Action not permitted
Modal body text goes here.
cve-2020-36242
Vulnerability from cvelistv5
Published
2021-02-07 19:50
Modified
2024-08-04 17:23
Severity ?
EPSS score ?
Summary
In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.
References
▼ | URL | Tags | |
---|---|---|---|
cve@mitre.org | https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst | Release Notes, Third Party Advisory | |
cve@mitre.org | https://github.com/pyca/cryptography/compare/3.3.1...3.3.2 | Patch, Third Party Advisory | |
cve@mitre.org | https://github.com/pyca/cryptography/issues/5615 | Exploit, Patch, Third Party Advisory | |
cve@mitre.org | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/ | ||
cve@mitre.org | https://www.oracle.com/security-alerts/cpuapr2022.html | Patch, Third Party Advisory | |
cve@mitre.org | https://www.oracle.com/security-alerts/cpujul2022.html | Patch, Third Party Advisory |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T17:23:09.814Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://github.com/pyca/cryptography/issues/5615" }, { "name": "FEDORA-2021-8e36e7ed1a", "tags": [ "vendor-advisory", "x_refsource_FEDORA", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/pyca/cryptography/compare/3.3.1...3.3.2" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "descriptions": [ { "lang": "en", "value": "In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2022-07-25T16:22:24", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://github.com/pyca/cryptography/issues/5615" }, { "name": "FEDORA-2021-8e36e7ed1a", "tags": [ "vendor-advisory", "x_refsource_FEDORA" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/pyca/cryptography/compare/3.3.1...3.3.2" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst" }, { "tags": [ "x_refsource_MISC" ], "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2020-36242", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/pyca/cryptography/issues/5615", "refsource": "MISC", "url": "https://github.com/pyca/cryptography/issues/5615" }, { "name": "FEDORA-2021-8e36e7ed1a", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/" }, { "name": "https://www.oracle.com/security-alerts/cpuapr2022.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "name": "https://github.com/pyca/cryptography/compare/3.3.1...3.3.2", "refsource": "CONFIRM", "url": "https://github.com/pyca/cryptography/compare/3.3.1...3.3.2" }, { "name": "https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst", "refsource": "CONFIRM", "url": "https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst" }, { "name": "https://www.oracle.com/security-alerts/cpujul2022.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ] } } } }, "cveMetadata": { "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2020-36242", "datePublished": "2021-02-07T19:50:57", "dateReserved": "2021-02-07T00:00:00", "dateUpdated": "2024-08-04T17:23:09.814Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2020-36242\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2021-02-07T20:15:12.090\",\"lastModified\":\"2024-09-05T16:09:10.430\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.\"},{\"lang\":\"es\",\"value\":\"En el paquete de criptograf\u00eda versiones anteriores a 3.3.2 para Python, determinadas secuencias de llamadas de actualizaci\u00f3n para cifrar sim\u00e9tricamente valores de varios GB podr\u00edan resultar en un desbordamiento de enteros y un desbordamiento del b\u00fafer, como es demostrado por la clase Fernet\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\"},\"exploitabilityScore\":3.9,\"impactScore\":5.2}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:P/I:N/A:P\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\",\"baseScore\":6.4},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-190\"},{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cryptography.io:cryptography:*:*:*:*:*:python:*:*\",\"versionEndExcluding\":\"3.3.2\",\"matchCriteriaId\":\"CA823DED-BFFE-4DBC-878D-5316EE987208\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2A5B24D-BDF2-423C-98EA-A40778C01A05\"}]}]}],\"references\":[{\"url\":\"https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst\",\"source\":\"cve@mitre.org\",\"tags\":[\"Release Notes\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/pyca/cryptography/compare/3.3.1...3.3.2\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/pyca/cryptography/issues/5615\",\"source\":\"cve@mitre.org\",\"tags\":[\"Exploit\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujul2022.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}" } }
wid-sec-w-2023-0126
Vulnerability from csaf_certbund
Published
2023-01-17 23:00
Modified
2023-05-30 22:00
Summary
Oracle MySQL: Mehrere Schwachstellen
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
MySQL ist ein Open Source Datenbankserver von Oracle.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Betroffene Betriebssysteme
- UNIX
- Linux
- MacOS X
- Windows
{ "document": { "aggregate_severity": { "text": "hoch" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "MySQL ist ein Open Source Datenbankserver von Oracle.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit zu gef\u00e4hrden.", "title": "Angriff" }, { "category": "general", "text": "- UNIX\n- Linux\n- MacOS X\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-0126 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0126.json" }, { "category": "self", "summary": "WID-SEC-2023-0126 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0126" }, { "category": "external", "summary": "IBM Security Bulletin 6981105 vom 2023-05-30", "url": "https://www.ibm.com/support/pages/node/6981105" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-3087 vom 2023-05-25", "url": "https://linux.oracle.com/errata/ELSA-2023-3087.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-2621 vom 2023-05-18", "url": "https://oss.oracle.com/pipermail/el-errata/2023-May/013976.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:3087 vom 2023-05-16", "url": "https://access.redhat.com/errata/RHSA-2023:3087" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:2621 vom 2023-05-09", "url": "https://access.redhat.com/errata/RHSA-2023:2621" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS2-2023-1973 vom 2023-03-07", "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-1973.html" }, { "category": "external", "summary": "Oracle Critical Patch Update Advisory - January 2023 - Appendix Oracle MySQL vom 2023-01-17", "url": "https://www.oracle.com/security-alerts/cpujan2023.html#AppendixMSQL" }, { "category": "external", "summary": "Ubuntu Security Notice USN-5823-2 vom 2023-01-25", "url": "https://ubuntu.com/security/notices/USN-5823-2" }, { "category": "external", "summary": "Ubuntu Security Notice USN-5823-1 vom 2023-01-24", "url": "https://ubuntu.com/security/notices/USN-5823-1" }, { "category": "external", "summary": "Ubuntu Security Notice USN-5823-3 vom 2023-01-29", "url": "https://ubuntu.com/security/notices/USN-5823-3" }, { "category": "external", "summary": "NetApp Security Advisory NTAP-20230208-0002 vom 2023-02-08", "url": "https://security.netapp.com/advisory/ntap-20230208-0002/" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS-2023-1686 vom 2023-02-23", "url": "https://alas.aws.amazon.com/ALAS-2023-1686.html" } ], "source_lang": "en-US", "title": "Oracle MySQL: Mehrere Schwachstellen", "tracking": { "current_release_date": "2023-05-30T22:00:00.000+00:00", "generator": { "date": "2024-02-15T17:10:20.340+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-0126", "initial_release_date": "2023-01-17T23:00:00.000+00:00", "revision_history": [ { "date": "2023-01-17T23:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2023-01-24T23:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2023-01-29T23:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2023-02-07T23:00:00.000+00:00", "number": "4", "summary": "Referenz(en) aufgenommen: FEDORA-2023-E449235964, FEDORA-2023-D332F0B6A3" }, { "date": "2023-02-08T23:00:00.000+00:00", "number": "5", "summary": "Neue Updates von NetApp aufgenommen" }, { "date": "2023-02-22T23:00:00.000+00:00", "number": "6", "summary": "Neue Updates von Amazon aufgenommen" }, { "date": "2023-03-06T23:00:00.000+00:00", "number": "7", "summary": "Neue Updates von Amazon