ALSA-2022:1764

See a problem?
Please try reporting it to the source first.

Source

https://errata.almalinux.org/8/ALSA-2022-1764.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2022:1764.json

JSON Data

https://api.test.osv.dev/v1/vulns/ALSA-2022:1764

Related

Published

2022-05-10T06:23:23Z

Modified

2022-05-10T08:00:02Z

Summary

Moderate: python38:3.8 and python38-devel:3.8 security update

Details

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python38 (3.8), python38-devel (3.8). (BZ#1997680, BZ#1997860)

Security Fix(es):

python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733)
python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)
python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391)
python: urllib: HTTP client possible infinite loop on a 100 Continue response (CVE-2021-3737)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:8

python38

Package

Name: python38
Purl: pkg:rpm/almalinux/python38

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.12-1.module_el8.6.0+2778+cd494b30

python38-Cython

Package

Name: python38-Cython
Purl: pkg:rpm/almalinux/python38-Cython

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.29.14-4.module_el8.6.0+2778+cd494b30

python38-PyMySQL

Package

Name: python38-PyMySQL
Purl: pkg:rpm/almalinux/python38-PyMySQL

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.10.1-1.module_el8.6.0+2778+cd494b30

python38-asn1crypto

Package

Name: python38-asn1crypto
Purl: pkg:rpm/almalinux/python38-asn1crypto

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.0-3.module_el8.6.0+2778+cd494b30

python38-atomicwrites

Package

Name: python38-atomicwrites
Purl: pkg:rpm/almalinux/python38-atomicwrites

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.0-8.module_el8.6.0+2778+cd494b30

python38-attrs

Package

Name: python38-attrs
Purl: pkg:rpm/almalinux/python38-attrs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

19.3.0-3.module_el8.6.0+2778+cd494b30

python38-babel

Package

Name: python38-babel
Purl: pkg:rpm/almalinux/python38-babel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.7.0-11.module_el8.6.0+2778+cd494b30

python38-cffi

Package

Name: python38-cffi
Purl: pkg:rpm/almalinux/python38-cffi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.13.2-3.module_el8.6.0+2778+cd494b30

python38-chardet

Package

Name: python38-chardet
Purl: pkg:rpm/almalinux/python38-chardet

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.0.4-19.module_el8.6.0+2778+cd494b30

python38-cryptography

Package

Name: python38-cryptography
Purl: pkg:rpm/almalinux/python38-cryptography

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.8-3.module_el8.6.0+2778+cd494b30

python38-debug

Package

Name: python38-debug
Purl: pkg:rpm/almalinux/python38-debug

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.12-1.module_el8.6.0+2778+cd494b30

python38-devel

Package

Name: python38-devel
Purl: pkg:rpm/almalinux/python38-devel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.12-1.module_el8.6.0+2778+cd494b30

python38-idle

Package

Name: python38-idle
Purl: pkg:rpm/almalinux/python38-idle

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.12-1.module_el8.6.0+2778+cd494b30

python38-idna

Package

Name: python38-idna
Purl: pkg:rpm/almalinux/python38-idna

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.8-6.module_el8.6.0+2778+cd494b30

python38-jinja2

Package

Name: python38-jinja2
Purl: pkg:rpm/almalinux/python38-jinja2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.10.3-5.module_el8.6.0+2778+cd494b30

python38-libs

Package

Name: python38-libs
Purl: pkg:rpm/almalinux/python38-libs

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.12-1.module_el8.6.0+2778+cd494b30

python38-lxml

Package

Name: python38-lxml
Purl: pkg:rpm/almalinux/python38-lxml

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.4.1-7.module_el8.6.0+2778+cd494b30

python38-markupsafe

Package

Name: python38-markupsafe
Purl: pkg:rpm/almalinux/python38-markupsafe

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1-6.module_el8.6.0+2778+cd494b30

python38-mod_wsgi

Package

Name: python38-mod_wsgi
Purl: pkg:rpm/almalinux/python38-mod_wsgi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.6.8-3.module_el8.6.0+2778+cd494b30

python38-more-itertools

Package

Name: python38-more-itertools
Purl: pkg:rpm/almalinux/python38-more-itertools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

7.2.0-5.module_el8.6.0+2778+cd494b30

python38-numpy

Package

Name: python38-numpy
Purl: pkg:rpm/almalinux/python38-numpy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.17.3-6.module_el8.6.0+2778+cd494b30

python38-numpy-doc

Package

Name: python38-numpy-doc
Purl: pkg:rpm/almalinux/python38-numpy-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.17.3-6.module_el8.6.0+2778+cd494b30

python38-numpy-f2py

Package

Name: python38-numpy-f2py
Purl: pkg:rpm/almalinux/python38-numpy-f2py

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.17.3-6.module_el8.6.0+2778+cd494b30

python38-packaging

Package

Name: python38-packaging
Purl: pkg:rpm/almalinux/python38-packaging

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

19.2-3.module_el8.6.0+2778+cd494b30

python38-pip

Package

Name: python38-pip
Purl: pkg:rpm/almalinux/python38-pip

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

19.3.1-5.module_el8.6.0+2778+cd494b30

python38-pip-wheel

Package

Name: python38-pip-wheel
Purl: pkg:rpm/almalinux/python38-pip-wheel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

