Action not permitted
Modal body text goes here.
cve-2020-25659
Vulnerability from cvelistv5
Published
2021-01-11 15:37
Modified
2024-08-04 15:40
Severity ?
EPSS score ?
Summary
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
References
▼ | URL | Tags | |
---|---|---|---|
secalert@redhat.com | https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b | Patch, Third Party Advisory | |
secalert@redhat.com | https://www.oracle.com/security-alerts/cpuapr2022.html | Patch, Third Party Advisory | |
secalert@redhat.com | https://www.oracle.com/security-alerts/cpujul2022.html | Patch, Third Party Advisory |
Impacted products
▼ | Vendor | Product |
---|---|---|
n/a | python-cryptography |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T15:40:36.578Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "python-cryptography", "vendor": "n/a", "versions": [ { "status": "affected", "version": "python-cryptography 3.2" } ] } ], "descriptions": [ { "lang": "en", "value": "python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext." } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-385", "description": "CWE-385", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2022-07-25T16:15:44", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2020-25659", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "python-cryptography", "version": { "version_data": [ { "version_value": "python-cryptography 3.2" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-385" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b", "refsource": "MISC", "url": "https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b" }, { "name": "https://www.oracle.com/security-alerts/cpuapr2022.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "name": "https://www.oracle.com/security-alerts/cpujul2022.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ] } } } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2020-25659", "datePublished": "2021-01-11T15:37:29", "dateReserved": "2020-09-16T00:00:00", "dateUpdated": "2024-08-04T15:40:36.578Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2020-25659\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2021-01-11T16:15:15.040\",\"lastModified\":\"2024-09-09T13:52:55.847\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.\"},{\"lang\":\"es\",\"value\":\"python-cryptography versi\u00f3n 3.2, es vulnerable a ataques de sincronizaci\u00f3n de Bleichenbacher en la API de descifrado RSA, por medio del procesamiento cronometrado de texto cifrado PKCS#1 v1.5 v\u00e1lido\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:N/A:N\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\",\"baseScore\":4.3},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]},{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-385\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cryptography.io:cryptography:3.2:*:*:*:*:python:*:*\",\"matchCriteriaId\":\"99AB97C2-2BF6-4B15-BE42-63E42B35CBB5\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2A5B24D-BDF2-423C-98EA-A40778C01A05\"}]}]}],\"references\":[{\"url\":\"https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2022.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}" } }
pysec-2021-62
Vulnerability from pysec
Published
2021-01-11 16:15
Modified
2021-01-19 21:48
Details
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
Aliases
{ "affected": [ { "package": { "ecosystem": "PyPI", "name": "cryptography", "purl": "pkg:pypi/cryptography" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "3.2.1" } ], "type": "ECOSYSTEM" } ], "versions": [ "0.1", "0.2", "0.2.1", "0.2.2", "0.3", "0.4", "0.5", "0.5.1", "0.5.2", "0.5.3", "0.5.4", "0.6", "0.6.1", "0.7", "0.7.1", "0.7.2", "0.8", "0.8.1", "0.8.2", "0.9", "0.9.1", "0.9.2", "0.9.3", "1.0", "1.0.1", "1.0.2", "1.1", "1.1.1", "1.1.2", "1.2", "1.2.1", "1.2.2", "1.2.3", "1.3", "1.3.1", "1.3.2", "1.3.3", "1.3.4", "1.4", "1.5", "1.5.1", "1.5.2", "1.5.3", "1.6", "1.7", "1.7.1", "1.7.2", "1.8", "1.8.1", "1.8.2", "1.9", "2.0", "2.0.1", "2.0.2", "2.0.3", "2.1", "2.1.1", "2.1.2", "2.1.3", "2.1.4", "2.2", "2.2.1", "2.2.2", "2.3", "2.3.1", "2.4", "2.4.1", "2.4.2", "2.5", "2.6", "2.6.1", "2.7", "2.8", "2.9", "2.9.1", "2.9.2", "3.0", "3.1", "3.1.1", "3.2" ] } ], "aliases": [ "CVE-2020-25659", "GHSA-hggm-jpg3-v476" ], "details": "python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.", "id": "PYSEC-2021-62", "modified": "2021-01-19T21:48:00Z", "published": "2021-01-11T16:15:00Z", "references": [ { "type": "WEB", "url": "https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b" }, { "type": "ADVISORY", "url": "https://github.com/advisories/GHSA-hggm-jpg3-v476" } ] }
gsd-2020-25659
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2020-25659", "description": "python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.", "id": "GSD-2020-25659", "references": [ "https://www.suse.com/security/cve/CVE-2020-25659.html", "https://access.redhat.com/errata/RHSA-2021:3254", "https://access.redhat.com/errata/RHSA-2021:2239", "https://access.redhat.com/errata/RHSA-2021:1608", "https://ubuntu.com/security/CVE-2020-25659", "https://advisories.mageia.org/CVE-2020-25659.html", "https://linux.oracle.com/cve/CVE-2020-25659.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2020-25659" ], "details": "python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.", "id": "GSD-2020-25659", "modified": "2023-12-13T01:21:57.277649Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2020-25659", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "python-cryptography", "version": { "version_data": [ { "version_value": "python-cryptography 3.2" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-385" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b", "refsource": "MISC", "url": "https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b" }, { "name": "https://www.oracle.com/security-alerts/cpuapr2022.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "name": "https://www.oracle.com/security-alerts/cpujul2022.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ] } }, "gitlab.com": { "advisories": [ { "affected_range": "\u003c3.2", "affected_versions": "All versions before 3.2", "cvss_v2": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "cvss_v3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe_ids": [ "CWE-1035", "CWE-385", "CWE-937" ], "date": "2020-10-27", "description": "python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.", "fixed_versions": [ "3.2" ], "identifier": "CVE-2020-25659", "identifiers": [ "GHSA-hggm-jpg3-v476", "CVE-2020-25659" ], "not_impacted": "All versions starting from 3.2", "package_slug": "pypi/cryptography", "pubdate": "2020-10-27", "solution": "Upgrade to version 3.2 or above.", "title": "Covert Timing Channel", "urls": [ "https://github.com/pyca/cryptography/security/advisories/GHSA-hggm-jpg3-v476", "https://github.com/pyca/cryptography/commit/58494b41d6ecb0f56b7c5f05d5f5e3ca0320d494", "https://pypi.org/project/cryptography/", "https://github.com/advisories/GHSA-hggm-jpg3-v476" ], "uuid": "cb73eaa5-b2ea-418b-a24a-7c538d55282d" } ] }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:python-cryptography_project:python-cryptography:3.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2020-25659" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "NVD-CWE-Other" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b", "refsource": "MISC", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://github.com/pyca/cryptography/pull/5507/commits/ce1bef6f1ee06ac497ca0c837fbd1c7ef6c2472b" }, { "name": "https://www.oracle.com/security-alerts/cpuapr2022.html", "refsource": "MISC", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "name": "N/A", "refsource": "N/A", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "exploitabilityScore": 2.2, "impactScore": 3.6 } }, "lastModifiedDate": "2023-02-09T02:25Z", "publishedDate": "2021-01-11T16:15Z" } } }
ghsa-hggm-jpg3-v476
Vulnerability from github
Published
2020-10-27 20:33
Modified
2024-09-13 18:16
Severity ?