aufgenommen" }, { "date": "2023-05-09T22:00:00.000+00:00", "number": "8", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-05-16T22:00:00.000+00:00", "number": "9", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-05-18T22:00:00.000+00:00", "number": "10", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2023-05-25T22:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2023-05-30T22:00:00.000+00:00", "number": "12", "summary": "Neue Updates von IBM aufgenommen" } ], "status": "final", "version": "12" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Amazon Linux 2", "product": { "name": "Amazon Linux 2", "product_id": "398363", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "IBM Security Guardium 10.5", "product": { "name": "IBM Security Guardium 10.5", "product_id": "410912", "product_identification_helper": { "cpe": "cpe:/a:ibm:security_guardium:10.5" } } }, { "category": "product_name", "name": "IBM Security Guardium 10.6", "product": { "name": "IBM Security Guardium 10.6", "product_id": "410913", "product_identification_helper": { "cpe": "cpe:/a:ibm:security_guardium:10.6" } } }, { "category": "product_name", "name": "IBM Security Guardium 11.5", "product": { "name": "IBM Security Guardium 11.5", "product_id": "T026399", "product_identification_helper": { "cpe": "cpe:/a:ibm:security_guardium:11.5" } } } ], "category": "product_name", "name": "Security Guardium" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "category": "product_name", "name": "NetApp ActiveIQ Unified Manager", "product": { "name": "NetApp ActiveIQ Unified Manager", "product_id": "T016960", "product_identification_helper": { "cpe": "cpe:/a:netapp:active_iq_unified_manager:-" } } } ], "category": "vendor", "name": "NetApp" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } }, { "branches": [ { "category": "product_name", "name": "Oracle MySQL \u003c= 8.0.28", "product": { "name": "Oracle MySQL \u003c= 8.0.28", "product_id": "1163192", "product_identification_helper": { "cpe": "cpe:/a:oracle:mysql:8.0.28" } } }, { "category": "product_name", "name": "Oracle MySQL \u003c= 8.0.29", "product": { "name": "Oracle MySQL \u003c= 8.0.29", "product_id": "T022871", "product_identification_helper": { "cpe": "cpe:/a:oracle:mysql:8.0.29" } } }, { "category": "product_name", "name": "Oracle MySQL \u003c= 8.0.30", "product": { "name": "Oracle MySQL \u003c= 8.0.30", "product_id": "T023949", "product_identification_helper": { "cpe": "cpe:/a:oracle:mysql:8.0.30" } } }, { "category": "product_name", "name": "Oracle MySQL \u003c= 8.0.31", "product": { "name": "Oracle MySQL \u003c= 8.0.31", "product_id": "T025005", "product_identification_helper": { "cpe": "cpe:/a:oracle:mysql:8.0.31" } } }, { "category": "product_name", "name": "Oracle MySQL \u003c= 8.0.32", "product": { "name": "Oracle MySQL \u003c= 8.0.32", "product_id": "T025886", "product_identification_helper": { "cpe": "cpe:/a:oracle:mysql:8.0.32" } } }, { "category": "product_name", "name": "Oracle MySQL \u003c= 5.7.40", "product": { "name": "Oracle MySQL \u003c= 5.7.40", "product_id": "T025887", "product_identification_helper": { "cpe": "cpe:/a:oracle:mysql:5.7.40" } } }, { "category": "product_name", "name": "Oracle MySQL \u003c= 7.4.38", "product": { "name": "Oracle MySQL \u003c= 7.4.38", "product_id": "T025888", "product_identification_helper": { "cpe": "cpe:/a:oracle:mysql:7.4.38" } } }, { "category": "product_name", "name": "Oracle MySQL \u003c= 7.5.28", "product": { "name": "Oracle MySQL \u003c= 7.5.28", "product_id": "T025889", "product_identification_helper": { "cpe": "cpe:/a:oracle:mysql:7.5.28" } } }, { "category": "product_name", "name": "Oracle MySQL \u003c= 7.6.24", "product": { "name": "Oracle MySQL \u003c= 7.6.24", "product_id": "T025890", "product_identification_helper": { "cpe": "cpe:/a:oracle:mysql:7.6.24" } } } ], "category": "product_name", "name": "MySQL" } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-10735", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2020-10735" }, { "cve": "CVE-2020-36242", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2020-36242" }, { "cve": "CVE-2022-1941", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2022-1941" }, { "cve": "CVE-2022-22971", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2022-22971" }, { "cve": "CVE-2022-24407", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2022-24407" }, { "cve": "CVE-2022-31692", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2022-31692" }, { "cve": "CVE-2022-3171", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2022-3171" }, { "cve": "CVE-2022-32221", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2022-32221" }, { "cve": "CVE-2022-37434", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2022-37434" }, { "cve": "CVE-2022-40304", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2022-40304" }, { "cve": "CVE-2022-42252", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2022-42252" }, { "cve": "CVE-2023-21836", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21836" }, { "cve": "CVE-2023-21840", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21840" }, { "cve": "CVE-2023-21860", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21860" }, { "cve": "CVE-2023-21863", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21863" }, { "cve": "CVE-2023-21864", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21864" }, { "cve": "CVE-2023-21865", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21865" }, { "cve": "CVE-2023-21866", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21866" }, { "cve": "CVE-2023-21867", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21867" }, { "cve": "CVE-2023-21868", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21868" }, { "cve": "CVE-2023-21869", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21869" }, { "cve": "CVE-2023-21870", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21870" }, { "cve": "CVE-2023-21871", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21871" }, { "cve": "CVE-2023-21872", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21872" }, { "cve": "CVE-2023-21873", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21873" }, { "cve": "CVE-2023-21874", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21874" }, { "cve": "CVE-2023-21875", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21875" }, { "cve": "CVE-2023-21876", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21876" }, { "cve": "CVE-2023-21877", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21877" }, { "cve": "CVE-2023-21878", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21878" }, { "cve": "CVE-2023-21879", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21879" }, { "cve": "CVE-2023-21880", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21880" }, { "cve": "CVE-2023-21881", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21881" }, { "cve": "CVE-2023-21882", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21882" }, { "cve": "CVE-2023-21883", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21883" }, { "cve": "CVE-2023-21887", "notes": [ { "category": "description", "text": "In Oracle MySQL existieren mehrere Schwachstellen. Durch Ausnutzung dieser Schwachstellen kann ein entfernter, anonymer Angreifer die Vertraulichkeit, Integrit\u00e4t und Verf\u00fcgbarkeit gef\u00e4hrden. F\u00fcr die Ausnutzung einiger dieser Schwachstellen ist keine Benutzerinteraktion notwendig. Oracle ver\u00f6ffentlicht keine weiteren Details zu diesen Schwachstellen (au\u00dfer der Information in der Risiko Matrix im Oracle Advisory zum Critical Patch Update, siehe Link unten in diesem Advisory). Aufgrund der knappen Informationslage erfolgt die Bewertung der Schadensh\u00f6he ausschlie\u00dflich auf Basis der CVSS Impact Matrix. Der Maximalwert f\u00fcr diese Produkte ist \"HIGH\" f\u00fcr \"Confidentiality\", \"Integrity\" und \"Availability\" \u00fcber alle Schwachstellen aggregiert und bewirkt damit eine Bewertung mit dem Wert \"HOCH\" f\u00fcr die Schadensh\u00f6he." } ], "product_status": { "known_affected": [ "410912", "67646", "T000126", "398363", "T004914", "410913", "T016960", "T026399" ], "last_affected": [ "1163192", "T025888", "T025887", "T025889", "T022871", "T025886", "T025005", "T023949", "T025890" ] }, "release_date": "2023-01-17T23:00:00Z", "title": "CVE-2023-21887" } ] }
pysec-2021-63
Vulnerability from pysec
Published
2021-02-07 20:15
Modified
2021-02-19 17:23
Details
In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.
