RLSA-2021:4150

See a problem?

Import Source

https://storage.googleapis.com/resf-osv-data/RLSA-2021:4150.json

JSON Data

https://api.osv.dev/v1/vulns/RLSA-2021:4150

Related

Published

2021-11-09T08:24:37Z

Modified

2023-02-02T13:27:54.268195Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Moderate: python36:3.6 security and bug fix update

Details

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)
python-pygments: ReDoS in multiple lexers (CVE-2021-27291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

References

Credits

- Rocky Enterprise Software Foundation
- Red Hat

Affected packages

Rocky Linux:8 / python36

Package

Name: python36
Purl: pkg:rpm/rocky-linux/python36?distro=rocky-linux-8&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.6.8-38.module+el8.5.0+671+195e4563

Rocky Linux:8 / python-distro

Package

Name: python-distro
Purl: pkg:rpm/rocky-linux/python-distro?distro=rocky-linux-8&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.4.0-2.module+el8.3.0+120+426d8baf

Rocky Linux:8 / python-docs

Package

Name: python-docs
Purl: pkg:rpm/rocky-linux/python-docs?distro=rocky-linux-8&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.6.7-2.module+el8.4.0+597+ddf0ddea

Rocky Linux:8 / python-docs

Package

Name: python-docs
Purl: pkg:rpm/rocky-linux/python-docs?distro=rocky-linux-8-4-legacy&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.6.7-2.module+el8.3.0+120+426d8baf

Rocky Linux:8 / python-docutils

Package

Name: python-docutils
Purl: pkg:rpm/rocky-linux/python-docutils?distro=rocky-linux-8&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:0.14-12.module+el8.4.0+403+9ae17a31

Rocky Linux:8 / python-docutils

Package

Name: python-docutils
Purl: pkg:rpm/rocky-linux/python-docutils?distro=rocky-linux-8-4-legacy&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:0.14-12.module+el8.3.0+120+426d8baf

Rocky Linux:8 / python-nose

Package

Name: python-nose
Purl: pkg:rpm/rocky-linux/python-nose?distro=rocky-linux-8&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.7-31.module+el8.5.0+671+195e4563

Rocky Linux:8 / python-pygments

Package

Name: python-pygments
Purl: pkg:rpm/rocky-linux/python-pygments?distro=rocky-linux-8&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:2.2.0-22.module+el8.5.0+671+195e4563

Rocky Linux:8 / python-pymongo

Package

Name: python-pymongo
Purl: pkg:rpm/rocky-linux/python-pymongo?distro=rocky-linux-8&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.7.0-1.module+el8.5.0+671+195e4563

Rocky Linux:8 / python-pymongo

Package

Name: python-pymongo
Purl: pkg:rpm/rocky-linux/python-pymongo?distro=rocky-linux-8-4-legacy&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:3.7.0-1.module+el8.4.0+597+ddf0ddea

Rocky Linux:8 / python-PyMySQL

Package

Name: python-PyMySQL
Purl: pkg:rpm/rocky-linux/python-PyMySQL?distro=rocky-linux-8&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:0.10.1-2.module+el8.4.0+597+ddf0ddea

Rocky Linux:8 / python-PyMySQL

Package

Name: python-PyMySQL
Purl: pkg:rpm/rocky-linux/python-PyMySQL?distro=rocky-linux-8-4-legacy&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:0.10.1-2.module+el8.4.0+574+843c4898

Rocky Linux:8 / python-sqlalchemy

Package

Name: python-sqlalchemy
Purl: pkg:rpm/rocky-linux/python-sqlalchemy?distro=rocky-linux-8&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.2-2.module+el8.4.0+403+9ae17a31

Rocky Linux:8 / python-sqlalchemy

Package

Name: python-sqlalchemy
Purl: pkg:rpm/rocky-linux/python-sqlalchemy?distro=rocky-linux-8-4-legacy&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.3.2-2.module+el8.3.0+120+426d8baf

Rocky Linux:8 / python-virtualenv

Package

Name: python-virtualenv
Purl: pkg:rpm/rocky-linux/python-virtualenv?distro=rocky-linux-8&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:15.1.0-21.module+el8.5.0+671+195e4563

Rocky Linux:8 / python-wheel

Package

Name: python-wheel
Purl: pkg:rpm/rocky-linux/python-wheel?distro=rocky-linux-8&epoch=1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:0.31.1-3.module+el8.5.0+671+195e4563

Rocky Linux:8 / scipy

Package

Name: scipy
Purl: pkg:rpm/rocky-linux/scipy?distro=rocky-linux-8&epoch=0

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0:1.0.0-21.module+el8.5.0+671+195e4563