5.9 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
8.2 (High) - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
8.2 (High) - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Summary
RSA decryption vulnerable to Bleichenbacher timing vulnerability
Details
RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios. This is fixed in cryptography 3.2.
{ "affected": [ { "package": { "ecosystem": "PyPI", "name": "cryptography" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "3.2" } ], "type": "ECOSYSTEM" } ] } ], "aliases": [ "CVE-2020-25659" ], "database_specific": { "cwe_ids": [ "CWE-385" ], "github_reviewed": true, "github_reviewed_at": "2020-10-27T20:32:44Z", "nvd_published_at": "2021-01-11T16:15:00Z", "severity": "MODERATE" }, "details": "RSA decryption was vulnerable to Bleichenbacher timing vulnerabilities, which would impact people using RSA decryption in online scenarios. This is fixed in cryptography 3.2. ", "id": "GHSA-hggm-jpg3-v476", "modified": "2024-09-13T18:16:06Z", "published": "2020-10-27T20:33:13Z", "references": [ { "type": "WEB", "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-hggm-jpg3-v476" }, { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659" }, { "type": "WEB", "url": "https://github.com/pyca/cryptography/pull/5507" }, { "type": "WEB", "url": "https://github.com/pyca/cryptography/commit/58494b41d6ecb0f56b7c5f05d5f5e3ca0320d494" }, { "type": "ADVISORY", "url": "https://github.com/advisories/GHSA-hggm-jpg3-v476" }, { "type": "PACKAGE", "url": "https://github.com/pyca/cryptography" }, { "type": "WEB", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2021-62.yaml" }, { "type": "WEB", "url": "https://pypi.org/project/cryptography" }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "type": "CVSS_V3" }, { "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "type": "CVSS_V4" } ], "summary": "RSA decryption vulnerable to Bleichenbacher timing vulnerability" }
rhsa-2021_3254
Vulnerability from csaf_redhat
Published
2021-08-24 12:50
Modified
2024-11-05 23:52
Summary
Red Hat Security Advisory: rh-python38 security, bug fix, and enhancement update
Notes
Topic
An update for rh-python38-babel, rh-python38-python, rh-python38-python-cryptography, rh-python38-python-jinja2, rh-python38-python-lxml, rh-python38-python-pip, and rh-python38-python-urllib3 is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
The following packages have been upgraded to a later upstream version: rh-python38-python (3.8.11). (BZ#1969523)
Security Fix(es):
* python-cryptography: Bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)
* python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)
* python-lxml: mXSS due to the use of improper parser (CVE-2020-27783)
* python-jinja2: ReDoS vulnerability due to the sub-pattern (CVE-2020-28493)
* python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow (CVE-2020-36242)
* python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c (CVE-2021-3177)
* python: Information disclosure via pydoc (CVE-2021-3426)
* python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (CVE-2021-20095)
* python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters (CVE-2021-23336)
* python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)
* python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)
* python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)
* python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional information
* Changes in the default separator for the Python urllib parsing functions
To mitigate the Web Cache Poisoning CVE-2021-23336 in the Python urllib library, the default separator for the urllib.parse.parse_qsl and urllib.parse.parse_qs functions is being changed from both ampersand (&) and semicolon (;) to only an ampersand.
The change of the default separator is potentially backwards incompatible, therefore Red Hat provides a way to configure the behavior in Python packages where the default separator has been changed. In addition, the affected urllib parsing functions issue a warning if they detect that a customer’s application has been affected by the change.
For more information, see the Knowledgebase article "Mitigation of Web Cache Poisoning in the Python urllib library (CVE-2021-23336)" linked from the References section.
* The Python "ipaddress" module no longer allows leading zeros in IPv4 addresses
To mitigate CVE-2021-29921, the Python "ipaddress" module now rejects IPv4 addresses with leading zeros with an "AddressValueError: Leading zeros are not permitted" error.
Customers who rely on the previous behavior can pre-process their IPv4 address inputs to strip the leading zeros off. For details, see the Red Hat Software Collections 3.7 Release Notes.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for rh-python38-babel, rh-python38-python, rh-python38-python-cryptography, rh-python38-python-jinja2, rh-python38-python-lxml, rh-python38-python-pip, and rh-python38-python-urllib3 is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nThe following packages have been upgraded to a later upstream version: rh-python38-python (3.8.11). (BZ#1969523)\n\nSecurity Fix(es):\n\n* python-cryptography: Bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)\n\n* python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)\n\n* python-lxml: mXSS due to the use of improper parser (CVE-2020-27783)\n\n* python-jinja2: ReDoS vulnerability due to the sub-pattern (CVE-2020-28493)\n\n* python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow (CVE-2020-36242)\n\n* python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c (CVE-2021-3177)\n\n* python: Information disclosure via pydoc (CVE-2021-3426)\n\n* python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (CVE-2021-20095)\n\n* python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters (CVE-2021-23336)\n\n* python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)\n\n* python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)\n\n* python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)\n\n* python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional information\n\n* Changes in the default separator for the Python urllib parsing functions\n\nTo mitigate the Web Cache Poisoning CVE-2021-23336 in the Python urllib library, the default separator for the urllib.parse.parse_qsl and urllib.parse.parse_qs functions is being changed from both ampersand (\u0026) and semicolon (;) to only an ampersand.\n\nThe change of the default separator is potentially backwards incompatible, therefore Red Hat provides a way to configure the behavior in Python packages where the default separator has been changed. In addition, the affected urllib parsing functions issue a warning if they detect that a customer\u2019s application has been affected by the change.\n\nFor more information, see the Knowledgebase article \"Mitigation of Web Cache Poisoning in the Python urllib library (CVE-2021-23336)\" linked from the References section.\n\n* The Python \"ipaddress\" module no longer allows leading zeros in IPv4 addresses\n\nTo mitigate CVE-2021-29921, the Python \"ipaddress\" module now rejects IPv4 addresses with leading zeros with an \"AddressValueError: Leading zeros are not permitted\" error.\n\nCustomers who rely on the previous behavior can pre-process their IPv4 address inputs to strip the leading zeros off. For details, see the Red Hat Software Collections 3.7 Release Notes.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:3254", "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/articles/5860431", "url": "https://access.redhat.com/articles/5860431" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html-single/3.7_release_notes/index#sect-RHSCL-Other-notes", "url": "https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html-single/3.7_release_notes/index#sect-RHSCL-Other-notes" }, { "category": "external", "summary": "1889886", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889886" }, { "category": "external", "summary": "1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "1901633", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901633" }, { "category": "external", "summary": "1918168", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1918168" }, { "category": "external", "summary": "1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "external", "summary": "1928707", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1928707" }, { "category": "external", "summary": "1928904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1928904" }, { "category": "external", "summary": "1935913", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1935913" }, { "category": "external", "summary": "1941534", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941534" }, { "category": "external", "summary": "1955615", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1955615" }, { "category": "external", "summary": "1957458", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1957458" }, { "category": "external", "summary": "1962856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1962856" }, { "category": "external", "summary": "1968074", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968074" }, { "category": "external", "summary": "1969523", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1969523" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3254.json" } ], "title": "Red Hat Security Advisory: rh-python38 security, bug fix, and enhancement update", "tracking": { "current_release_date": "2024-11-05T23:52:12+00:00", "generator": { "date": "2024-11-05T23:52:12+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2021:3254", "initial_release_date": "2021-08-24T12:50:36+00:00", "revision_history": [ { "date": "2021-08-24T12:50:36+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-08-24T12:50:36+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T23:52:12+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } } ], "category": "product_family", "name": "Red Hat Software Collections" }, { "branches": [ { "category": "product_version", "name": "rh-python38-babel-0:2.7.0-12.el7.src", "product": { "name": "rh-python38-babel-0:2.7.0-12.el7.src", "product_id": "rh-python38-babel-0:2.7.0-12.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-babel@2.7.0-12.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-pip-0:19.3.1-2.el7.src", "product": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.src", "product_id": "rh-python38-python-pip-0:19.3.1-2.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-pip@19.3.1-2.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "product": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "product_id": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-urllib3@1.25.7-7.