Aliases
{ "affected": [ { "package": { "ecosystem": "PyPI", "name": "cryptography", "purl": "pkg:pypi/cryptography" }, "ranges": [ { "events": [ { "introduced": "3.1" }, { "fixed": "3.3.2" } ], "type": "ECOSYSTEM" } ], "versions": [ "3.1", "3.1.1", "3.2", "3.2.1", "3.3", "3.3.1" ] } ], "aliases": [ "CVE-2020-36242", "GHSA-rhm9-p9w5-fwm7" ], "details": "In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.", "id": "PYSEC-2021-63", "modified": "2021-02-19T17:23:00Z", "published": "2021-02-07T20:15:00Z", "references": [ { "type": "REPORT", "url": "https://github.com/pyca/cryptography/issues/5615" }, { "type": "WEB", "url": "https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst" }, { "type": "WEB", "url": "https://github.com/pyca/cryptography/compare/3.3.1...3.3.2" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/" }, { "type": "ADVISORY", "url": "https://github.com/advisories/GHSA-rhm9-p9w5-fwm7" } ] }
rhsa-2021_1608
Vulnerability from csaf_redhat
Published
2021-05-18 15:21
Modified
2024-11-05 23:32
Summary
Red Hat Security Advisory: python-cryptography security, bug fix, and enhancement update
Notes
Topic
An update for python-cryptography is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The python-cryptography packages contain a Python Cryptographic Authority's (PyCA's) cryptography library, which provides cryptographic primitives and recipes to Python developers.
The following packages have been upgraded to a later upstream version: python-cryptography (3.2.1). (BZ#1873581, BZ#1891947)
Security Fix(es):
* python-cryptography: bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)
* python-cryptography: certain sequences of update() calls when symmetrically encrypting very large payloads could result in an integer overflow and lead to buffer overflows (CVE-2020-36242)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for python-cryptography is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The python-cryptography packages contain a Python Cryptographic Authority\u0027s (PyCA\u0027s) cryptography library, which provides cryptographic primitives and recipes to Python developers.\n\nThe following packages have been upgraded to a later upstream version: python-cryptography (3.2.1). (BZ#1873581, BZ#1891947)\n\nSecurity Fix(es):\n\n* python-cryptography: bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)\n\n* python-cryptography: certain sequences of update() calls when symmetrically encrypting very large payloads could result in an integer overflow and lead to buffer overflows (CVE-2020-36242)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes linked from the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:1608", "url": "https://access.redhat.com/errata/RHSA-2021:1608" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/", "url": "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/" }, { "category": "external", "summary": "1778939", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1778939" }, { "category": "external", "summary": "1873581", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1873581" }, { "category": "external", "summary": "1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "1891947", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1891947" }, { "category": "external", "summary": "1907429", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1907429" }, { "category": "external", "summary": "1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1608.json" } ], "title": "Red Hat Security Advisory: python-cryptography security, bug fix, and enhancement update", "tracking": { "current_release_date": "2024-11-05T23:32:56+00:00", "generator": { "date": "2024-11-05T23:32:56+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2021:1608", "initial_release_date": "2021-05-18T15:21:33+00:00", "revision_history": [ { "date": "2021-05-18T15:21:33+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-05-18T15:21:33+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T23:32:56+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product": { "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "python-cryptography-0:3.2.1-4.el8.src", "product": { "name": "python-cryptography-0:3.2.1-4.el8.src", "product_id": "python-cryptography-0:3.2.1-4.el8.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-cryptography@3.2.1-4.el8?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "python3-cryptography-0:3.2.1-4.el8.aarch64", "product": { "name": "python3-cryptography-0:3.2.1-4.el8.aarch64", "product_id": "python3-cryptography-0:3.2.1-4.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography@3.2.1-4.el8?arch=aarch64" } } }, { "category": "product_version", "name": "python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "product": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "product_id": "python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-cryptography-debugsource@3.2.1-4.el8?arch=aarch64" } } }, { "category": "product_version", "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "product": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "product_id": "python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography-debuginfo@3.2.1-4.el8?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "python3-cryptography-0:3.2.1-4.el8.ppc64le", "product": { "name": "python3-cryptography-0:3.2.1-4.el8.ppc64le", "product_id": "python3-cryptography-0:3.2.1-4.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography@3.2.1-4.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "product": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "product_id": "python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-cryptography-debugsource@3.2.1-4.el8?arch=ppc64le" } } }, { "category": "product_version", "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "product": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "product_id": "python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography-debuginfo@3.2.1-4.el8?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "python3-cryptography-0:3.2.1-4.el8.x86_64", "product": { "name": "python3-cryptography-0:3.2.1-4.el8.x86_64", "product_id": "python3-cryptography-0:3.2.1-4.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography@3.2.1-4.el8?arch=x86_64" } } }, { "category": "product_version", "name": "python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "product": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "product_id": "python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-cryptography-debugsource@3.2.1-4.el8?arch=x86_64" } } }, { "category": "product_version", "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64", "product": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64", "product_id": "python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography-debuginfo@3.2.1-4.el8?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "python3-cryptography-0:3.2.1-4.el8.s390x", "product": { "name": "python3-cryptography-0:3.2.1-4.el8.s390x", "product_id": "python3-cryptography-0:3.2.1-4.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography@3.2.1-4.el8?arch=s390x" } } }, { "category": "product_version", "name": "python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "product": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "product_id": "python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-cryptography-debugsource@3.2.1-4.el8?arch=s390x" } } }, { "category": "product_version", "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "product": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "product_id": "python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-cryptography-debuginfo@3.2.1-4.el8?arch=s390x" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "python-cryptography-0:3.2.1-4.el8.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src" }, "product_reference": "python-cryptography-0:3.2.1-4.el8.src", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64" }, "product_reference": "python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le" }, "product_reference": "python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x" }, "product_reference": "python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python-cryptography-debugsource-0:3.2.1-4.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64" }, "product_reference": "python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-0:3.2.1-4.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64" }, "product_reference": "python3-cryptography-0:3.2.1-4.el8.aarch64", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-0:3.2.1-4.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le" }, "product_reference": "python3-cryptography-0:3.2.1-4.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-0:3.2.1-4.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x" }, "product_reference": "python3-cryptography-0:3.2.1-4.el8.s390x", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-0:3.2.1-4.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64" }, "product_reference": "python3-cryptography-0:3.2.1-4.el8.x86_64", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64" }, "product_reference": "python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le" }, "product_reference": "python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x" }, "product_reference": "python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "relates_to_product_reference": "BaseOS-8.4.0.GA" }, { "category": "default_component_of", "full_product_name": { "name": "python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" }, "product_reference": "python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64", "relates_to_product_reference": "BaseOS-8.4.0.GA" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Hubert Kario" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2020-25659", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2020-10-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1889988" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-cryptography, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-25659" }, { "category": "external", "summary": "RHBZ#1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-25659", "url": "https://www.cve.org/CVERecord?id=CVE-2020-25659" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-2" } ], "release_date": "2020-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:21:33+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:1608" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption" }, { "cve": "CVE-2020-36242", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2021-02-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1926226" } ], "notes": [ { "category": "description", "text": "A buffer-overflow flaw was found in the python-cryptography package. In certain sequences of ``update()`` calls when symmetrically encrypting very large payloads (\u003e2GB) could result in an integer overflow, leading to buffer overflows. Note: This fix is a workaround for the OpenSSL CVE-2021-23840 flaw. Source: pyca/cryptography project", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow", "title": "Vulnerability summary" }, { "category": "other", "text": "Triggering this flaw on in versions of python-cryptography as shipped with Red Hat Enterprise Linux 8 BaseOS, Appstream, as well as Red Hat Software Collections, can result in denial of service due to memory consumption or MemoryError exception.