Linux · Red Hat · Security advisory · November 9, 2021

RHSA-2021:4151: Security update for 62 packages

RHSA-2021:4151, released November 9, 2021, fixes 8 CVEs across 62 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
8
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.4074
98th percentile

Priority of the 8 CVEs

Patch now 0 Urgent 0 High 8 Routine 0

Fixed package versions

ProductReleaseFixed in
babelRHEL 80:2.5.1-10.module+el8.5.0+11014+88fc0d0b
python-nose-docsRHEL 80:1.3.7-31.module+el8.5.0+12203+77770ab7
python-psycopg2-docRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python-sqlalchemy-docRHEL 80:1.3.2-2.module+el8.3.0+6647+8d010749
python2RHEL 80:2.7.18-7.module+el8.5.0+12203+77770ab7
python2-CythonRHEL 80:0.28.1-7.module+el8.1.0+3111+de3f2d8e
python2-PyMySQLRHEL 80:0.8.0-10.module+el8.1.0+3111+de3f2d8e
python2-attrsRHEL 80:17.4.0-10.module+el8.1.0+3111+de3f2d8e
python2-babelRHEL 80:2.5.1-10.module+el8.5.0+11014+88fc0d0b
python2-backportsRHEL 80:1.0-16.module+el8.4.0+9193+f3daf6ef
python2-backports-ssl_match_hostnameRHEL 80:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef
python2-bsonRHEL 80:3.7.0-1.module+el8.5.0+10264+e5753a40
python2-chardetRHEL 80:3.0.4-10.module+el8.1.0+3111+de3f2d8e
python2-coverageRHEL 80:4.5.1-4.module+el8.1.0+3111+de3f2d8e
python2-debugRHEL 80:2.7.18-7.module+el8.5.0+12203+77770ab7
python2-develRHEL 80:2.7.18-7.module+el8.5.0+12203+77770ab7
python2-dnsRHEL 80:1.15.0-10.module+el8.1.0+3111+de3f2d8e
python2-docsRHEL 80:2.7.16-2.module+el8.1.0+3111+de3f2d8e
python2-docs-infoRHEL 80:2.7.16-2.module+el8.1.0+3111+de3f2d8e
python2-docutilsRHEL 80:0.14-12.module+el8.1.0+3111+de3f2d8e
python2-funcsigsRHEL 80:1.0.2-13.module+el8.1.0+3111+de3f2d8e
python2-idnaRHEL 80:2.5-7.module+el8.1.0+3111+de3f2d8e
python2-ipaddressRHEL 80:1.0.18-6.module+el8.1.0+3111+de3f2d8e
python2-jinja2RHEL 80:2.10-9.module+el8.5.0+10541+706bb066
python2-libsRHEL 80:2.7.18-7.module+el8.5.0+12203+77770ab7
python2-lxmlRHEL 80:4.2.3-5.module+el8.5.0+10534+22332931
python2-markupsafeRHEL 80:0.23-19.module+el8.1.0+3111+de3f2d8e
python2-mockRHEL 80:2.0.0-13.module+el8.1.0+3111+de3f2d8e
python2-noseRHEL 80:1.3.7-31.module+el8.5.0+12203+77770ab7
python2-numpyRHEL 81:1.14.2-16.module+el8.4.0+9406+221a4565
python2-numpy-docRHEL 81:1.14.2-16.module+el8.4.0+9406+221a4565
python2-numpy-f2pyRHEL 81:1.14.2-16.module+el8.4.0+9406+221a4565
python2-pipRHEL 80:9.0.3-18.module+el8.3.0+7707+eb4bba01
python2-pip-wheelRHEL 80:9.0.3-18.module+el8.3.0+7707+eb4bba01
python2-pluggyRHEL 80:0.6.0-8.module+el8.1.0+3111+de3f2d8e
python2-psycopg2RHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-debugRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-psycopg2-testsRHEL 80:2.7.5-7.module+el8.1.0+3111+de3f2d8e
python2-pyRHEL 80:1.5.3-6.module+el8.1.0+3111+de3f2d8e
python2-pygmentsRHEL 80:2.2.0-22.module+el8.5.0+10788+a4cea9e0
python2-pymongoRHEL 80:3.7.0-1.module+el8.5.0+10264+e5753a40
python2-pymongo-gridfsRHEL 80:3.7.0-1.module+el8.5.0+10264+e5753a40
python2-pysocksRHEL 80:1.6.8-6.module+el8.1.0+3111+de3f2d8e
python2-pytestRHEL 80:3.4.2-13.module+el8.1.0+3111+de3f2d8e
python2-pytest-mockRHEL 80:1.9.0-4.module+el8.1.0+3111+de3f2d8e
python2-pytzRHEL 80:2017.2-12.module+el8.1.0+3111+de3f2d8e
python2-pyyamlRHEL 80:3.12-16.module+el8.1.0+3111+de3f2d8e
python2-requestsRHEL 80:2.20.0-3.module+el8.2.0+4577+feefd9b8
python2-rpm-macrosRHEL 80:3-38.module+el8.1.0+3111+de3f2d8e
python2-scipyRHEL 80:1.0.0-21.module+el8.5.0+10858+05337455
python2-setuptoolsRHEL 80:39.0.1-13.module+el8.4.0+9442+27d0e81c
python2-setuptools-wheelRHEL 80:39.0.1-13.module+el8.4.0+9442+27d0e81c
python2-setuptools_scmRHEL 80:1.15.7-6.module+el8.1.0+3111+de3f2d8e
python2-sixRHEL 80:1.11.0-6.module+el8.4.0+9287+299307c7
python2-sqlalchemyRHEL 80:1.3.2-2.module+el8.3.0+6647+8d010749
python2-testRHEL 80:2.7.18-7.module+el8.5.0+12203+77770ab7
python2-tkinterRHEL 80:2.7.18-7.module+el8.5.0+12203+77770ab7
python2-toolsRHEL 80:2.7.18-7.module+el8.5.0+12203+77770ab7
python2-urllib3RHEL 80:1.24.2-3.module+el8.4.0+9193+f3daf6ef
python2-virtualenvRHEL 80:15.1.0-21.module+el8.5.0+12203+77770ab7
python2-wheelRHEL 81:0.31.1-3.module+el8.5.0+12203+77770ab7
python2-wheel-wheelRHEL 81:0.31.1-3.module+el8.5.0+12203+77770ab7

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2021-23336 Web Cache Poisoning9.1 0.4074 None reported
High CVE-2020-27619 Python 3.7 and 3 others: In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content…9.8 0.0833 None reported
High CVE-2021-28957 python39-rpm-macros: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...9.1 0.0404 None reported
High CVE-2021-27291 python3-pygments: In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programminglanguages rely heavily on regular expressions7.8 0.0391 None reported
High CVE-2020-28493 babel: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...9.1 0.0359 None reported
High CVE-2021-20270 resource-agents: The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts7.8 0.0276 None reported
High CVE-2021-42771 babel: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...9.1 0.0077 None reported
High CVE-2021-20095 python2-coverage: Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, excepti...9.1 n/a None reported
Showing 1 to 8 of 8 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.