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "product": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "product_id": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-jinja2@2.10.3-6.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "product": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "product_id": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml@4.4.1-7.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-0:2.8-5.el7.src", "product": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.src", "product_id": "rh-python38-python-cryptography-0:2.8-5.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography@2.8-5.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-0:3.8.11-2.el7.src", "product": { "name": "rh-python38-python-0:3.8.11-2.el7.src", "product_id": "rh-python38-python-0:3.8.11-2.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python@3.8.11-2.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "product": { "name": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "product_id": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-babel@2.7.0-12.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "product": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "product_id": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-pip@19.3.1-2.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "product": { "name": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "product_id": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-pip-wheel@19.3.1-2.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "product": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "product_id": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-urllib3@1.25.7-7.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "product": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "product_id": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-jinja2@2.10.3-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "product": { "name": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "product_id": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-rpm-macros@3.8.11-2.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "product": { "name": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "product_id": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-srpm-macros@3.8.11-2.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "product": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "product_id": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml@4.4.1-7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "product": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "product_id": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml-debuginfo@4.4.1-7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "product": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "product_id": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography@2.8-5.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "product": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "product_id": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography-debuginfo@2.8-5.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debug@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-devel@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-idle@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-libs@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-test@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-tkinter@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debuginfo@3.8.11-2.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "product": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "product_id": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml@4.4.1-7.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "product": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "product_id": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml-debuginfo@4.4.1-7.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "product": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "product_id": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography@2.8-5.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "product": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "product_id": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography-debuginfo@2.8-5.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debug@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-devel@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-idle@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-libs@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-test@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-tkinter@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debuginfo@3.8.11-2.el7?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "product": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "product_id": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml@4.4.1-7.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "product": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "product_id": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml-debuginfo@4.4.1-7.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "product": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "product_id": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography@2.8-5.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "product": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "product_id": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography-debuginfo@2.8-5.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debug@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-devel@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-idle@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-libs@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-test@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-tkinter@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debuginfo@3.8.11-2.el7?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rh-python38-babel-0:2.7.0-12.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src" }, "product_reference": "rh-python38-babel-0:2.7.0-12.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-babel-0:2.7.0-12.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch" }, "product_reference": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-babel-0:2.7.0-12.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src" }, "product_reference": "rh-python38-babel-0:2.7.0-12.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-babel-0:2.7.0-12.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch" }, "product_reference": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-babel-0:2.7.0-12.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src" }, "product_reference": "rh-python38-babel-0:2.7.0-12.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-babel-0:2.7.0-12.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch" }, "product_reference": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Hubert Kario" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2020-25659", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2020-10-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1889988" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-cryptography, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-25659" }, { "category": "external", "summary": "RHBZ#1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-25659", "url": "https://www.cve.org/CVERecord?id=CVE-2020-25659" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-2" } ], "release_date": "2020-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption" }, { "cve": "CVE-2020-27619", "cwe": { "id": "CWE-95", "name": "Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)" }, "discovery_date": "2020-10-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1889886" } ], "notes": [ { "category": "description", "text": "In Python3\u0027s Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: Unsafe use of eval() on data retrieved via HTTP in the test suite", "title": "Vulnerability summary" }, { "category": "other", "text": "As of Red Hat Quay 3.4 the python runtime will be consumed from RHEL. Currently releases up to 3.3 won\u0027t get fixes for this moderate issue.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-27619" }, { "category": "external", "summary": "RHBZ#1889886", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889886" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-27619", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27619" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-27619", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27619" } ], "release_date": "2020-10-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "In versions of Python shipped with Red Hat Enterprise Linux and Red Hat Software Collections, the flaw can be mitigated by not running the python tests with network resources enabled. By default, the tests are not run with network resources enabled. Ensure that `-u network` or `-uall` are not passed as options to `python -m test`. For more information on how these commands work, see [1].\n\n1. https://docs.python.org/3/library/test.html", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: Unsafe use of eval() on data retrieved via HTTP in the test suite" }, { "cve": "CVE-2020-27783", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2020-11-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1901633" } ], "notes": [ { "category": "description", "text": "A Cross-site Scripting (XSS) vulnerability was found in the python-lxml\u0027s clean module. The module\u0027s parser did not properly imitate browsers, causing different behaviors between the sanitizer and the user\u0027s page. This flaw allows a remote attacker to run arbitrary HTML/JS code. The highest threat from this vulnerability is to confidentiality and integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-lxml: mXSS due to the use of improper parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-27783" }, { "category": "external", "summary": "RHBZ#1901633", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901633" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-27783", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-27783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27783" } ], "release_date": "2020-10-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-lxml: mXSS due to the use of improper parser" }, { "cve": "CVE-2020-28493", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2021-02-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1928707" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-jinja2. The ReDOS vulnerability of the regex is mainly due to the sub-pattern [a-zA-Z0-9._-]+.