\n\nIn Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-36242" }, { "category": "external", "summary": "RHBZ#1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-36242", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36242" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-3-2" } ], "release_date": "2020-12-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-05-18T15:21:33+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:1608" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.4.0.GA:python-cryptography-0:3.2.1-4.el8.src", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python-cryptography-debugsource-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-0:3.2.1-4.el8.x86_64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.aarch64", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.ppc64le", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.s390x", "BaseOS-8.4.0.GA:python3-cryptography-debuginfo-0:3.2.1-4.el8.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow" } ] }
rhsa-2021_3254
Vulnerability from csaf_redhat
Published
2021-08-24 12:50
Modified
2024-11-05 23:52
Summary
Red Hat Security Advisory: rh-python38 security, bug fix, and enhancement update
Notes
Topic
An update for rh-python38-babel, rh-python38-python, rh-python38-python-cryptography, rh-python38-python-jinja2, rh-python38-python-lxml, rh-python38-python-pip, and rh-python38-python-urllib3 is now available for Red Hat Software Collections.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
The following packages have been upgraded to a later upstream version: rh-python38-python (3.8.11). (BZ#1969523)
Security Fix(es):
* python-cryptography: Bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)
* python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)
* python-lxml: mXSS due to the use of improper parser (CVE-2020-27783)
* python-jinja2: ReDoS vulnerability due to the sub-pattern (CVE-2020-28493)
* python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow (CVE-2020-36242)
* python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c (CVE-2021-3177)
* python: Information disclosure via pydoc (CVE-2021-3426)
* python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (CVE-2021-20095)
* python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters (CVE-2021-23336)
* python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)
* python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)
* python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)
* python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional information
* Changes in the default separator for the Python urllib parsing functions
To mitigate the Web Cache Poisoning CVE-2021-23336 in the Python urllib library, the default separator for the urllib.parse.parse_qsl and urllib.parse.parse_qs functions is being changed from both ampersand (&) and semicolon (;) to only an ampersand.
The change of the default separator is potentially backwards incompatible, therefore Red Hat provides a way to configure the behavior in Python packages where the default separator has been changed. In addition, the affected urllib parsing functions issue a warning if they detect that a customer’s application has been affected by the change.
For more information, see the Knowledgebase article "Mitigation of Web Cache Poisoning in the Python urllib library (CVE-2021-23336)" linked from the References section.
* The Python "ipaddress" module no longer allows leading zeros in IPv4 addresses
To mitigate CVE-2021-29921, the Python "ipaddress" module now rejects IPv4 addresses with leading zeros with an "AddressValueError: Leading zeros are not permitted" error.
Customers who rely on the previous behavior can pre-process their IPv4 address inputs to strip the leading zeros off. For details, see the Red Hat Software Collections 3.7 Release Notes.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for rh-python38-babel, rh-python38-python, rh-python38-python-cryptography, rh-python38-python-jinja2, rh-python38-python-lxml, rh-python38-python-pip, and rh-python38-python-urllib3 is now available for Red Hat Software Collections.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nThe following packages have been upgraded to a later upstream version: rh-python38-python (3.8.11). (BZ#1969523)\n\nSecurity Fix(es):\n\n* python-cryptography: Bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)\n\n* python: Unsafe use of eval() on data retrieved via HTTP in the test suite (CVE-2020-27619)\n\n* python-lxml: mXSS due to the use of improper parser (CVE-2020-27783)\n\n* python-jinja2: ReDoS vulnerability due to the sub-pattern (CVE-2020-28493)\n\n* python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow (CVE-2020-36242)\n\n* python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c (CVE-2021-3177)\n\n* python: Information disclosure via pydoc (CVE-2021-3426)\n\n* python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (CVE-2021-20095)\n\n* python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters (CVE-2021-23336)\n\n* python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS (CVE-2021-28957)\n\n* python-ipaddress: Improper input validation of octal strings (CVE-2021-29921)\n\n* python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)\n\n* python-pip: Incorrect handling of unicode separators in git references (CVE-2021-3572)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional information\n\n* Changes in the default separator for the Python urllib parsing functions\n\nTo mitigate the Web Cache Poisoning CVE-2021-23336 in the Python urllib library, the default separator for the urllib.parse.parse_qsl and urllib.parse.parse_qs functions is being changed from both ampersand (\u0026) and semicolon (;) to only an ampersand.\n\nThe change of the default separator is potentially backwards incompatible, therefore Red Hat provides a way to configure the behavior in Python packages where the default separator has been changed. In addition, the affected urllib parsing functions issue a warning if they detect that a customer\u2019s application has been affected by the change.\n\nFor more information, see the Knowledgebase article \"Mitigation of Web Cache Poisoning in the Python urllib library (CVE-2021-23336)\" linked from the References section.\n\n* The Python \"ipaddress\" module no longer allows leading zeros in IPv4 addresses\n\nTo mitigate CVE-2021-29921, the Python \"ipaddress\" module now rejects IPv4 addresses with leading zeros with an \"AddressValueError: Leading zeros are not permitted\" error.\n\nCustomers who rely on the previous behavior can pre-process their IPv4 address inputs to strip the leading zeros off. For details, see the Red Hat Software Collections 3.7 Release Notes.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:3254", "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/articles/5860431", "url": "https://access.redhat.com/articles/5860431" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html-single/3.7_release_notes/index#sect-RHSCL-Other-notes", "url": "https://access.redhat.com/documentation/en-us/red_hat_software_collections/3/html-single/3.7_release_notes/index#sect-RHSCL-Other-notes" }, { "category": "external", "summary": "1889886", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889886" }, { "category": "external", "summary": "1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "1901633", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901633" }, { "category": "external", "summary": "1918168", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1918168" }, { "category": "external", "summary": "1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "external", "summary": "1928707", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1928707" }, { "category": "external", "summary": "1928904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1928904" }, { "category": "external", "summary": "1935913", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1935913" }, { "category": "external", "summary": "1941534", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941534" }, { "category": "external", "summary": "1955615", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1955615" }, { "category": "external", "summary": "1957458", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1957458" }, { "category": "external", "summary": "1962856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1962856" }, { "category": "external", "summary": "1968074", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968074" }, { "category": "external", "summary": "1969523", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1969523" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_3254.json" } ], "title": "Red Hat Security Advisory: rh-python38 security, bug fix, and enhancement update", "tracking": { "current_release_date": "2024-11-05T23:52:12+00:00", "generator": { "date": "2024-11-05T23:52:12+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2021:3254", "initial_release_date": "2021-08-24T12:50:36+00:00", "revision_history": [ { "date": "2021-08-24T12:50:36+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-08-24T12:50:36+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T23:52:12+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } }, { "category": "product_name", "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhel_software_collections:3::el7" } } } ], "category": "product_family", "name": "Red Hat Software Collections" }, { "branches": [ { "category": "product_version", "name": "rh-python38-babel-0:2.7.0-12.el7.src", "product": { "name": "rh-python38-babel-0:2.7.0-12.el7.src", "product_id": "rh-python38-babel-0:2.7.0-12.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-babel@2.7.0-12.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-pip-0:19.3.1-2.el7.src", "product": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.src", "product_id": "rh-python38-python-pip-0:19.3.1-2.