Red Hat Security Advisory

RHSA-2022:1764

python38:3.8 and python38-devel:3.8 security update

Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) Cython-0.29.14-4.module+el8.4.0+8888+89bc7e79.src::python38:3.8, PyYAML-5.4.1-1.module+el8.5.0+10721+14d8e0d5.src::python38:3.8, babel-2.7.0-11.module+el8.5.0+11015+9c1c7c42.src::python38:3.8 +47
Red Hat Enterprise Linux CRB (v. 8) pytest-4.6.6-3.module+el8.4.0+8888+89bc7e79.src::python38-devel:3.8, python-atomicwrites-1.3.0-8.module+el8.4.0+8888+89bc7e79.src::python38-devel:3.8, python-attrs-19.3.0-3.module+el8.4.0+8888+89bc7e79.src::python38-devel:3.8 +15

TI-2021-02670 CVE-2021-3737 · GHSA-hr7v-m862-8hh8

MEDIUM 53

A flaw was found in python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.13166 Published 2022-03-04 Partial fix CWE-835

TI-2022-00316 CVE-2022-0391 · GHSA-75jm-2xrg-5wpf

MEDIUM 50

A flaw was found in Python, specifically within the urllib.parse module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08543 Published 2022-02-09 Partial fix CWE-74

TI-2021-02666 CVE-2021-3733 · GHSA-wj55-vqcq-gxcp

MEDIUM 43

There's a flaw in urllib's AbstractBasicAuthHandler class.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04799 Published 2022-03-07 Partial fix CWE-400

TI-2021-19624 CVE-2021-43818 · GHSA-55x5-fj6c-h6m8

MEDIUM 41

lxml is a library for processing XML and HTML in the Python language.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.02641 Published 2021-12-13 Partial fix · 4.6.5 CWE-74