Linux · Oracle Linux · Security advisory · November 16, 2021

ELSA-2021-4160: Security update for 49 packages

ELSA-2021-4160, released November 16, 2021, fixes 7 CVEs across 49 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
7
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.1317
96th percentile

Priority of the 7 CVEs

Patch now 0 Urgent 0 High 7 Routine 0

Fixed package versions

ProductReleaseFixed in
python39ol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-Cythonol 80:0.29.21-5.module+el8.4.0+20109+b7b1db01
python39-PyMySQLol 80:0.10.1-2.module+el8.4.0+20109+b7b1db01
python39-attrsol 80:20.3.0-2.module+el8.4.0+20109+b7b1db01
python39-cffiol 80:1.14.3-2.module+el8.4.0+20109+b7b1db01
python39-chardetol 80:3.0.4-19.module+el8.4.0+20109+b7b1db01
python39-cryptographyol 80:3.3.1-2.module+el8.4.0+20109+b7b1db01
python39-debugol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-develol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-idleol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-idnaol 80:2.10-3.module+el8.4.0+20109+b7b1db01
python39-iniconfigol 80:1.1.1-2.module+el8.4.0+20109+b7b1db01
python39-libsol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-lxmlol 80:4.6.2-3.module+el8.5.0+20364+c7fe1181
python39-mod_wsgiol 80:4.7.1-4.module+el8.4.0+20109+b7b1db01
python39-more-itertoolsol 80:8.5.0-2.module+el8.4.0+20109+b7b1db01
python39-numpyol 80:1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-numpy-docol 80:1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-numpy-f2pyol 80:1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-packagingol 80:20.4-4.module+el8.4.0+20109+b7b1db01
python39-pipol 80:20.2.4-6.module+el8.5.0+20364+c7fe1181
python39-pip-wheelol 80:20.2.4-6.module+el8.5.0+20364+c7fe1181
python39-pluggyol 80:0.13.1-3.module+el8.4.0+20109+b7b1db01
python39-plyol 80:3.11-10.module+el8.4.0+20109+b7b1db01
python39-psutilol 80:5.8.0-4.module+el8.4.0+20109+b7b1db01
python39-psycopg2ol 80:2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-psycopg2-docol 80:2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-psycopg2-testsol 80:2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-pyol 80:1.10.0-1.module+el8.4.0+20109+b7b1db01
python39-pybind11ol 80:2.6.1-2.module+el8.4.0+20109+b7b1db01
python39-pybind11-develol 80:2.6.1-2.module+el8.4.0+20109+b7b1db01
python39-pycparserol 80:2.20-3.module+el8.4.0+20109+b7b1db01
python39-pyparsingol 80:2.4.7-5.module+el8.4.0+20109+b7b1db01
python39-pysocksol 80:1.7.1-4.module+el8.4.0+20109+b7b1db01
python39-pytestol 80:6.0.2-2.module+el8.4.0+20109+b7b1db01
python39-pyyamlol 80:5.4.1-1.module+el8.5.0+20364+c7fe1181
python39-requestsol 80:2.25.0-2.module+el8.4.0+20109+b7b1db01
python39-rpm-macrosol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-scipyol 80:1.5.4-3.module+el8.4.0+20109+b7b1db01
python39-setuptoolsol 80:50.3.2-4.module+el8.5.0+20364+c7fe1181
python39-setuptools-wheelol 80:50.3.2-4.module+el8.5.0+20364+c7fe1181
python39-sixol 80:1.15.0-3.module+el8.4.0+20109+b7b1db01
python39-testol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-tkinterol 80:3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-tomlol 80:0.10.1-5.module+el8.4.0+20109+b7b1db01
python39-urllib3ol 80:1.25.10-4.module+el8.5.0+20364+c7fe1181
python39-wcwidthol 80:0.2.5-3.module+el8.4.0+20109+b7b1db01
python39-wheelol 81:0.35.1-4.module+el8.5.0+20364+c7fe1181
python39-wheel-wheelol 81:0.35.1-4.module+el8.5.0+20364+c7fe1181

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-3737 Python 3.8 and 2 others: Loop with Unreachable Exit Condition ('Infinite Loop'), CWE-400 - Uncontrolled Resource Consumption9.1 0.1317 None reported
High CVE-2021-29921 Python 3.8: In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an…9.8 0.0676 None reported
High CVE-2021-3733 Python 3.7 and 5 others: Uncontrolled Resource Consumption9.1 0.0480 None reported
High CVE-2021-28957 python39-rpm-macros: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...9.1 0.0404 None reported
High CVE-2021-33503 python39-wcwidth: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...9.1 0.0327 None reported
High CVE-2021-3426 Python 3.7 and 3 others: There's a flaw in Python 3's pydoc.9.1 0.0186 None reported
High CVE-2021-3572 python39-urllib3: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...9.1 0.0183 None reported
Showing 1 to 7 of 7 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.