Red Hat Security Advisory

RHSA-2022:1663

python27-python and python27-python-pip security update

Released 2022-05-02 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Software Collections for RHEL Workstation(v. 7) python27-python-2.7.18-4.el7, python27-python-debug-2.7.18-4.el7, python27-python-devel-2.7.18-4.el7 +4
Red Hat Software Collections for RHEL(v. 7) python27-python-2.7.18-4.el7, python27-python-debug-2.7.18-4.el7, python27-python-devel-2.7.18-4.el7 +4

TI-2021-02670 CVE-2021-3737 · GHSA-hr7v-m862-8hh8

MEDIUM 53

A flaw was found in python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.13166 Published 2022-03-04 Partial fix CWE-835

TI-2022-00316 CVE-2022-0391 · GHSA-75jm-2xrg-5wpf

MEDIUM 50

A flaw was found in Python, specifically within the urllib.parse module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08543 Published 2022-02-09 Partial fix CWE-74

TI-2021-02666 CVE-2021-3733 · GHSA-wj55-vqcq-gxcp

MEDIUM 43

There's a flaw in urllib's AbstractBasicAuthHandler class.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04799 Published 2022-03-07 Partial fix CWE-400

TI-2021-03056 CVE-2021-4189 · GHSA-67xf-xphq-9mcc

LOW 36

A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03409 Published 2022-08-24 Partial fix CWE-252