(RHSA-2022:1821) Moderate: python27:2.7 security update

2022-05-1008:02:50

access.redhat.com

0.016 Low

EPSS

Percentile

87.3%

JSON

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.

Security Fix(es):

python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733)
python: ftplib should not use the host from the PASV response (CVE-2021-4189)
python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)
python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391)
python: urllib: HTTP client possible infinite loop on a 100 Continue response (CVE-2021-3737)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.6 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64python-psycopg2-debugsource< 2.7.5-7.module+el8.1.0+3111+de3f2d8epython-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm
RedHatanyaarch64python2-sqlalchemy< 1.3.2-2.module+el8.3.0+6647+8d010749python2-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.aarch64.rpm
RedHatanyx86_64python2-markupsafe< 0.23-19.module+el8.1.0+3111+de3f2d8epython2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.x86_64.rpm
RedHatanyppc64lepython-coverage-debugsource< 4.5.1-4.module+el8.1.0+3111+de3f2d8epython-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm
RedHatanyaarch64python2-scipy< 1.0.0-21.module+el8.5.0+10858+05337455python2-scipy-1.0.0-21.module+el8.5.0+10858+05337455.aarch64.rpm
RedHatanynoarchpython2-mock< 2.0.0-13.module+el8.1.0+3111+de3f2d8epython2-mock-2.0.0-13.module+el8.1.0+3111+de3f2d8e.noarch.rpm
RedHatanyppc64lepython-psycopg2-debugsource< 2.7.5-7.module+el8.1.0+3111+de3f2d8epython-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm
RedHatanynoarchpython2-attrs< 17.4.0-10.module+el8.1.0+3111+de3f2d8epython2-attrs-17.4.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm
RedHatanyx86_64python2-psycopg2-tests< 2.7.5-7.module+el8.1.0+3111+de3f2d8epython2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm
RedHatanys390xpython2-cython-debuginfo< 0.28.1-7.module+el8.1.0+3111+de3f2d8epython2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	python-psycopg2-debugsource	< 2.7.5-7.module+el8.1.0+3111+de3f2d8e	python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.aarch64.rpm
RedHat	any	aarch64	python2-sqlalchemy	< 1.3.2-2.module+el8.3.0+6647+8d010749	python2-sqlalchemy-1.3.2-2.module+el8.3.0+6647+8d010749.aarch64.rpm
RedHat	any	x86_64	python2-markupsafe	< 0.23-19.module+el8.1.0+3111+de3f2d8e	python2-markupsafe-0.23-19.module+el8.1.0+3111+de3f2d8e.x86_64.rpm
RedHat	any	ppc64le	python-coverage-debugsource	< 4.5.1-4.module+el8.1.0+3111+de3f2d8e	python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm
RedHat	any	aarch64	python2-scipy	< 1.0.0-21.module+el8.5.0+10858+05337455	python2-scipy-1.0.0-21.module+el8.5.0+10858+05337455.aarch64.rpm
RedHat	any	noarch	python2-mock	< 2.0.0-13.module+el8.1.0+3111+de3f2d8e	python2-mock-2.0.0-13.module+el8.1.0+3111+de3f2d8e.noarch.rpm
RedHat	any	ppc64le	python-psycopg2-debugsource	< 2.7.5-7.module+el8.1.0+3111+de3f2d8e	python-psycopg2-debugsource-2.7.5-7.module+el8.1.0+3111+de3f2d8e.ppc64le.rpm
RedHat	any	noarch	python2-attrs	< 17.4.0-10.module+el8.1.0+3111+de3f2d8e	python2-attrs-17.4.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm
RedHat	any	x86_64	python2-psycopg2-tests	< 2.7.5-7.module+el8.1.0+3111+de3f2d8e	python2-psycopg2-tests-2.7.5-7.module+el8.1.0+3111+de3f2d8e.x86_64.rpm
RedHat	any	s390x	python2-cython-debuginfo	< 0.28.1-7.module+el8.1.0+3111+de3f2d8e	python2-Cython-debuginfo-0.28.1-7.module+el8.1.0+3111+de3f2d8e.s390x.rpm