[a-zA-Z0-9._-]+. This issue can be mitigated by Markdown to format user content instead of the urlize filter, or by implementing request timeouts and limiting process memory.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-jinja2: ReDoS vulnerability in the urlize filter", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw is out of support scope for the following products:\n\n* Red Hat Enterprise Linux 6\n* Red Hat Enterprise Linux 7\n* Red Hat Ceph Storage 2\n\nTo learn more about Red Hat Enterprise Linux support scopes, please see https://access.redhat.com/support/policy/updates/errata/\n\nIn Red Hat OpenStack Platform, because python-jinja2 is not directly customer exposed, the Impact has been moved to Low and no updated will be provided at this time for the RHOSP python-jinja2 package.\n\nRed Hat Quay does not make use of the vulnerable function, so the impact is Low.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-28493" }, { "category": "external", "summary": "RHBZ#1928707", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1928707" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-28493", "url": "https://www.cve.org/CVERecord?id=CVE-2020-28493" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-28493", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28493" } ], "release_date": "2021-02-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "If using the jinja2 library as a developer, this flaw can be mitigated by not using the vulnerable urlize() filter, and instead, using Markdown to format user content.", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-jinja2: ReDoS vulnerability in the urlize filter" }, { "cve": "CVE-2020-36242", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2021-02-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1926226" } ], "notes": [ { "category": "description", "text": "A buffer-overflow flaw was found in the python-cryptography package. In certain sequences of ``update()`` calls when symmetrically encrypting very large payloads (\u003e2GB) could result in an integer overflow, leading to buffer overflows. Note: This fix is a workaround for the OpenSSL CVE-2021-23840 flaw. Source: pyca/cryptography project", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow", "title": "Vulnerability summary" }, { "category": "other", "text": "Triggering this flaw on in versions of python-cryptography as shipped with Red Hat Enterprise Linux 8 BaseOS, Appstream, as well as Red Hat Software Collections, can result in denial of service due to memory consumption or MemoryError exception.\n\nIn Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-36242" }, { "category": "external", "summary": "RHBZ#1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-36242", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36242" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-3-2" } ], "release_date": "2020-12-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow" }, { "cve": "CVE-2021-3177", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "discovery_date": "2021-01-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1918168" } ], "notes": [ { "category": "description", "text": "A flaw was found in python. A stack-based buffer overflow was discovered in the ctypes module provided within Python. Applications that use ctypes without carefully validating the input passed to it may be vulnerable to this flaw, which would allow an attacker to overflow a buffer on the stack and crash the application. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw could have had a higher Impact, however our packages are compiled with FORTIFY_SOURCE, which provides runtime protection to some memory and string functions and prevents this flaw from actually overwriting the buffer and potentially executing code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3177" }, { "category": "external", "summary": "RHBZ#1918168", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1918168" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3177", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3177" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3177", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3177" } ], "release_date": "2021-01-19T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c" }, { "acknowledgments": [ { "names": [ "David Schw\u00f6rer" ], "organization": "Fedora" } ], "cve": "CVE-2021-3426", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2021-01-19T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1935913" } ], "notes": [ { "category": "description", "text": "A flaw was found in Python 3\u0027s pydoc. This flaw allows a local or adjacent attacker who discovers or can convince another local or adjacent user to start a pydoc server to access the server and then use it to disclose sensitive information belonging to the other user that they would not normally have the ability to access. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: Information disclosure via pydoc", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Quay from version 3.4 uses Python from Red Hat Enterprise Linux RPM repositories and therefore may receive an update for this issue in a future release. Earlier versions of Red Hat Quay will not receive a patch for this issue.\n\nPython 2.x.x as shipped in any Red Hat product is not affected. This flaw is out of support scope for python3 as shipped with Red Hat Enterprise Linux 7. For more information about Red Hat Enterprise Linux support scope, please see https://access.redhat.com/support/policy/updates/errata/ .", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3426" }, { "category": "external", "summary": "RHBZ#1935913", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1935913" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3426", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3426" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3426", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3426" } ], "release_date": "2021-03-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: Information disclosure via pydoc" }, { "cve": "CVE-2021-3572", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-05-19T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1962856" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-pip: Incorrect handling of unicode separators in git references", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has been rated as having a security impact of Low. To exploit this flaw, the attacker needs access to the repository to create a specially crafted tag and force a different revision to be installed.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3572" }, { "category": "external", "summary": "RHBZ#1962856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1962856" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3572", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3572" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3572", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3572" } ], "release_date": "2021-04-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "python-pip: Incorrect handling of unicode separators in git references" }, { "cve": "CVE-2021-3733", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2021-08-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1995234" } ], "notes": [ { "category": "description", "text": "There\u0027s a flaw in urllib\u0027s AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: urllib: Regular expression DoS in AbstractBasicAuthHandler", "title": "Vulnerability summary" }, { "category": "other", "text": "Applications that use AbstractBasicAuthHandler, HTTPBasicAuthHandler and ProxyBasicAuthHandler may be affected by this flaw. Other classes may use the vulnerable method http_error_auth_reqed in AbstractBasicAuthHandler as well.\n\nThis flaw is out of support scope for versions of Python shipped in Red Hat Enterprise Linux 7 base OS and Red Hat Enterprise Linux 6. For more information about support life cycles, please see https://access.redhat.com/support/policy/updates/errata/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3733" }, { "category": "external", "summary": "RHBZ#1995234", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995234" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3733", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3733" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3733", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3733" }, { "category": "external", "summary": "https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-14-final", "url": "https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-14-final" }, { "category": "external", "summary": "https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-11-final", "url": "https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-11-final" }, { "category": "external", "summary": "https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-10-final", "url": "https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-10-final" }, { "category": "external", "summary": "https://docs.python.org/3.9/whatsnew/changelog.html#python-3-9-5-final", "url": "https://docs.python.org/3.9/whatsnew/changelog.html#python-3-9-5-final" } ], "release_date": "2021-08-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: urllib: Regular expression DoS in AbstractBasicAuthHandler" }, { "cve": "CVE-2021-4189", "cwe": { "id": "CWE-252", "name": "Unchecked Return Value" }, "discovery_date": "2021-12-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2036020" } ], "notes": [ { "category": "description", "text": "A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: ftplib should not use the host from the PASV response", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-4189" }, { "category": "external", "summary": "RHBZ#2036020", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2036020" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-4189", "url": "https://www.cve.org/CVERecord?id=CVE-2021-4189" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-4189", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4189" }, { "category": "external", "summary": "https://bugs.python.org/issue43285", "url": "https://bugs.python.org/issue43285" } ], "release_date": "2021-12-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: ftplib should not use the host from the PASV response" }, { "cve": "CVE-2021-20095", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2021-04-29T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1955615" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from this vulnerability is to data confidentiality and integrity as well as service availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code", "title": "Vulnerability summary" }, { "category": "other", "text": "It is rather uncommon for applications to use Babel.Locale() with an untrusted attacker-controlled language argument. A static language abbreviation string (e.g. \"en\") is most commonly used instead. For this reason, this flaw has been rated as having a security impact of Moderate.