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-pip@19.3.1-2.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "product": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "product_id": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-urllib3@1.25.7-7.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "product": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "product_id": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-jinja2@2.10.3-6.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "product": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "product_id": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml@4.4.1-7.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-0:2.8-5.el7.src", "product": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.src", "product_id": "rh-python38-python-cryptography-0:2.8-5.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography@2.8-5.el7?arch=src" } } }, { "category": "product_version", "name": "rh-python38-python-0:3.8.11-2.el7.src", "product": { "name": "rh-python38-python-0:3.8.11-2.el7.src", "product_id": "rh-python38-python-0:3.8.11-2.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python@3.8.11-2.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "product": { "name": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "product_id": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-babel@2.7.0-12.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "product": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "product_id": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-pip@19.3.1-2.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "product": { "name": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "product_id": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-pip-wheel@19.3.1-2.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "product": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "product_id": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-urllib3@1.25.7-7.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "product": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "product_id": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-jinja2@2.10.3-6.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "product": { "name": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "product_id": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-rpm-macros@3.8.11-2.el7?arch=noarch" } } }, { "category": "product_version", "name": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "product": { "name": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "product_id": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-srpm-macros@3.8.11-2.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "product": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "product_id": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml@4.4.1-7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "product": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "product_id": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml-debuginfo@4.4.1-7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "product": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "product_id": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography@2.8-5.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "product": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "product_id": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography-debuginfo@2.8-5.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debug@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-devel@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-idle@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-libs@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-test@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-tkinter@3.8.11-2.el7?arch=x86_64" } } }, { "category": "product_version", "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "product": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "product_id": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debuginfo@3.8.11-2.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "product": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "product_id": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml@4.4.1-7.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "product": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "product_id": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml-debuginfo@4.4.1-7.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "product": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "product_id": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography@2.8-5.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "product": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "product_id": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography-debuginfo@2.8-5.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debug@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-devel@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-idle@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-libs@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-test@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-tkinter@3.8.11-2.el7?arch=s390x" } } }, { "category": "product_version", "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "product": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "product_id": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debuginfo@3.8.11-2.el7?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "product": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "product_id": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml@4.4.1-7.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "product": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "product_id": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-lxml-debuginfo@4.4.1-7.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "product": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "product_id": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography@2.8-5.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "product": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "product_id": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-cryptography-debuginfo@2.8-5.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debug@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-devel@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-idle@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-libs@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-test@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-tkinter@3.8.11-2.el7?arch=ppc64le" } } }, { "category": "product_version", "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "product": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "product_id": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/rh-python38-python-debuginfo@3.8.11-2.el7?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rh-python38-babel-0:2.7.0-12.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src" }, "product_reference": "rh-python38-babel-0:2.7.0-12.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-babel-0:2.7.0-12.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch" }, "product_reference": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7-7.7.Z" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-babel-0:2.7.0-12.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src" }, "product_reference": "rh-python38-babel-0:2.7.0-12.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-babel-0:2.7.0-12.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch" }, "product_reference": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "relates_to_product_reference": "7Server-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-babel-0:2.7.0-12.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src" }, "product_reference": "rh-python38-babel-0:2.7.0-12.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-babel-0:2.7.0-12.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch" }, "product_reference": "rh-python38-python-babel-0:2.7.0-12.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64" }, "product_reference": "rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-jinja2-0:2.10.3-6.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src" }, "product_reference": "rh-python38-python-jinja2-0:2.10.3-6.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64" }, "product_reference": "rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-0:19.3.1-2.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src" }, "product_reference": "rh-python38-python-pip-0:19.3.1-2.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch" }, "product_reference": "rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch" }, "product_reference": "rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-test-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-test-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64 as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64" }, "product_reference": "rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "relates_to_product_reference": "7Workstation-RHSCL-3.7" }, { "category": "default_component_of", "full_product_name": { "name": "rh-python38-python-urllib3-0:1.25.7-7.el7.src as a component of Red Hat Software Collections for Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" }, "product_reference": "rh-python38-python-urllib3-0:1.25.7-7.el7.src", "relates_to_product_reference": "7Workstation-RHSCL-3.7" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Hubert Kario" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2020-25659", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2020-10-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1889988" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-cryptography, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-25659" }, { "category": "external", "summary": "RHBZ#1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-25659", "url": "https://www.cve.org/CVERecord?id=CVE-2020-25659" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-2" } ], "release_date": "2020-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption" }, { "cve": "CVE-2020-27619", "cwe": { "id": "CWE-95", "name": "Improper Neutralization of Directives in Dynamically Evaluated Code (\u0027Eval Injection\u0027)" }, "discovery_date": "2020-10-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1889886" } ], "notes": [ { "category": "description", "text": "In Python3\u0027s Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: Unsafe use of eval() on data retrieved via HTTP in the test suite", "title": "Vulnerability summary" }, { "category": "other", "text": "As of Red Hat Quay 3.4 the python runtime will be consumed from RHEL. Currently releases up to 3.3 won\u0027t get fixes for this moderate issue.