Red Hat Security AdvisoryRHSA-2021:1879
python38:3.8 security update
Released 2021-05-18 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) Cython-0.29.14-4.module+el8.4.0+8888+89bc7e79.src::python38:3.8, PyYAML-5.3.1-1.module+el8.4.0+8888+89bc7e79.src::python38:3.8, babel-2.7.0-10.module+el8.4.0+8888+89bc7e79.src::python38:3.8 +47
Fixes 3 records
Priority HIGH 82
Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demons…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.24002 · Published 2021-01-19 · Partial fix CWE-120
Priority MEDIUM 47
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF cont…
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.06358 · Published 2020-09-27 · Partial fix CWE-74
Priority LOW 34
A XSS vulnerability was discovered in python-lxml's clean module.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03982 · Published 2020-12-03 · Partial fix · 4.6.2 CWE-79
