Red Hat Security AdvisoryRHSA-2022:6766
rh-python38-python security update
Released 2022-10-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Software Collections for RHEL Workstation(v. 7) rh-python38-python-3.8.14-1.el7, rh-python38-python-debug-3.8.14-1.el7, rh-python38-python-devel-3.8.14-1.el7 +6
- Red Hat Software Collections for RHEL(v. 7) rh-python38-python-3.8.14-1.el7, rh-python38-python-debug-3.8.14-1.el7, rh-python38-python-devel-3.8.14-1.el7 +6
Fixes 3 records
Priority MEDIUM 41
In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0278 · Published 2022-04-13 · Partial fix CWE-77
Priority MEDIUM 40
A flaw was found in python.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.04538 · Published 2022-09-09 · Partial fix CWE-704
Priority LOW 37
Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure.
CVSS 3.1HIGH 7.4· Network · No auth · User interaction · EPSS 0.02683 · Published 2022-08-23 · Partial fix CWE-601