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-20095" }, { "category": "external", "summary": "RHBZ#1955615", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1955615" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-20095", "url": "https://www.cve.org/CVERecord?id=CVE-2021-20095" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-20095", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20095" }, { "category": "external", "summary": "https://www.tenable.com/security/research/tra-2021-14", "url": "https://www.tenable.com/security/research/tra-2021-14" } ], "release_date": "2021-04-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code" }, { "cve": "CVE-2021-23336", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2021-02-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1928904" } ], "notes": [ { "category": "description", "text": "The package python/cpython is vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters", "title": "Vulnerability summary" }, { "category": "other", "text": "The python36 component in the python36:3.6 module in Red Hat Enterprise Linux 8 is listed as not affected, as it does not contain Python interpreter or libraries. Packages of the python36 component only provide convenient links to the Python interpreter included in the non-modular python3 component\u0027s platform-python packages. Users of python36:3.6 module also need to check the entry for the python3 component to determine if their systems are affected.\n\nRed Hat Ceph Storage (RHCS) 3 ships an older version of python-django without the directly affected function, but which is still vulnerable to a similar attack involving the semi colon separator. Hence, impact has been rated as Low.\n\nAlthough Red Hat OpenStack Platform 13 \u0026 16.1 both ship the affected code, since the proxy is controlled and configured by OpenStack, the impact has been lowered to Low. As a fix would require a substantial effort or commitment of time, no fix will be provided at this time.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-23336" }, { "category": "external", "summary": "RHBZ#1928904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1928904" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-23336", "url": "https://www.cve.org/CVERecord?id=CVE-2021-23336" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-23336", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23336" }, { "category": "external", "summary": "https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933", "url": "https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933" } ], "release_date": "2021-02-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters" }, { "cve": "CVE-2021-28957", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2021-03-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1941534" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-lxml. The HTML5 formaction attribute is not input sanitized like the HTML action attribute is which can lead to a Cross-Site Scripting attack (XSS) when an application uses python-lxml to sanitize user inputs. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS", "title": "Vulnerability summary" }, { "category": "other", "text": "Web applications vulnerable to this flaw, where a XSS attack can be accomplished, are only those that use python-lxml to sanitize HTML input and that allow user data to be placed in the \"formaction\" attribute of a form button.\n\nIn Red Hat OpenStack Platform, because the flaw has a lower impact and the package is unlikely to be exploited in the RHOSP environment, no update will be provided at this time for the RHOSP python-lxml package.\n\nFor Ansible Tower and Ansible Automation Platform, Lowering the impact from Moderate to Low as the vulnerable function i.e. lxml HTML Cleaner and the vulnerable attribute i.e. HTML FormAction are not being used.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-28957" }, { "category": "external", "summary": "RHBZ#1941534", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941534" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-28957", "url": "https://www.cve.org/CVERecord?id=CVE-2021-28957" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-28957", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28957" } ], "release_date": "2021-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS" }, { "cve": "CVE-2021-29921", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-04-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1957458" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-ipaddress. Improper input validation of octal strings in stdlib ipaddress allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many programs that rely on Python stdlib ipaddress. The highest threat from this vulnerability is to data integrity and system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-ipaddress: Improper input validation of octal strings", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-29921" }, { "category": "external", "summary": "RHBZ#1957458", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1957458" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-29921", "url": "https://www.cve.org/CVERecord?id=CVE-2021-29921" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-29921", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29921" }, { "category": "external", "summary": "https://python-security.readthedocs.io/vuln/ipaddress-ipv4-leading-zeros.html", "url": "https://python-security.readthedocs.io/vuln/ipaddress-ipv4-leading-zeros.html" } ], "release_date": "2021-04-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-ipaddress: Improper input validation of octal strings" }, { "cve": "CVE-2021-33503", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2021-06-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1968074" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-urllib3. When provided with a URL containing many @ characters in the authority component, the authority\u0027s regular expression exhibits catastrophic backtracking. This flaw causes a denial of service if a URL is passed as a parameter or redirected via an HTTP redirect. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-urllib3: ReDoS in the parsing of authority part of URL", "title": "Vulnerability summary" }, { "category": "other", "text": "* Red Hat OpenShift Container Platform (OCP) 4 delivers the python-urllib3 package which includes a vulnerable version of urllib3 module, however from OCP 4.6 the python-urllib3 package is no longer shipped. OCP 4.5 is out of support scope for Moderate and Low impact vulnerabilities, hence is marked Out Of Support Scope.\nThe python-urllib3 package used in OCP 3.11 is not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-33503" }, { "category": "external", "summary": "RHBZ#1968074", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968074" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-33503", "url": "https://www.cve.org/CVERecord?id=CVE-2021-33503" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-33503", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33503" }, { "category": "external", "summary": "https://github.com/advisories/GHSA-q2q7-5pp4-w6pg", "url": "https://github.com/advisories/GHSA-q2q7-5pp4-w6pg" } ], "release_date": "2021-06-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-urllib3: ReDoS in the parsing of authority part of URL" }, { "cve": "CVE-2021-42771", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2021-04-29T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1955615" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from this vulnerability is to data confidentiality and integrity as well as service availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code", "title": "Vulnerability summary" }, { "category": "other", "text": "It is rather uncommon for applications to use Babel.Locale() with an untrusted attacker-controlled language argument. A static language abbreviation string (e.g. \"en\") is most commonly used instead. For this reason, this flaw has been rated as having a security impact of Moderate.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-42771" }, { "category": "external", "summary": "RHBZ#1955615", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1955615" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-42771", "url": "https://www.cve.org/CVERecord?id=CVE-2021-42771" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-42771", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42771" }, { "category": "external", "summary": "https://www.tenable.com/security/research/tra-2021-14", "url": "https://www.tenable.com/security/research/tra-2021-14" } ], "release_date": "2021-04-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code" }, { "cve": "CVE-2022-0391", "cwe": { "id": "CWE-74", "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)" }, "discovery_date": "2021-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2047376" } ], "notes": [ { "category": "description", "text": "A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like \u0027\\r\u0027 and \u0027\\n\u0027 in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: urllib.parse does not sanitize URLs containing ASCII newline and tabs", "title": "Vulnerability summary" }, { "category": "other", "text": "Versions of python36:3.6/python36 as shipped with Red Hat Enterprise Linux 8 are marked as \u0027Not affected\u0027 as they just provide \"symlinks\" to the main python3 component, which provides the actual interpreter of the Python programming language.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-0391" }, { "category": "external", "summary": "RHBZ#2047376", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2047376" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-0391", "url": "https://www.cve.org/CVERecord?id=CVE-2022-0391" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-0391", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0391" } ], "release_date": "2021-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: urllib.parse does not sanitize URLs containing ASCII newline and tabs" } ] }
rhsa-2021_1608
Vulnerability from csaf_redhat
Published
2021-05-18 15:21
Modified
2024-11-05 23:32
Summary
Red Hat Security Advisory: python-cryptography security, bug fix, and enhancement update
Notes
Topic
An update for python-cryptography is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers.
