Linux · Red Hat · Security advisory · May 10, 2022

RHSA-2022:1821: Security update for 62 packages

RHSA-2022:1821, released May 10, 2022, fixes 5 CVEs across 62 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Highest CVSS
9.1
Base score, 0 to 10
Highest EPSS
0.1317
96th percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
babelRHEL 80:2.5.1-10.module+el8.5.0+11014+88fc0d0b
python-nose-docsRHEL 80:1.3.7-31.module+el8.5.0+12203+77770ab7
python-psycopg2-docRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python-sqlalchemy-docRHEL 80:1.3.2-2.module+el8.3.0+6647+8d010749
python2RHEL 80:2.7.18-10.module+el8.6.0+14191+7fdd52cd
python2-CythonRHEL 80:0.28.1-7.module+el8.1.0+3111+de3f2d8e
python2-PyMySQLRHEL 80:0.8.0-10.module+el8.1.0+3111+de3f2d8e
python2-attrsRHEL 80:17.4.0-10.module+el8.1.0+3111+de3f2d8e
python2-babelRHEL 80:2.5.1-10.module+el8.5.0+11014+88fc0d0b
python2-backportsRHEL 80:1.0-16.module+el8.4.0+9193+f3daf6ef
python2-backports-ssl_match_hostnameRHEL 80:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef
python2-bsonRHEL 80:3.7.0-1.module+el8.5.0+10264+e5753a40
python2-chardetRHEL 80:3.0.4-10.module+el8.1.0+3111+de3f2d8e
python2-coverageRHEL 80:4.5.1-4.module+el8.1.0+3111+de3f2d8e
python2-debugRHEL 80:2.7.18-10.module+el8.6.0+14191+7fdd52cd
python2-develRHEL 80:2.7.18-10.module+el8.6.0+14191+7fdd52cd
python2-dnsRHEL 80:1.15.0-10.module+el8.1.0+3111+de3f2d8e
python2-docsRHEL 80:2.7.16-2.module+el8.1.0+3111+de3f2d8e
python2-docs-infoRHEL 80:2.7.16-2.module+el8.1.0+3111+de3f2d8e
python2-docutilsRHEL 80:0.14-12.module+el8.1.0+3111+de3f2d8e
python2-funcsigsRHEL 80:1.0.2-13.module+el8.1.0+3111+de3f2d8e
python2-idnaRHEL 80:2.5-7.module+el8.1.0+3111+de3f2d8e
python2-ipaddressRHEL 80:1.0.18-6.module+el8.1.0+3111+de3f2d8e
python2-jinja2RHEL 80:2.10-9.module+el8.5.0+10541+706bb066
python2-libsRHEL 80:2.7.18-10.module+el8.6.0+14191+7fdd52cd
python2-lxmlRHEL 80:4.2.3-6.module+el8.6.0+13959+8e368262
python2-markupsafeRHEL 80:0.23-19.module+el8.1.0+3111+de3f2d8e
python2-mockRHEL 80:2.0.0-13.module+el8.1.0+3111+de3f2d8e
python2-noseRHEL 80:1.3.7-31.module+el8.5.0+12203+77770ab7
python2-numpyRHEL 81:1.14.2-16.module+el8.4.0+9406+221a4565
python2-numpy-docRHEL 81:1.14.2-16.module+el8.4.0+9406+221a4565
python2-numpy-f2pyRHEL 81:1.14.2-16.module+el8.4.0+9406+221a4565
python2-pipRHEL 80:9.0.3-19.module+el8.6.0+13001+ad200bd9
python2-pip-wheelRHEL 80:9.0.3-19.module+el8.6.0+13001+ad200bd9
python2-pluggyRHEL 80:0.6.0-8.module+el8.1.0+3111+de3f2d8e
python2-psycopg2RHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-debugRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-testsRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-pyRHEL 80:1.5.3-6.module+el8.1.0+3111+de3f2d8e
python2-pygmentsRHEL 80:2.2.0-22.module+el8.5.0+10788+a4cea9e0
python2-pymongoRHEL 80:3.7.0-1.module+el8.5.0+10264+e5753a40
python2-pymongo-gridfsRHEL 80:3.7.0-1.module+el8.5.0+10264+e5753a40
python2-pysocksRHEL 80:1.6.8-6.module+el8.1.0+3111+de3f2d8e
python2-pytestRHEL 80:3.4.2-13.module+el8.1.0+3111+de3f2d8e
python2-pytest-mockRHEL 80:1.9.0-4.module+el8.1.0+3111+de3f2d8e
python2-pytzRHEL 80:2017.2-12.module+el8.1.0+3111+de3f2d8e
python2-pyyamlRHEL 80:3.12-16.module+el8.1.0+3111+de3f2d8e
python2-requestsRHEL 80:2.20.0-3.module+el8.2.0+4577+feefd9b8
python2-rpm-macrosRHEL 80:3-38.module+el8.1.0+3111+de3f2d8e
python2-scipyRHEL 80:1.0.0-21.module+el8.5.0+10858+05337455
python2-setuptoolsRHEL 80:39.0.1-13.module+el8.4.0+9442+27d0e81c
python2-setuptools-wheelRHEL 80:39.0.1-13.module+el8.4.0+9442+27d0e81c
python2-setuptools_scmRHEL 80:1.15.7-6.module+el8.1.0+3111+de3f2d8e
python2-sixRHEL 80:1.11.0-6.module+el8.4.0+9287+299307c7
python2-sqlalchemyRHEL 80:1.3.2-2.module+el8.3.0+6647+8d010749
python2-testRHEL 80:2.7.18-10.module+el8.6.0+14191+7fdd52cd
python2-tkinterRHEL 80:2.7.18-10.module+el8.6.0+14191+7fdd52cd
python2-toolsRHEL 80:2.7.18-10.module+el8.6.0+14191+7fdd52cd
python2-urllib3RHEL 80:1.24.2-3.module+el8.4.0+9193+f3daf6ef
python2-virtualenvRHEL 80:15.1.0-21.module+el8.5.0+12203+77770ab7
python2-wheelRHEL 81:0.31.1-3.module+el8.5.0+12203+77770ab7
python2-wheel-wheelRHEL 81:0.31.1-3.module+el8.5.0+12203+77770ab7

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-3737 Python 3.8 and 2 others: Loop with Unreachable Exit Condition ('Infinite Loop'), CWE-400 - Uncontrolled Resource Consumption9.1 0.1317 None reported
High CVE-2022-0391 Python 3.8 and 5 others: A flaw was found in Python, specifically within the urllib.parse module.8.8 0.0854 None reported
High CVE-2021-3733 Python 3.7 and 5 others: Uncontrolled Resource Consumption9.1 0.0480 None reported
High CVE-2021-4189 Python 3.7 and 3 others: Unchecked Return Value8.8 0.0341 None reported
High CVE-2021-43818 python39-urllib3: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...8.8 0.0264 None reported
Showing 1 to 5 of 5 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.