Linux · Red Hat · Security advisory · May 18, 2021

RHSA-2021:1761: Security update for 62 packages

RHSA-2021:1761, released May 18, 2021, fixes 4 CVEs across 62 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.2400
97th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 2 Routine 2

Fixed package versions

ProductReleaseFixed in
babelRHEL 80:2.5.1-9.module+el8.1.0+3111+de3f2d8e
python-nose-docsRHEL 80:1.3.7-30.module+el8.1.0+3111+de3f2d8e
python-psycopg2-docRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python-sqlalchemy-docRHEL 80:1.3.2-2.module+el8.3.0+6647+8d010749
python2RHEL 80:2.7.18-4.module+el8.4.0+9577+0b56c8de
python2-CythonRHEL 80:0.28.1-7.module+el8.1.0+3111+de3f2d8e
python2-PyMySQLRHEL 80:0.8.0-10.module+el8.1.0+3111+de3f2d8e
python2-attrsRHEL 80:17.4.0-10.module+el8.1.0+3111+de3f2d8e
python2-babelRHEL 80:2.5.1-9.module+el8.1.0+3111+de3f2d8e
python2-backportsRHEL 80:1.0-16.module+el8.4.0+9193+f3daf6ef
python2-backports-ssl_match_hostnameRHEL 80:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef
python2-bsonRHEL 80:3.6.1-11.module+el8.1.0+3446+c3d52da3
python2-chardetRHEL 80:3.0.4-10.module+el8.1.0+3111+de3f2d8e
python2-coverageRHEL 80:4.5.1-4.module+el8.1.0+3111+de3f2d8e
python2-debugRHEL 80:2.7.18-4.module+el8.4.0+9577+0b56c8de
python2-develRHEL 80:2.7.18-4.module+el8.4.0+9577+0b56c8de
python2-dnsRHEL 80:1.15.0-10.module+el8.1.0+3111+de3f2d8e
python2-docsRHEL 80:2.7.16-2.module+el8.1.0+3111+de3f2d8e
python2-docs-infoRHEL 80:2.7.16-2.module+el8.1.0+3111+de3f2d8e
python2-docutilsRHEL 80:0.14-12.module+el8.1.0+3111+de3f2d8e
python2-funcsigsRHEL 80:1.0.2-13.module+el8.1.0+3111+de3f2d8e
python2-idnaRHEL 80:2.5-7.module+el8.1.0+3111+de3f2d8e
python2-ipaddressRHEL 80:1.0.18-6.module+el8.1.0+3111+de3f2d8e
python2-jinja2RHEL 80:2.10-8.module+el8.1.0+3111+de3f2d8e
python2-libsRHEL 80:2.7.18-4.module+el8.4.0+9577+0b56c8de
python2-lxmlRHEL 80:4.2.3-4.module+el8.4.0+9319+a932af88
python2-markupsafeRHEL 80:0.23-19.module+el8.1.0+3111+de3f2d8e
python2-mockRHEL 80:2.0.0-13.module+el8.1.0+3111+de3f2d8e
python2-noseRHEL 80:1.3.7-30.module+el8.1.0+3111+de3f2d8e
python2-numpyRHEL 81:1.14.2-16.module+el8.4.0+9406+221a4565
python2-numpy-docRHEL 81:1.14.2-16.module+el8.4.0+9406+221a4565
python2-numpy-f2pyRHEL 81:1.14.2-16.module+el8.4.0+9406+221a4565
python2-pipRHEL 80:9.0.3-18.module+el8.3.0+7707+eb4bba01
python2-pip-wheelRHEL 80:9.0.3-18.module+el8.3.0+7707+eb4bba01
python2-pluggyRHEL 80:0.6.0-8.module+el8.1.0+3111+de3f2d8e
python2-psycopg2RHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-debugRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-testsRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-pyRHEL 80:1.5.3-6.module+el8.1.0+3111+de3f2d8e
python2-pygmentsRHEL 80:2.2.0-20.module+el8.1.0+3111+de3f2d8e
python2-pymongoRHEL 80:3.6.1-11.module+el8.1.0+3446+c3d52da3
python2-pymongo-gridfsRHEL 80:3.6.1-11.module+el8.1.0+3446+c3d52da3
python2-pysocksRHEL 80:1.6.8-6.module+el8.1.0+3111+de3f2d8e
python2-pytestRHEL 80:3.4.2-13.module+el8.1.0+3111+de3f2d8e
python2-pytest-mockRHEL 80:1.9.0-4.module+el8.1.0+3111+de3f2d8e
python2-pytzRHEL 80:2017.2-12.module+el8.1.0+3111+de3f2d8e
python2-pyyamlRHEL 80:3.12-16.module+el8.1.0+3111+de3f2d8e
python2-requestsRHEL 80:2.20.0-3.module+el8.2.0+4577+feefd9b8
python2-rpm-macrosRHEL 80:3-38.module+el8.1.0+3111+de3f2d8e
python2-scipyRHEL 80:1.0.0-20.module+el8.1.0+3323+7ac3e00f
python2-setuptoolsRHEL 80:39.0.1-13.module+el8.4.0+9442+27d0e81c
python2-setuptools-wheelRHEL 80:39.0.1-13.module+el8.4.0+9442+27d0e81c
python2-setuptools_scmRHEL 80:1.15.7-6.module+el8.1.0+3111+de3f2d8e
python2-sixRHEL 80:1.11.0-6.module+el8.4.0+9287+299307c7
python2-sqlalchemyRHEL 80:1.3.2-2.module+el8.3.0+6647+8d010749
python2-testRHEL 80:2.7.18-4.module+el8.4.0+9577+0b56c8de
python2-tkinterRHEL 80:2.7.18-4.module+el8.4.0+9577+0b56c8de
python2-toolsRHEL 80:2.7.18-4.module+el8.4.0+9577+0b56c8de
python2-urllib3RHEL 80:1.24.2-3.module+el8.4.0+9193+f3daf6ef
python2-virtualenvRHEL 80:15.1.0-19.module+el8.1.0+3507+d69c168d
python2-wheelRHEL 81:0.31.1-2.module+el8.1.0+3725+aac5cd17
python2-wheel-wheelRHEL 81:0.31.1-2.module+el8.1.0+3725+aac5cd17

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-3177 Python 3.7 and 2 others: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')9.8 0.2400 None reported
High CVE-2020-26116 Python 3.6 and 3 others: http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5…7.2 0.0636 None reported
Routine CVE-2020-27783 babel: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception...6.1 0.0398 None reported
Routine CVE-2020-26137 python2-numpy-f2py: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception...6.5 0.0227 None reported
Showing 1 to 4 of 4 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.