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-27619" }, { "category": "external", "summary": "RHBZ#1889886", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889886" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-27619", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27619" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-27619", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27619" } ], "release_date": "2020-10-05T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "In versions of Python shipped with Red Hat Enterprise Linux and Red Hat Software Collections, the flaw can be mitigated by not running the python tests with network resources enabled. By default, the tests are not run with network resources enabled. Ensure that `-u network` or `-uall` are not passed as options to `python -m test`. For more information on how these commands work, see [1].\n\n1. https://docs.python.org/3/library/test.html", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: Unsafe use of eval() on data retrieved via HTTP in the test suite" }, { "cve": "CVE-2020-27783", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2020-11-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1901633" } ], "notes": [ { "category": "description", "text": "A Cross-site Scripting (XSS) vulnerability was found in the python-lxml\u0027s clean module. The module\u0027s parser did not properly imitate browsers, causing different behaviors between the sanitizer and the user\u0027s page. This flaw allows a remote attacker to run arbitrary HTML/JS code. The highest threat from this vulnerability is to confidentiality and integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-lxml: mXSS due to the use of improper parser", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-27783" }, { "category": "external", "summary": "RHBZ#1901633", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901633" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-27783", "url": "https://www.cve.org/CVERecord?id=CVE-2020-27783" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-27783", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-27783" } ], "release_date": "2020-10-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-lxml: mXSS due to the use of improper parser" }, { "cve": "CVE-2020-28493", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2021-02-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1928707" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-jinja2. The ReDOS vulnerability of the regex is mainly due to the sub-pattern [a-zA-Z0-9._-]+.[a-zA-Z0-9._-]+. This issue can be mitigated by Markdown to format user content instead of the urlize filter, or by implementing request timeouts and limiting process memory.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-jinja2: ReDoS vulnerability in the urlize filter", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw is out of support scope for the following products:\n\n* Red Hat Enterprise Linux 6\n* Red Hat Enterprise Linux 7\n* Red Hat Ceph Storage 2\n\nTo learn more about Red Hat Enterprise Linux support scopes, please see https://access.redhat.com/support/policy/updates/errata/\n\nIn Red Hat OpenStack Platform, because python-jinja2 is not directly customer exposed, the Impact has been moved to Low and no updated will be provided at this time for the RHOSP python-jinja2 package.\n\nRed Hat Quay does not make use of the vulnerable function, so the impact is Low.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-28493" }, { "category": "external", "summary": "RHBZ#1928707", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1928707" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-28493", "url": "https://www.cve.org/CVERecord?id=CVE-2020-28493" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-28493", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28493" } ], "release_date": "2021-02-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "If using the jinja2 library as a developer, this flaw can be mitigated by not using the vulnerable urlize() filter, and instead, using Markdown to format user content.", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-jinja2: ReDoS vulnerability in the urlize filter" }, { "cve": "CVE-2020-36242", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2021-02-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1926226" } ], "notes": [ { "category": "description", "text": "A buffer-overflow flaw was found in the python-cryptography package. In certain sequences of ``update()`` calls when symmetrically encrypting very large payloads (\u003e2GB) could result in an integer overflow, leading to buffer overflows. Note: This fix is a workaround for the OpenSSL CVE-2021-23840 flaw. Source: pyca/cryptography project", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow", "title": "Vulnerability summary" }, { "category": "other", "text": "Triggering this flaw on in versions of python-cryptography as shipped with Red Hat Enterprise Linux 8 BaseOS, Appstream, as well as Red Hat Software Collections, can result in denial of service due to memory consumption or MemoryError exception.\n\nIn Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-36242" }, { "category": "external", "summary": "RHBZ#1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-36242", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36242" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-3-2" } ], "release_date": "2020-12-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow" }, { "cve": "CVE-2021-3177", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)" }, "discovery_date": "2021-01-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1918168" } ], "notes": [ { "category": "description", "text": "A flaw was found in python. A stack-based buffer overflow was discovered in the ctypes module provided within Python. Applications that use ctypes without carefully validating the input passed to it may be vulnerable to this flaw, which would allow an attacker to overflow a buffer on the stack and crash the application. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw could have had a higher Impact, however our packages are compiled with FORTIFY_SOURCE, which provides runtime protection to some memory and string functions and prevents this flaw from actually overwriting the buffer and potentially executing code.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3177" }, { "category": "external", "summary": "RHBZ#1918168", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1918168" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3177", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3177" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3177", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3177" } ], "release_date": "2021-01-19T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c" }, { "acknowledgments": [ { "names": [ "David Schw\u00f6rer" ], "organization": "Fedora" } ], "cve": "CVE-2021-3426", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2021-01-19T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1935913" } ], "notes": [ { "category": "description", "text": "A flaw was found in Python 3\u0027s pydoc. This flaw allows a local or adjacent attacker who discovers or can convince another local or adjacent user to start a pydoc server to access the server and then use it to disclose sensitive information belonging to the other user that they would not normally have the ability to access. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: Information disclosure via pydoc", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Quay from version 3.4 uses Python from Red Hat Enterprise Linux RPM repositories and therefore may receive an update for this issue in a future release. Earlier versions of Red Hat Quay will not receive a patch for this issue.\n\nPython 2.x.x as shipped in any Red Hat product is not affected. This flaw is out of support scope for python3 as shipped with Red Hat Enterprise Linux 7. For more information about Red Hat Enterprise Linux support scope, please see https://access.redhat.com/support/policy/updates/errata/ .", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3426" }, { "category": "external", "summary": "RHBZ#1935913", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1935913" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3426", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3426" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3426", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3426" } ], "release_date": "2021-03-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "Use the console (no argument needed) or HTML file (-w argument) output to generate docs rather than the HTTP server options. Put differently, do not use the -p or -n options of pydoc.", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: Information disclosure via pydoc" }, { "cve": "CVE-2021-3572", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-05-19T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1962856" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-pip: Incorrect handling of unicode separators in git references", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has been rated as having a security impact of Low. To exploit this flaw, the attacker needs access to the repository to create a specially crafted tag and force a different revision to be installed.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3572" }, { "category": "external", "summary": "RHBZ#1962856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1962856" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3572", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3572" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3572", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3572" } ], "release_date": "2021-04-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "python-pip: Incorrect handling of unicode separators in git references" }, { "cve": "CVE-2021-3733", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2021-08-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1995234" } ], "notes": [ { "category": "description", "text": "There\u0027s a flaw in urllib\u0027s AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: urllib: Regular expression DoS in AbstractBasicAuthHandler", "title": "Vulnerability summary" }, { "category": "other", "text": "Applications that use AbstractBasicAuthHandler, HTTPBasicAuthHandler and ProxyBasicAuthHandler may be affected by this flaw. Other classes may use the vulnerable method http_error_auth_reqed in AbstractBasicAuthHandler as well.