Linux · Security advisory · November 16, 2021

ELSA-2021-4455: Security update for 3 packages

ELSA-2021-4455, released November 16, 2021, fixes 1 CVE across 3 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0183

78th percentile

Fixed package versions

Product	Release	Fixed in
platform-python-pip	ol 8	0:9.0.3-20.el8
python3-pip	ol 8	0:9.0.3-20.el8
python3-pip-wheel	ol 8	0:9.0.3-20.el8

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2021-3572	python39-urllib3: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...		9.1	0.0183	None reported

Also fixes CVE-2021-3572

ALSA-2021:4162
python38-Cython, python38-PyMySQL, python38-asn1crypto and 37 more on almalinux 8
RLSA-2021:4162
Cython, PyYAML, babel and 34 more on rocky 8
RHSA-2021:4162
python38, python38-Cython, python38-PyMySQL and 48 more on RHEL 8
ELSA-2021-4162
python38, python38-Cython, python38-PyMySQL and 48 more on ol 8
ELSA-2021-4160
python39, python39-Cython, python39-PyMySQL and 46 more on ol 8
ALSA-2021:4160
python39-Cython, python39-PyMySQL, python39-attrs and 33 more on almalinux 8
RLSA-2021:4160
pybind11, python-iniconfig, python-toml and 1 more on rocky 8
RHSA-2021:4160
python39, python39-Cython, python39-PyMySQL and 46 more on RHEL 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2021-4455.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo