Red Hat Security Advisory

RHSA-2022:1821

python27:2.7 security update

Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) Cython-0.28.1-7.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, PyYAML-3.12-16.module+el8.1.0+3111+de3f2d8e.src::python27:2.7, babel-2.5.1-10.module+el8.5.0+11014+88fc0d0b.noarch::python27:2.7 +47

TI-2021-02670 CVE-2021-3737 · GHSA-hr7v-m862-8hh8

MEDIUM 53

A flaw was found in python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.13166 Published 2022-03-04 Partial fix CWE-835

TI-2022-00316 CVE-2022-0391 · GHSA-75jm-2xrg-5wpf

MEDIUM 50

A flaw was found in Python, specifically within the urllib.parse module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08543 Published 2022-02-09 Partial fix CWE-74

TI-2021-02666 CVE-2021-3733 · GHSA-wj55-vqcq-gxcp

MEDIUM 43

There's a flaw in urllib's AbstractBasicAuthHandler class.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04799 Published 2022-03-07 Partial fix CWE-400

TI-2021-19624 CVE-2021-43818 · GHSA-55x5-fj6c-h6m8

MEDIUM 41

lxml is a library for processing XML and HTML in the Python language.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.02641 Published 2021-12-13 Partial fix · 4.6.5 CWE-74

TI-2021-03056 CVE-2021-4189 · GHSA-67xf-xphq-9mcc

LOW 36

A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03409 Published 2022-08-24 Partial fix CWE-252