Red Hat Security Advisory

RHSA-2021:4201

babel security and bug fix update

Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) babel-2.5.1-7.el8, python3-babel-2.5.1-7.el8

Fixes 1 record

TI-2021-18973 CVE-2021-42771 · GHSA-h4m5-qpfp-3mpv

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files…

LOW 35

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0077 Published 2021-10-20 Partial fix · 2.9.1 CWE-22