The following packages have been upgraded to a later upstream version: python-cryptography (3.2.1). (BZ#1873581, BZ#1891947)
Security Fix(es):
* python-cryptography: bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)
* python-cryptography: certain sequences of update() calls when symmetrically encrypting very large payloads could result in an integer overflow and lead to buffer overflows (CVE-2020-36242)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for python-cryptography is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The python-cryptography packages contain a Python Cryptographic Authority\u0027s (PyCA\u0027s) cryptography library, which provides cryptographic primitives and recipes to Python developers.\n\nThe following packages have been upgraded to a later upstream version: python-cryptography (3.2.1). (BZ#1873581, BZ#1891947)\n\nSecurity Fix(es):\n\n* python-cryptography: bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)\n\n* python-cryptography: certain sequences of update() calls when symmetrically encrypting very large payloads could result in an integer overflow and lead to buffer overflows (CVE-2020-36242)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:1608", "url": "https://access.redhat.com/errata/RHSA-2021:1608" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/", "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/" }, { "category": "external", "summary": "1778939", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1778939" }, { "category": "external", "summary": "1873581", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1873581" }, { "category": "external", "summary": "1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "1891947", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1891947" }, { "category": "external", "summary": "1907429", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1907429" }, { "category": "external", "summary": "1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1608.json" } ], "title": "Red Hat Security Advisory: python-cryptography security, bug fix, and enhancement update", "tracking": { "current_release_date": "2024-11-05T23:32:56+00:00", "generator": { "date": "2024-11-05T23:32:56+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2021:1608", "initial_release_date": "2021-05-18T15:21:33+00:00", "revision_history": [ { "date": "2021-05-18T15:21:33+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-05-18T15:21:33+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T23:32:56+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product": { "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "python-cryptography-0:3.2.1-4.el8.src", "product": { "name": "python-cryptography-0:3.2.1-4.el8.src", "product_id": "python-cryptography-0:3.2.1-4.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-cryptography@3.2.1-4.el8?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "python3-cryptography-0:3.2.1-4.el8.aarch64", "product": { "name": "python3-cryptography-0:3.2.1-4.el8.aarch64", "product_id": "python3-cryptography-0:3.2.1-4.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography@3.2.1-4.el8?arch=aarch64" } } }, { "category": "product_version", "name": "python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "product": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "product_id": "python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-cryptography-debugsource@3.2.1-4.el8?arch=aarch64" } } }, { "category": "product_version", "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "product": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "product_id": "python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography-debuginfo@3.2.1-4.el8?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "python3-cryptography-0:3.2.1-4.el8.ppc64le", "product": { "name": "python3-cryptography-0:3.2.1-4.el8.ppc64le", "product_id": "python3-cryptography-0:3.2.1-4.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography@3.2.1-4.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "product": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "product_id": "python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-cryptography-debugsource@3.2.1-4.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "product": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "product_id": "python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography-debuginfo@3.2.1-4.el8?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "python3-cryptography-0:3.2.1-4.el8.x86_64", "product": { "name": "python3-cryptography-0:3.2.1-4.el8.x86_64", "product_id": "python3-cryptography-0:3.2.1-4.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography@3.2.1-4.el8?arch=x86_64" } } }, { "category": "product_version", "name": "python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "product": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "product_id": "python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-cryptography-debugsource@3.2.1-4.el8?arch=x86_64" } } }, { "category": "product_version", "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64", "product": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64", "product_id": "python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography-debuginfo@3.2.1-4.el8?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "python3-cryptography-0:3.2.1-4.el8.s390x", "product": { "name": "python3-cryptography-0:3.2.1-4.el8.s390x", "product_id": "python3-cryptography-0:3.2.1-4.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography@3.2.1-4.el8?arch=s390x" } } }, { "category": "product_version", "name": "python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "product": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "product_id": "python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-cryptography-debugsource@3.2.1-4.el8?arch=s390x" } } }, { "category": "product_version", "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "product": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "product_id": "python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography-debuginfo@3.2.1-4.el8?arch=s390x" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "python-cryptography-0:3.2.1-4.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src" }, "product_reference": "python-cryptography-0:3.2.1-4.el8.src", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64" }, "product_reference": "python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le" }, "product_reference": "python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x" }, "product_reference": "python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64" }, "product_reference": "python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-0:3.2.1-4.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64" }, "product_reference": "python3-cryptography-0:3.2.1-4.el8.aarch64", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-0:3.2.1-4.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le" }, "product_reference": "python3-cryptography-0:3.2.1-4.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-0:3.2.1-4.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x" }, "product_reference": "python3-cryptography-0:3.2.1-4.el8.s390x", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-0:3.2.1-4.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64" }, "product_reference": "python3-cryptography-0:3.2.1-4.el8.x86_64", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64" }, "product_reference": "python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le" }, "product_reference": "python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x" }, "product_reference": "python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" }, "product_reference": "python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64", "relates_to_product_reference": "BaseOS-8.4.0.GA" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Hubert Kario" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2020-25659", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2020-10-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1889988" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-cryptography, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-25659" }, { "category": "external", "summary": "RHBZ#1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-25659", "url": "https://www.cve.org/CVERecord?id=CVE-2020-25659" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-2" } ], "release_date": "2020-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:21:33+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:1608" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption" }, { "cve": "CVE-2020-36242", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2021-02-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1926226" } ], "notes": [ { "category": "description", "text": "A buffer-overflow flaw was found in the python-cryptography package. In certain sequences of ``update()`` calls when symmetrically encrypting very large payloads (\u003e2GB) could result in an integer overflow, leading to buffer overflows. Note: This fix is a workaround for the OpenSSL CVE-2021-23840 flaw. Source: pyca/cryptography project", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow", "title": "Vulnerability summary" }, { "category": "other", "text": "Triggering this flaw on in versions of python-cryptography as shipped with Red Hat Enterprise Linux 8 BaseOS, Appstream, as well as Red Hat Software Collections, can result in denial of service due to memory consumption or MemoryError exception.\n\nIn Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-36242" }, { "category": "external", "summary": "RHBZ#1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-36242", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36242" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-3-2" } ], "release_date": "2020-12-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:21:33+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:1608" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow" } ] }
rhsa-2021_2239
Vulnerability from csaf_redhat
Published
2021-06-03 10:26
Modified
2024-11-05 23:38
Summary
Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]
Notes
Topic
An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks.
The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks.
The ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks.
Security Fix(es):
* python-cryptography: bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)
* krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS (CVE-2020-28196)
* python-cryptography: certain sequences of update() calls when symmetrically encrypting very large payloads could result in an integer overflow and lead to buffer overflows (CVE-2020-36242)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Previously, old RPM files were not properly removed during package removal (uninistall) or upgrade. As a result, removed packages were reinstalled, or, during and upgrade, the system tried to install two or more different versions at once, causing the upgrade to fail.
In this release, the dnf plugin has been fixed, and RPM packages are now properly removed.
The new version will also auto-heal the broken system by removing RPM packages which are not supposed to be in the persisted-rpms directory. (BZ#1936972)
* With this release, ovirt-hosted-engine-ha supports multiple, comma-separated values for all iSCSI configuration items. (BZ#1909888)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host\u0027s resources and performing administrative tasks.\n\nThe redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host\u0027s resources and performing administrative tasks. \n\nThe ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host\u0027s resources and performing administrative tasks.\n\nSecurity Fix(es):\n\n* python-cryptography: bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)\n\n* krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS (CVE-2020-28196)\n\n* python-cryptography: certain sequences of update() calls when symmetrically encrypting very large payloads could result in an integer overflow and lead to buffer overflows (CVE-2020-36242)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Previously, old RPM files were not properly removed during package removal (uninistall) or upgrade. As a result, removed packages were reinstalled, or, during and upgrade, the system tried to install two or more different versions at once, causing the upgrade to fail.\nIn this release, the dnf plugin has been fixed, and RPM packages are now properly removed.