Linux · Security advisory · November 16, 2021

ELSA-2021-4160: Security update for 49 packages

ELSA-2021-4160, released November 16, 2021, fixes 7 CVEs across 49 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.1317
96th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 7 Routine 0

Fixed package versions

ProductReleaseFixed in
python39ol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-Cythonol 80:0.29.21-5.module+el8.4.0+20109+b7b1db01
python39-PyMySQLol 80:0.10.1-2.module+el8.4.0+20109+b7b1db01
python39-attrsol 80:20.3.0-2.module+el8.4.0+20109+b7b1db01
python39-cffiol 80:1.14.3-2.module+el8.4.0+20109+b7b1db01
python39-chardetol 80:3.0.4-19.module+el8.4.0+20109+b7b1db01
python39-cryptographyol 80:3.3.1-2.module+el8.4.0+20109+b7b1db01
python39-debugol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-develol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-idleol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-idnaol 80:2.10-3.module+el8.4.0+20109+b7b1db01
python39-iniconfigol 80:1.1.1-2.module+el8.4.0+20109+b7b1db01
python39-libsol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-lxmlol 80:4.6.2-3.module+el8.5.0+20364+c7fe1181
python39-mod_wsgiol 80:4.7.1-4.module+el8.4.0+20109+b7b1db01
python39-more-itertoolsol 80:8.5.0-2.module+el8.4.0+20109+b7b1db01
python39-numpyol 80:1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-numpy-docol 80:1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-numpy-f2pyol 80:1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-packagingol 80:20.4-4.module+el8.4.0+20109+b7b1db01
python39-pipol 80:20.2.4-6.module+el8.5.0+20364+c7fe1181
python39-pip-wheelol 80:20.2.4-6.module+el8.5.0+20364+c7fe1181
python39-pluggyol 80:0.13.1-3.module+el8.4.0+20109+b7b1db01
python39-plyol 80:3.11-10.module+el8.4.0+20109+b7b1db01
python39-psutilol 80:5.8.0-4.module+el8.4.0+20109+b7b1db01
python39-psycopg2ol 80:2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-psycopg2-docol 80:2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-psycopg2-testsol 80:2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-pyol 80:1.10.0-1.module+el8.4.0+20109+b7b1db01
python39-pybind11ol 80:2.6.1-2.module+el8.4.0+20109+b7b1db01
python39-pybind11-develol 80:2.6.1-2.module+el8.4.0+20109+b7b1db01
python39-pycparserol 80:2.20-3.module+el8.4.0+20109+b7b1db01
python39-pyparsingol 80:2.4.7-5.module+el8.4.0+20109+b7b1db01
python39-pysocksol 80:1.7.1-4.module+el8.4.0+20109+b7b1db01
python39-pytestol 80:6.0.2-2.module+el8.4.0+20109+b7b1db01
python39-pyyamlol 80:5.4.1-1.module+el8.5.0+20364+c7fe1181
python39-requestsol 80:2.25.0-2.module+el8.4.0+20109+b7b1db01
python39-rpm-macrosol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-scipyol 80:1.5.4-3.module+el8.4.0+20109+b7b1db01
python39-setuptoolsol 80:50.3.2-4.module+el8.5.0+20364+c7fe1181
python39-setuptools-wheelol 80:50.3.2-4.module+el8.5.0+20364+c7fe1181
python39-sixol 80:1.15.0-3.module+el8.4.0+20109+b7b1db01
python39-testol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-tkinterol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-tomlol 80:0.10.1-5.module+el8.4.0+20109+b7b1db01
python39-urllib3ol 80:1.25.10-4.module+el8.5.0+20364+c7fe1181
python39-wcwidthol 80:0.2.5-3.module+el8.4.0+20109+b7b1db01
python39-wheelol 81:0.35.1-4.module+el8.5.0+20364+c7fe1181
python39-wheel-wheelol 81:0.35.1-4.module+el8.5.0+20364+c7fe1181

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2021-3737 Python 3.8 and 2 others: Loop with Unreachable Exit Condition ('Infinite Loop'), CWE-400 - Uncontrolled Resource Consumption 9.1 0.1317 None reported
High CVE-2021-29921 Python 3.8: In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an… 9.8 0.0676 None reported
High CVE-2021-3733 Python 3.7 and 5 others: Uncontrolled Resource Consumption 9.1 0.0480 None reported
High CVE-2021-28957 python39-rpm-macros: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti... 9.1 0.0404 None reported
High CVE-2021-33503 python39-wcwidth: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti... 9.1 0.0327 None reported
High CVE-2021-3426 Python 3.7 and 3 others: There's a flaw in Python 3's pydoc. 9.1 0.0186 None reported
High CVE-2021-3572 python39-urllib3: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti... 9.1 0.0183 None reported
Showing 1 to 7 of 7 1