Lucene search
RedHatRHSA-2021:4201HistoryNov 09, 2021 - 8:37 a.m.
(RHSA-2021:4201) Moderate: babel security and bug fix update
2021-11-0908:37:19
access.redhat.com
28
0.002 Low
EPSS
Percentile
64.5%
Babel provides tools to build and work with gettext message catalogs, and a Python interface to the CLDR (Common Locale Data Repository), providing access to various locale display names, localized number and date formatting, etc.
Security Fix(es):
- python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (CVE-2021-20095, CVE-2021-42771)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | noarch | python3-babel | < 2.5.1-7.el8 | python3-babel-2.5.1-7.el8.noarch.rpm |
Related
debian
debian
[SECURITY] [DLA 2790-1] python-babel security update
2021-10-21 09:56:09
[SECURITY] [DSA 5018-1] python-babel security update
2021-12-09 18:56:41
rocky
rocky
babel security and bug fix update
2021-11-09 08:37:19
python27:2.7 security update
2021-11-09 08:24:39
python38:3.8 and python38-devel:3.8 security update
2021-11-09 12:47:54
nessus
nessus
RHEL 7 : python-babel (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 6 : python-babel (Unpatched Vulnerability)
2024-05-11 00:00:00
EulerOS Virtualization 2.10.0 : babel (EulerOS-SA-2022-1393)
2022-04-18 00:00:00
oraclelinux
oraclelinux
babel security and bug fix update
2021-11-16 00:00:00
python27:2.7 security update
2021-11-16 00:00:00
python38:3.8 and python38-devel:3.8 security update
2021-11-16 00:00:00
osv
osv
Moderate: babel security and bug fix update
2021-11-09 08:37:19
Moderate: babel security and bug fix update
2021-11-09 08:37:19
PYSEC-2021-421
2021-10-20 21:15:00
openvas
openvas
Debian: Security Advisory (DLA-2790-1)
2021-10-22 00:00:00
Debian: Security Advisory (DSA-5018-1)
2021-12-10 00:00:00
Huawei EulerOS: Security Advisory for babel (EulerOS-SA-2022-1367)
2022-04-13 00:00:00
ubuntucve
ubuntucve
CVE-2021-42771
2021-10-20 00:00:00
almalinux
almalinux
Moderate: babel security and bug fix update
2021-11-09 08:37:19
Moderate: python27:2.7 security update
2021-11-09 08:24:39
Moderate: python38:3.8 and python38-devel:3.8 security update
2021-11-09 12:47:54
amazon
amazon
Medium: python-babel
2023-03-30 22:50:00
Medium: babel
2023-03-30 18:56:00
photon
photon
Important Photon OS Security Update - PHSA-2021-0123
2021-11-03 00:00:00
Important Photon OS Security Update - PHSA-2021-4.0-0123
2021-11-04 00:00:00
github
github
Directory Traversal in Babel
2021-10-21 17:49:59
cbl_mariner
cbl_mariner
CVE-2021-42771 affecting package babel for versions less than 2.9.1-1
2022-04-09 06:51:57
CVE-2021-42771 affecting package babel 2.6.0-9
2021-11-06 00:29:51
cvelist
cvelist
CVE-2021-42771
2021-10-20 20:05:35
CVE-2021-20095
2021-04-29 14:06:56
nvd
nvd
CVE-2021-42771
2021-10-20 21:15:07
CVE-2021-20095
2021-04-29 15:15:10
prion
prion
Directory traversal
2021-10-20 21:15:00
cve
cve
CVE-2021-42771
2021-10-20 21:15:07
CVE-2021-20095
2021-04-29 15:15:10
veracode
veracode
Directory Traversal
2021-10-21 04:31:28
Directory Traversal
2021-04-30 04:58:55
suse
suse
Security update for python-Babel (important)
2021-12-10 00:00:00
Security update for python-Babel (important)
2021-12-06 00:00:00
redhatcve
redhatcve
CVE-2021-42771
2021-10-22 17:14:16
CVE-2021-20095
2021-04-30 17:49:20
ibm
ibm
Security Bulletin: CVE-2021-42771
2022-02-17 12:07:59
fedora
fedora
[SECURITY] Fedora 32 Update: babel-2.8.0-4.fc32
2021-05-09 00:51:37
[SECURITY] Fedora 33 Update: babel-2.8.1-2.fc33
2021-05-09 01:17:01
mageia
mageia
Updated python-babel packages fix a security vulnerability
2021-06-18 22:24:28
gentoo
gentoo
Babel: Remote code execution
2022-08-04 00:00:00
ubuntu
ubuntu
Babel vulnerability
2021-05-19 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2244
2023-10-10 09:49:57
archlinux
archlinux
[ASA-202105-15] python-babel: arbitrary code execution
2021-05-19 00:00:00
alpinelinux
alpinelinux
CVE-2021-42771
2021-10-20 21:15:07
debiancve
debiancve
CVE-2021-42771
2021-10-20 21:15:07
redhat
redhat
(RHSA-2021:4151) Moderate: python27:2.7 security update
2021-11-09 08:24:39
(RHSA-2021:3252) Moderate: python27 security update
2021-08-24 07:29:51