Red Hat Security AdvisoryRHSA-2021:0881
python security update
Released 2021-03-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) python-2.7.5-84.el7_6, python-devel-2.7.5-84.el7_6, python-libs-2.7.5-84.el7_6
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) python-debug-2.7.5-84.el7_6, python-test-2.7.5-84.el7_6, python-tools-2.7.5-84.el7_6 +1
- Red Hat Enterprise Linux Server EUS (v. 7.6) python-2.7.5-84.el7_6, python-devel-2.7.5-84.el7_6, python-libs-2.7.5-84.el7_6 +1
- Red Hat Enterprise Linux Server Optional EUS (v. 7.6) python-debug-2.7.5-84.el7_6, python-test-2.7.5-84.el7_6, python-tools-2.7.5-84.el7_6 +1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) python-2.7.5-84.el7_6, python-devel-2.7.5-84.el7_6, python-libs-2.7.5-84.el7_6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) python-debug-2.7.5-84.el7_6, python-test-2.7.5-84.el7_6, python-tools-2.7.5-84.el7_6 +1
Fixes 1 record
Priority LOW 38
In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02956 · Published 2020-07-13 · Partial fix CWE-835