\n\nThis flaw is out of support scope for versions of Python shipped in Red Hat Enterprise Linux 7 base OS and Red Hat Enterprise Linux 6. For more information about support life cycles, please see https://access.redhat.com/support/policy/updates/errata/", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-3733" }, { "category": "external", "summary": "RHBZ#1995234", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1995234" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-3733", "url": "https://www.cve.org/CVERecord?id=CVE-2021-3733" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-3733", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3733" }, { "category": "external", "summary": "https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-14-final", "url": "https://docs.python.org/3.6/whatsnew/changelog.html#python-3-6-14-final" }, { "category": "external", "summary": "https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-11-final", "url": "https://docs.python.org/3.7/whatsnew/changelog.html#python-3-7-11-final" }, { "category": "external", "summary": "https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-10-final", "url": "https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-10-final" }, { "category": "external", "summary": "https://docs.python.org/3.9/whatsnew/changelog.html#python-3-9-5-final", "url": "https://docs.python.org/3.9/whatsnew/changelog.html#python-3-9-5-final" } ], "release_date": "2021-08-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: urllib: Regular expression DoS in AbstractBasicAuthHandler" }, { "cve": "CVE-2021-4189", "cwe": { "id": "CWE-252", "name": "Unchecked Return Value" }, "discovery_date": "2021-12-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2036020" } ], "notes": [ { "category": "description", "text": "A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: ftplib should not use the host from the PASV response", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-4189" }, { "category": "external", "summary": "RHBZ#2036020", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2036020" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-4189", "url": "https://www.cve.org/CVERecord?id=CVE-2021-4189" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-4189", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4189" }, { "category": "external", "summary": "https://bugs.python.org/issue43285", "url": "https://bugs.python.org/issue43285" } ], "release_date": "2021-12-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: ftplib should not use the host from the PASV response" }, { "cve": "CVE-2021-20095", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2021-04-29T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1955615" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from this vulnerability is to data confidentiality and integrity as well as service availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code", "title": "Vulnerability summary" }, { "category": "other", "text": "It is rather uncommon for applications to use Babel.Locale() with an untrusted attacker-controlled language argument. A static language abbreviation string (e.g. \"en\") is most commonly used instead. For this reason, this flaw has been rated as having a security impact of Moderate.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-20095" }, { "category": "external", "summary": "RHBZ#1955615", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1955615" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-20095", "url": "https://www.cve.org/CVERecord?id=CVE-2021-20095" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-20095", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-20095" }, { "category": "external", "summary": "https://www.tenable.com/security/research/tra-2021-14", "url": "https://www.tenable.com/security/research/tra-2021-14" } ], "release_date": "2021-04-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code" }, { "cve": "CVE-2021-23336", "cwe": { "id": "CWE-444", "name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)" }, "discovery_date": "2021-02-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1928904" } ], "notes": [ { "category": "description", "text": "The package python/cpython is vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters", "title": "Vulnerability summary" }, { "category": "other", "text": "The python36 component in the python36:3.6 module in Red Hat Enterprise Linux 8 is listed as not affected, as it does not contain Python interpreter or libraries. Packages of the python36 component only provide convenient links to the Python interpreter included in the non-modular python3 component\u0027s platform-python packages. Users of python36:3.6 module also need to check the entry for the python3 component to determine if their systems are affected.\n\nRed Hat Ceph Storage (RHCS) 3 ships an older version of python-django without the directly affected function, but which is still vulnerable to a similar attack involving the semi colon separator. Hence, impact has been rated as Low.\n\nAlthough Red Hat OpenStack Platform 13 \u0026 16.1 both ship the affected code, since the proxy is controlled and configured by OpenStack, the impact has been lowered to Low. As a fix would require a substantial effort or commitment of time, no fix will be provided at this time.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-23336" }, { "category": "external", "summary": "RHBZ#1928904", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1928904" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-23336", "url": "https://www.cve.org/CVERecord?id=CVE-2021-23336" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-23336", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-23336" }, { "category": "external", "summary": "https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933", "url": "https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933" } ], "release_date": "2021-02-13T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters" }, { "cve": "CVE-2021-28957", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2021-03-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1941534" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-lxml. The HTML5 formaction attribute is not input sanitized like the HTML action attribute is which can lead to a Cross-Site Scripting attack (XSS) when an application uses python-lxml to sanitize user inputs. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS", "title": "Vulnerability summary" }, { "category": "other", "text": "Web applications vulnerable to this flaw, where a XSS attack can be accomplished, are only those that use python-lxml to sanitize HTML input and that allow user data to be placed in the \"formaction\" attribute of a form button.\n\nIn Red Hat OpenStack Platform, because the flaw has a lower impact and the package is unlikely to be exploited in the RHOSP environment, no update will be provided at this time for the RHOSP python-lxml package.\n\nFor Ansible Tower and Ansible Automation Platform, Lowering the impact from Moderate to Low as the vulnerable function i.e. lxml HTML Cleaner and the vulnerable attribute i.e. HTML FormAction are not being used.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-28957" }, { "category": "external", "summary": "RHBZ#1941534", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1941534" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-28957", "url": "https://www.cve.org/CVERecord?id=CVE-2021-28957" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-28957", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28957" } ], "release_date": "2021-03-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-lxml: Missing input sanitization for formaction HTML5 attributes may lead to XSS" }, { "cve": "CVE-2021-29921", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2021-04-30T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1957458" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-ipaddress. Improper input validation of octal strings in stdlib ipaddress allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many programs that rely on Python stdlib ipaddress. The highest threat from this vulnerability is to data integrity and system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-ipaddress: Improper input validation of octal strings", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-29921" }, { "category": "external", "summary": "RHBZ#1957458", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1957458" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-29921", "url": "https://www.cve.org/CVERecord?id=CVE-2021-29921" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-29921", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29921" }, { "category": "external", "summary": "https://python-security.readthedocs.io/vuln/ipaddress-ipv4-leading-zeros.html", "url": "https://python-security.readthedocs.io/vuln/ipaddress-ipv4-leading-zeros.html" } ], "release_date": "2021-04-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-ipaddress: Improper input validation of octal strings" }, { "cve": "CVE-2021-33503", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2021-06-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1968074" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-urllib3. When provided with a URL containing many @ characters in the authority component, the authority\u0027s regular expression exhibits catastrophic backtracking. This flaw causes a denial of service if a URL is passed as a parameter or redirected via an HTTP redirect. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-urllib3: ReDoS in the parsing of authority part of URL", "title": "Vulnerability summary" }, { "category": "other", "text": "* Red Hat OpenShift Container Platform (OCP) 4 delivers the python-urllib3 package which includes a vulnerable version of urllib3 module, however from OCP 4.6 the python-urllib3 package is no longer shipped. OCP 4.5 is out of support scope for Moderate and Low impact vulnerabilities, hence is marked Out Of Support Scope.