Linux · Security advisory · November 9, 2021
RHSA-2021:4150: Security update for 20 packages
RHSA-2021:4150, released November 9, 2021, fixes 2 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.
High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0391
90th percentile
Priority of the 2 CVEs
Patch now 0
Urgent 0
High 2
Routine 0
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| python-pymongo-doc | RHEL 8 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| python-virtualenv-doc | RHEL 8 | 0:15.1.0-21.module+el8.5.0+12207+5c5719bc |
| python3-PyMySQL | RHEL 8 | 0:0.10.1-2.module+el8.4.0+9657+a4b6a102 |
| python3-bson | RHEL 8 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| python3-distro | RHEL 8 | 0:1.4.0-2.module+el8.1.0+3334+5cb623d7 |
| python3-docs | RHEL 8 | 0:3.6.7-2.module+el8.1.0+3334+5cb623d7 |
| python3-docutils | RHEL 8 | 0:0.14-12.module+el8.1.0+3334+5cb623d7 |
| python3-nose | RHEL 8 | 0:1.3.7-31.module+el8.5.0+12207+5c5719bc |
| python3-pygments | RHEL 8 | 0:2.2.0-22.module+el8.5.0+10789+e4939b94 |
| python3-pymongo | RHEL 8 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| python3-pymongo-gridfs | RHEL 8 | 0:3.7.0-1.module+el8.4.0+9670+1849b5f9 |
| python3-scipy | RHEL 8 | 0:1.0.0-21.module+el8.5.0+10916+41bd434d |
| python3-sqlalchemy | RHEL 8 | 0:1.3.2-2.module+el8.3.0+6646+6b4b10ec |
| python3-virtualenv | RHEL 8 | 0:15.1.0-21.module+el8.5.0+12207+5c5719bc |
| python3-wheel | RHEL 8 | 1:0.31.1-3.module+el8.5.0+12207+5c5719bc |
| python3-wheel-wheel | RHEL 8 | 1:0.31.1-3.module+el8.5.0+12207+5c5719bc |
| python36 | RHEL 8 | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
| python36-debug | RHEL 8 | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
| python36-devel | RHEL 8 | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
| python36-rpm-macros | RHEL 8 | 0:3.6.8-38.module+el8.5.0+12207+5c5719bc |
CVEs this fix closes
| Priority | CVE | Title | Impact | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| High | CVE-2021-27291 | python3-pygments: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programminglanguages rely heavily on regular expressions | 7.8 | 0.0391 | None reported | |
| High | CVE-2021-20270 | resource-agents: The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts | 7.8 | 0.0276 | None reported |
Showing 1 to 2 of 2
1