Linux · Security advisory · April 27, 2022
ELSA-2022-9341: Security update for 3 packages
ELSA-2022-9341, released April 27, 2022, fixes 11 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
11
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0557
92nd percentile
Priority of the 11 CVEs
Patch now 0
Urgent 0
High 8
Routine 3
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| ol-automation-manager | ol 8 | 0:1.0.2-1.el8 |
| ol-automation-manager-cli | ol 8 | 0:1.0.2-1.el8 |
| python3-olamkit | ol 8 | 0:1.0.2-1.el8 |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2017-18342 | ol-automation-manager: [1.0.2-1.el8] - Fix multiple CVEs : CVE-2017-18342, CVE-2020-10109, CVE-2020-10108, CVE-2021-33203, CVE-2021-33571,... | 9.8 | 0.0557 | None reported | |
| High | CVE-2021-31542 | python3-django: In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile all... | 7.5 | 0.0533 | None reported | |
| High | CVE-2021-33571 | python3-django: In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and valida... | 7.5 | 0.0526 | None reported | |
| High | CVE-2021-28957 | python39-rpm-macros: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti... | 9.1 | 0.0404 | None reported | |
| High | CVE-2020-10108 | python3-twisted: In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability | 9.8 | 0.0397 | None reported | |
| High | CVE-2020-10109 | python3-twisted: In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability | 9.8 | 0.0329 | None reported | |
| High | CVE-2021-43818 | python39-urllib3: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti... | 8.8 | 0.0266 | None reported | |
| High | CVE-2021-44420 | python-django: In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines... | 7.3 | 0.0242 | None reported | |
| Routine | CVE-2020-27783 | babel: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception... | 6.1 | 0.0398 | None reported | |
| Routine | CVE-2021-28658 | python3-django: In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8,MultiPartParser allowed directory traversal via... | 5.3 | 0.0376 | None reported | |
| Routine | CVE-2021-33203 | python3-django: Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contri... | 4.9 | 0.0274 | None reported |
Showing 1 to 11 of 11
1