\nThe new version will also auto-heal the broken system by removing RPM packages which are not supposed to be in the persisted-rpms directory. (BZ#1936972)\n\n* With this release, ovirt-hosted-engine-ha supports multiple, comma-separated values for all iSCSI configuration items. (BZ#1909888)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:2239", "url": "https://access.redhat.com/errata/RHSA-2021:2239" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1779052", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1779052" }, { "category": "external", "summary": "1882542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1882542" }, { "category": "external", "summary": "1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "1897893", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1897893" }, { "category": "external", "summary": "1901041", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901041" }, { "category": "external", "summary": "1901878", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901878" }, { "category": "external", "summary": "1909888", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1909888" }, { "category": "external", "summary": "1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "external", "summary": "1931443", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1931443" }, { "category": "external", "summary": "1936972", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1936972" }, { "category": "external", "summary": "1938925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1938925" }, { "category": "external", "summary": "1942580", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1942580" }, { "category": "external", "summary": "1944632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1944632" }, { "category": "external", "summary": "1946095", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1946095" }, { "category": "external", "summary": "1948944", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1948944" }, { "category": "external", "summary": "1949431", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1949431" }, { "category": "external", "summary": "1957604", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1957604" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2239.json" } ], "title": "Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]", "tracking": { "current_release_date": "2024-11-05T23:38:54+00:00", "generator": { "date": "2024-11-05T23:38:54+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2021:2239", "initial_release_date": "2021-06-03T10:26:34+00:00", "revision_history": [ { "date": "2021-06-03T10:26:34+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-06-03T10:26:34+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T23:38:54+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product": { "name": "RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhev_hypervisor:4.4::el8" } } }, { "category": "product_name", "name": "Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product": { "name": "Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product_id": "8Base-RHV-Agents-4", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhev_hypervisor:4.4::el8" } } }, { "category": "product_name", "name": "Red Hat Virtualization 4 Hypervisor for RHEL 8", "product": { "name": "Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhev_hypervisor:4.4::el8" } } } ], "category": "product_family", "name": "Red Hat Virtualization" }, { "branches": [ { "category": "product_version", "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "product": { "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "product_id": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-release-virtualization-host@4.4.6-1.el8ev?arch=src" } } }, { "category": "product_version", "name": "imgbased-0:1.2.19-1.el8ev.src", "product": { "name": "imgbased-0:1.2.19-1.el8ev.src", "product_id": "imgbased-0:1.2.19-1.el8ev.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/imgbased@1.2.19-1.el8ev?arch=src" } } }, { "category": "product_version", "name": "scap-security-guide-0:0.1.54-1.el8ev.src", "product": { "name": "scap-security-guide-0:0.1.54-1.el8ev.src", "product_id": "scap-security-guide-0:0.1.54-1.el8ev.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/scap-security-guide@0.1.54-1.el8ev?arch=src" } } }, { "category": "product_version", "name": "cockpit-ovirt-0:0.15.0-2.el8ev.src", "product": { "name": "cockpit-ovirt-0:0.15.0-2.el8ev.src", "product_id": "cockpit-ovirt-0:0.15.0-2.el8ev.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-ovirt@0.15.0-2.el8ev?arch=src" } } }, { "category": "product_version", "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "product": { "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "product_id": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ovirt-hosted-engine-ha@2.4.7-1.el8ev?arch=src" } } }, { "category": "product_version", "name": "redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "product": { "name": "redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "product_id": "redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-virtualization-host@4.4.6-20210527.3.el8_4?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "product": { "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "product_id": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-release-virtualization-host@4.4.6-1.el8ev?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "product_id": "elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-debuginfod-client@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debugsource-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-debugsource-0:0.182-3.el8.x86_64", "product_id": "elfutils-debugsource-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-debugsource@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debuginfo-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-debuginfo-0:0.182-3.el8.x86_64", "product_id": "elfutils-debuginfo-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-debuginfo@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "product_id": "elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-debuginfod-client-debuginfo@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "product_id": "elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-debuginfod-debuginfo@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "product_id": "elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-libelf-debuginfo@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "product_id": "elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-libs-debuginfo@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64", "product": { "name": "redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64", "product_id": "redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-virtualization-host-image-update@4.4.6-20210527.3.el8_4?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "product": { "name": "redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "product_id": "redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-virtualization-host-image-update-placeholder@4.4.6-1.el8ev?arch=noarch" } } }, { "category": "product_version", "name": "imgbased-0:1.2.19-1.el8ev.noarch", "product": { "name": "imgbased-0:1.2.19-1.el8ev.noarch", "product_id": "imgbased-0:1.2.19-1.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/imgbased@1.2.19-1.el8ev?arch=noarch" } } }, { "category": "product_version", "name": "python3-imgbased-0:1.2.19-1.el8ev.noarch", "product": { "name": "python3-imgbased-0:1.2.19-1.el8ev.noarch", "product_id": "python3-imgbased-0:1.2.19-1.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-imgbased@1.2.19-1.el8ev?arch=noarch" } } }, { "category": "product_version", "name": "scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch", "product": { "name": "scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch", "product_id": "scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/scap-security-guide-rhv@0.1.54-1.el8ev?arch=noarch" } } }, { "category": "product_version", "name": "cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "product": { "name": "cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "product_id": "cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-ovirt-dashboard@0.15.0-2.el8ev?arch=noarch" } } }, { "category": "product_version", "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "product": { "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "product_id": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ovirt-hosted-engine-ha@2.4.7-1.el8ev?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "cockpit-ovirt-0:0.15.0-2.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product_id": "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src" }, "product_reference": "cockpit-ovirt-0:0.15.0-2.el8ev.src", "relates_to_product_reference": "8Base-RHV-Agents-4" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product_id": "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch" }, "product_reference": "cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-Agents-4" }, { "category": "default_component_of", "full_product_name": { "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product_id": "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch" }, "product_reference": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-Agents-4" }, { "category": "default_component_of", "full_product_name": { "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product_id": "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src" }, "product_reference": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "relates_to_product_reference": "8Base-RHV-Agents-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfo-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-debuginfo-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debugsource-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-debugsource-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libs-debuginfo-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src" }, "product_reference": "redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" }, "product_reference": "redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "imgbased-0:1.2.19-1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch" }, "product_reference": "imgbased-0:1.2.19-1.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "imgbased-0:1.2.19-1.el8ev.src as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src" }, "product_reference": "imgbased-0:1.2.19-1.el8ev.src", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-imgbased-0:1.2.19-1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch" }, "product_reference": "python3-imgbased-0:1.2.19-1.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.src as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src" }, "product_reference": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64 as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64" }, "product_reference": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch" }, "product_reference": "redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "scap-security-guide-0:0.1.54-1.el8ev.src as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src" }, "product_reference": "scap-security-guide-0:0.1.54-1.el8ev.src", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" }, "product_reference": "scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Hubert Kario" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2020-25659", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2020-10-21T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1889988" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-cryptography, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "known_not_affected": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-25659" }, { "category": "external", "summary": "RHBZ#1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-25659", "url": "https://www.cve.org/CVERecord?id=CVE-2020-25659" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-2" } ], "release_date": "2020-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-06-03T10:26:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891", "product_ids": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:2239" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption" }, { "cve": "CVE-2020-28196", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "discovery_date": "2020-11-06T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1901041" } ], "notes": [ { "category": "description", "text": "A flaw was found in krb5. MIT Kerberos 5 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.", "title": "Vulnerability description" }, { "category": "summary", "text": "krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "known_not_affected": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-28196" }, { "category": "external", "summary": "RHBZ#1901041", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901041" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-28196", "url": "https://www.cve.org/CVERecord?id=CVE-2020-28196" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-28196", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28196" } ], "release_date": "2020-11-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-06-03T10:26:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891", "product_ids": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:2239" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS" }, { "cve": "CVE-2020-36242", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2021-02-07T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1926226" } ], "notes": [ { "category": "description", "text": "A buffer-overflow flaw was found in the python-cryptography package. In certain sequences of ``update()`` calls when symmetrically encrypting very large payloads (\u003e2GB) could result in an integer overflow, leading to buffer overflows. Note: This fix is a workaround for the OpenSSL CVE-2021-23840 flaw. Source: pyca/cryptography project", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow", "title": "Vulnerability summary" }, { "category": "other", "text": "Triggering this flaw on in versions of python-cryptography as shipped with Red Hat Enterprise Linux 8 BaseOS, Appstream, as well as Red Hat Software Collections, can result in denial of service due to memory consumption or MemoryError exception.\n\nIn Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "known_not_affected": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-36242" }, { "category": "external", "summary": "RHBZ#1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-36242", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36242" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-3-2" } ], "release_date": "2020-12-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-06-03T10:26:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891", "product_ids": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:2239" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow" } ] }
wid-sec-w-2023-0557
Vulnerability from csaf_certbund
Published
2020-11-04 23:00
Modified
2024-06-03 22:00
Summary
python-cryptography: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
Python ist eine universelle, üblicherweise interpretierte höhere Programmiersprache.
