Red Hat Security AdvisoryRHSA-2021:3366
python3 security update
Released 2021-08-31 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v. 8.2) platform-python-3.6.8-24.el8_2, platform-python-debug-3.6.8-24.el8_2, platform-python-devel-3.6.8-24.el8_2 +3
- Red Hat Enterprise Linux BaseOS EUS (v. 8.2) platform-python-3.6.8-24.el8_2, python3-3.6.8-24.el8_2, python3-libs-3.6.8-24.el8_2 +1
Fixes 1 record
Priority MEDIUM 47
http.client in Python 3.x before 3.5.10, 3.6.x before 3.6.12, 3.7.x before 3.7.9, and 3.8.x before 3.8.5 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF cont…
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.06358 · Published 2020-09-27 · Partial fix CWE-74
