6.8-38.module+el8.5.0+20329+5c5719bc |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-27291 | python3-pygments: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programminglanguages rely heavily on regular expressions | 7.8 | 0.0391 | None reported | |
| High | CVE-2021-20270 | resource-agents: The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts | 7.8 | 0.0276 | None reported |
Showing 1 to 2 of 2
1