Angriff
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in python-cryptography ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
Betroffene Betriebssysteme
- Android
- iPhoneOS
- Juniper Appliance
- Linux
- MacOS X
- Sonstiges
- UNIX
- Windows
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "Python ist eine universelle, \u00fcblicherweise interpretierte h\u00f6here Programmiersprache.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in python-cryptography ausnutzen, um Sicherheitsvorkehrungen zu umgehen.", "title": "Angriff" }, { "category": "general", "text": "- Android\n- iPhoneOS\n- Juniper Appliance\n- Linux\n- MacOS X\n- Sonstiges\n- UNIX\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-0557 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2020/wid-sec-w-2023-0557.json" }, { "category": "self", "summary": "WID-SEC-2023-0557 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0557" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2021:2239 vom 2021-06-03", "url": "https://access.redhat.com/errata/RHSA-2021:2239" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2021:1109-1 vom 2021-04-09", "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-April/008603.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2021:1608 vom 2021-05-18", "url": "https://access.redhat.com/errata/RHSA-2021:1608" }, { "category": "external", "summary": "Ubuntu Security Notice USN-4613-1 vom 2020-11-04", "url": "https://ubuntu.com/security/notices/USN-4613-1" }, { "category": "external", "summary": "Github Security Advisory GHSA-hggm-jpg3-v476 vom 2020-11-04", "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-hggm-jpg3-v476" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2020:3592-1 vom 2020-12-02", "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-December/007905.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2020:3629-1 vom 2020-12-04", "url": "https://lists.suse.com/pipermail/sle-security-updates/2020-December/007919.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2021:2479 vom 2021-06-17", "url": "https://access.redhat.com/errata/RHSA-2021:2479" }, { "category": "external", "summary": "AVAYA Security Advisory ASA-2021-066 vom 2021-06-17", "url": "https://downloads.avaya.com/css/P8/documents/101076270" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2021:3119 vom 2021-08-10", "url": "https://access.redhat.com/errata/RHSA-2021:3119" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2021:3254 vom 2021-08-25", "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "external", "summary": "Juniper Security Advisory JSA11245 vom 2021-10-14", "url": "https://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA11245\u0026cat=SIRT_1" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:0604-1 vom 2023-03-02", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-March/013960.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2783-1 vom 2023-07-05", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015451.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2783-2 vom 2023-09-20", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016228.html" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-EPEL-2024-4FF425606F vom 2024-01-24", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2024-4ff425606f" }, { "category": "external", "summary": "IBM Security Bulletin 7145367 vom 2024-03-27", "url": "https://www.ibm.com/support/pages/node/7145367" }, { "category": "external", "summary": "Dell Security Advisory DSA-2024-210 vom 2024-06-04", "url": "https://www.dell.com/support/kbdoc/de-de/000225667/dsa-2024-210-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities" } ], "source_lang": "en-US", "title": "python-cryptography: Schwachstelle erm\u00f6glicht Umgehen von Sicherheitsvorkehrungen", "tracking": { "current_release_date": "2024-06-03T22:00:00.000+00:00", "generator": { "date": "2024-06-04T08:07:24.398+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-0557", "initial_release_date": "2020-11-04T23:00:00.000+00:00", "revision_history": [ { "date": "2020-11-04T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2020-12-02T23:00:00.000+00:00", "number": "2", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2020-12-06T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2021-04-08T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2021-05-18T22:00:00.000+00:00", "number": "5", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2021-06-03T22:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2021-06-17T22:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2021-06-20T22:00:00.000+00:00", "number": "8", "summary": "Neue Updates von AVAYA aufgenommen" }, { "date": "2021-08-10T22:00:00.000+00:00", "number": "9", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2021-08-24T22:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2021-10-13T22:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Juniper aufgenommen" }, { "date": "2023-03-02T23:00:00.000+00:00", "number": "12", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2023-07-04T22:00:00.000+00:00", "number": "13", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2023-09-19T22:00:00.000+00:00", "number": "14", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-01-23T23:00:00.000+00:00", "number": "15", "summary": "Neue Updates von Fedora aufgenommen" }, { "date": "2024-03-27T23:00:00.000+00:00", "number": "16", "summary": "Neue Updates von IBM aufgenommen" }, { "date": "2024-06-03T22:00:00.000+00:00", "number": "17", "summary": "Neue Updates von Dell aufgenommen" } ], "status": "final", "version": "17" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Avaya Aura Experience Portal", "product": { "name": "Avaya Aura Experience Portal", "product_id": "T015519", "product_identification_helper": { "cpe": "cpe:/a:avaya:aura_experience_portal:-" } } } ], "category": "vendor", "name": "Avaya" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "OneFS \u003c9.4.0.18", "product": { "name": "Dell PowerScale OneFS \u003c9.4.0.18", "product_id": "T034610", "product_identification_helper": { "cpe": "cpe:/a:dell:powerscale_onefs:onefs" } } } ], "category": "product_name", "name": "PowerScale" } ], "category": "vendor", "name": "Dell" }, { "branches": [ { "category": "product_name", "name": "Fedora Linux", "product": { "name": "Fedora Linux", "product_id": "74185", "product_identification_helper": { "cpe": "cpe:/o:fedoraproject:fedora:-" } } } ], "category": "vendor", "name": "Fedora" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c7.5.0 UP8", "product": { "name": "IBM QRadar SIEM \u003c7.5.0 UP8", "product_id": "T033681", "product_identification_helper": { "cpe": "cpe:/a:ibm:qradar_siem:7.5.0_up8" } } } ], "category": "product_name", "name": "QRadar SIEM" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "category": "product_name", "name": "Juniper JUNOS", "product": { "name": "Juniper JUNOS", "product_id": "5930", "product_identification_helper": { "cpe": "cpe:/o:juniper:junos:-" } } } ], "category": "vendor", "name": "Juniper" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "Cryptography", "product": { "name": "Open Source Python Cryptography", "product_id": "113051", "product_identification_helper": { "cpe": "cpe:/a:python:python:-" } } } ], "category": "product_name", "name": "Python" } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-25659", "notes": [ { "category": "description", "text": "Es existiert eine Schwachstelle in der Python Cryptography Bibliothek. Sie beruht auf einem Fehler bei der Entschl\u00fcsselung von RSA verschl\u00fcsselten Daten, der einen Bleichenbacher Timing Angriff erm\u00f6glicht. Ein Angreifer kann dieses nutzen und Sicherheitsmechanismen umgehen." } ], "product_status": { "known_affected": [ "T015519", "T034610", "T002207", "67646", "T000126", "5930", "T033681", "113051", "74185" ] }, "release_date": "2020-11-04T23:00:00Z", "title": "CVE-2020-25659" } ] }
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.