19.3.1-5.module_el8.6.0+2778+cd494b30

python38-pluggy

Package

Name: python38-pluggy
Purl: pkg:rpm/almalinux/python38-pluggy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.13.0-3.module_el8.6.0+2778+cd494b30

python38-ply

Package

Name: python38-ply
Purl: pkg:rpm/almalinux/python38-ply

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.11-10.module_el8.6.0+2778+cd494b30

python38-psutil

Package

Name: python38-psutil
Purl: pkg:rpm/almalinux/python38-psutil

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.6.4-4.module_el8.6.0+2778+cd494b30

python38-psycopg2

Package

Name: python38-psycopg2
Purl: pkg:rpm/almalinux/python38-psycopg2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.8.4-4.module_el8.6.0+2778+cd494b30

python38-psycopg2-doc

Package

Name: python38-psycopg2-doc
Purl: pkg:rpm/almalinux/python38-psycopg2-doc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.8.4-4.module_el8.6.0+2778+cd494b30

python38-psycopg2-tests

Package

Name: python38-psycopg2-tests
Purl: pkg:rpm/almalinux/python38-psycopg2-tests

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.8.4-4.module_el8.6.0+2778+cd494b30

python38-py

Package

Name: python38-py
Purl: pkg:rpm/almalinux/python38-py

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.8.0-8.module_el8.6.0+2778+cd494b30

python38-pycparser

Package

Name: python38-pycparser
Purl: pkg:rpm/almalinux/python38-pycparser

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.19-3.module_el8.6.0+2778+cd494b30

python38-pyparsing

Package

Name: python38-pyparsing
Purl: pkg:rpm/almalinux/python38-pyparsing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.4.5-3.module_el8.6.0+2778+cd494b30

python38-pysocks

Package

Name: python38-pysocks
Purl: pkg:rpm/almalinux/python38-pysocks

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.7.1-4.module_el8.6.0+2778+cd494b30

python38-pytest

Package

Name: python38-pytest
Purl: pkg:rpm/almalinux/python38-pytest

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.6.6-3.module_el8.6.0+2778+cd494b30

python38-pytz

Package

Name: python38-pytz
Purl: pkg:rpm/almalinux/python38-pytz

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2019.3-3.module_el8.6.0+2778+cd494b30

python38-pyyaml

Package

Name: python38-pyyaml
Purl: pkg:rpm/almalinux/python38-pyyaml

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.4.1-1.module_el8.6.0+2778+cd494b30

python38-requests

Package

Name: python38-requests
Purl: pkg:rpm/almalinux/python38-requests

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.22.0-9.module_el8.6.0+2778+cd494b30

python38-rpm-macros

Package

Name: python38-rpm-macros
Purl: pkg:rpm/almalinux/python38-rpm-macros

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.12-1.module_el8.6.0+2778+cd494b30

python38-scipy

Package

Name: python38-scipy
Purl: pkg:rpm/almalinux/python38-scipy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.3.1-4.module_el8.6.0+2778+cd494b30

python38-setuptools

Package

Name: python38-setuptools
Purl: pkg:rpm/almalinux/python38-setuptools

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

41.6.0-5.module_el8.6.0+2778+cd494b30

python38-setuptools-wheel

Package

Name: python38-setuptools-wheel
Purl: pkg:rpm/almalinux/python38-setuptools-wheel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

41.6.0-5.module_el8.6.0+2778+cd494b30

python38-six

Package

Name: python38-six
Purl: pkg:rpm/almalinux/python38-six

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.12.0-10.module_el8.6.0+2778+cd494b30

python38-test

Package

Name: python38-test
Purl: pkg:rpm/almalinux/python38-test

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.12-1.module_el8.6.0+2778+cd494b30

python38-tkinter

Package

Name: python38-tkinter
Purl: pkg:rpm/almalinux/python38-tkinter

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.8.12-1.module_el8.6.0+2778+cd494b30

python38-urllib3

Package

Name: python38-urllib3
Purl: pkg:rpm/almalinux/python38-urllib3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.25.7-5.module_el8.6.0+2778+cd494b30

python38-wcwidth

Package

Name: python38-wcwidth
Purl: pkg:rpm/almalinux/python38-wcwidth

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.1.7-16.module_el8.6.0+2778+cd494b30

python38-wheel

Package

Name: python38-wheel
Purl: pkg:rpm/almalinux/python38-wheel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.33.6-6.module_el8.6.0+2778+cd494b30

python38-wheel-wheel

Package

Name: python38-wheel-wheel
Purl: pkg:rpm/almalinux/python38-wheel-wheel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.33.6-6.module_el8.6.0+2778+cd494b30