\nThe python-urllib3 package used in OCP 3.11 is not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-33503" }, { "category": "external", "summary": "RHBZ#1968074", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1968074" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-33503", "url": "https://www.cve.org/CVERecord?id=CVE-2021-33503" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-33503", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-33503" }, { "category": "external", "summary": "https://github.com/advisories/GHSA-q2q7-5pp4-w6pg", "url": "https://github.com/advisories/GHSA-q2q7-5pp4-w6pg" } ], "release_date": "2021-06-01T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-urllib3: ReDoS in the parsing of authority part of URL" }, { "cve": "CVE-2021-42771", "cwe": { "id": "CWE-22", "name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)" }, "discovery_date": "2021-04-29T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1955615" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from this vulnerability is to data confidentiality and integrity as well as service availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code", "title": "Vulnerability summary" }, { "category": "other", "text": "It is rather uncommon for applications to use Babel.Locale() with an untrusted attacker-controlled language argument. A static language abbreviation string (e.g. \"en\") is most commonly used instead. For this reason, this flaw has been rated as having a security impact of Moderate.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-42771" }, { "category": "external", "summary": "RHBZ#1955615", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1955615" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-42771", "url": "https://www.cve.org/CVERecord?id=CVE-2021-42771" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-42771", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42771" }, { "category": "external", "summary": "https://www.tenable.com/security/research/tra-2021-14", "url": "https://www.tenable.com/security/research/tra-2021-14" } ], "release_date": "2021-04-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code" }, { "cve": "CVE-2022-0391", "cwe": { "id": "CWE-74", "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)" }, "discovery_date": "2021-12-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2047376" } ], "notes": [ { "category": "description", "text": "A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like \u0027\\r\u0027 and \u0027\\n\u0027 in the URL path. This flaw allows an attacker to input a crafted URL, leading to injection attacks.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: urllib.parse does not sanitize URLs containing ASCII newline and tabs", "title": "Vulnerability summary" }, { "category": "other", "text": "Versions of python36:3.6/python36 as shipped with Red Hat Enterprise Linux 8 are marked as \u0027Not affected\u0027 as they just provide \"symlinks\" to the main python3 component, which provides the actual interpreter of the Python programming language.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2022-0391" }, { "category": "external", "summary": "RHBZ#2047376", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2047376" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2022-0391", "url": "https://www.cve.org/CVERecord?id=CVE-2022-0391" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2022-0391", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-0391" } ], "release_date": "2021-04-18T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-08-24T12:50:36+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:3254" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1" }, "products": [ "7Server-RHSCL-3.7-7.7.Z:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7-7.7.Z:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Server-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Server-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Server-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Server-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Server-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Server-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-babel-0:2.7.0-12.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-babel-0:2.7.0-12.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-cryptography-debuginfo-0:2.8-5.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debug-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-debuginfo-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-devel-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-idle-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-jinja2-0:2.10.3-6.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-libs-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-lxml-debuginfo-0:4.4.1-7.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-pip-0:19.3.1-2.el7.src", "7Workstation-RHSCL-3.7:rh-python38-python-pip-wheel-0:19.3.1-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-rpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-srpm-macros-0:3.8.11-2.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-test-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.ppc64le", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.s390x", "7Workstation-RHSCL-3.7:rh-python38-python-tkinter-0:3.8.11-2.el7.x86_64", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.noarch", "7Workstation-RHSCL-3.7:rh-python38-python-urllib3-0:1.25.7-7.el7.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: urllib.parse does not sanitize URLs containing ASCII newline and tabs" } ] }
rhsa-2021_2239
Vulnerability from csaf_redhat
Published
2021-06-03 10:26
Modified
2024-11-05 23:38
Summary
Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]
Notes
Topic
An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks.
The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks.
The ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks.
Security Fix(es):
* python-cryptography: bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)
* krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS (CVE-2020-28196)
* python-cryptography: certain sequences of update() calls when symmetrically encrypting very large payloads could result in an integer overflow and lead to buffer overflows (CVE-2020-36242)
For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Previously, old RPM files were not properly removed during package removal (uninistall) or upgrade. As a result, removed packages were reinstalled, or, during and upgrade, the system tried to install two or more different versions at once, causing the upgrade to fail.
In this release, the dnf plugin has been fixed, and RPM packages are now properly removed.
The new version will also auto-heal the broken system by removing RPM packages which are not supposed to be in the persisted-rpms directory. (BZ#1936972)
* With this release, ovirt-hosted-engine-ha supports multiple, comma-separated values for all iSCSI configuration items. (BZ#1909888)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for imgbased, redhat-release-virtualization-host, and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host\u0027s resources and performing administrative tasks.\n\nThe redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host\u0027s resources and performing administrative tasks. \n\nThe ovirt-node-ng packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host, ovirt-node, and rhev-hypervisor. Red Hat Virtualization Hosts (RHVH) are installed using a special build of Red Hat Enterprise Linux with only the packages required to host virtual machines. RHVH features a Cockpit user interface for monitoring the host\u0027s resources and performing administrative tasks.\n\nSecurity Fix(es):\n\n* python-cryptography: bleichenbacher timing oracle attack against RSA decryption (CVE-2020-25659)\n\n* krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS (CVE-2020-28196)\n\n* python-cryptography: certain sequences of update() calls when symmetrically encrypting very large payloads could result in an integer overflow and lead to buffer overflows (CVE-2020-36242)\n\nFor more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Previously, old RPM files were not properly removed during package removal (uninistall) or upgrade. As a result, removed packages were reinstalled, or, during and upgrade, the system tried to install two or more different versions at once, causing the upgrade to fail.\nIn this release, the dnf plugin has been fixed, and RPM packages are now properly removed.\nThe new version will also auto-heal the broken system by removing RPM packages which are not supposed to be in the persisted-rpms directory. (BZ#1936972)\n\n* With this release, ovirt-hosted-engine-ha supports multiple, comma-separated values for all iSCSI configuration items. (BZ#1909888)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:2239", "url": "https://access.redhat.com/errata/RHSA-2021:2239" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1779052", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1779052" }, { "category": "external", "summary": "1882542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1882542" }, { "category": "external", "summary": "1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "1897893", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1897893" }, { "category": "external", "summary": "1901041", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901041" }, { "category": "external", "summary": "1901878", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901878" }, { "category": "external", "summary": "1909888", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1909888" }, { "category": "external", "summary": "1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "external", "summary": "1931443", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1931443" }, { "category": "external", "summary": "1936972", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1936972" }, { "category": "external", "summary": "1938925", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1938925" }, { "category": "external", "summary": "1942580", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1942580" }, { "category": "external", "summary": "1944632", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1944632" }, { "category": "external", "summary": "1946095", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1946095" }, { "category": "external", "summary": "1948944", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1948944" }, { "category": "external", "summary": "1949431", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1949431" }, { "category": "external", "summary": "1957604", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1957604" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2239.json" } ], "title": "Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]", "tracking": { "current_release_date": "2024-11-05T23:38:54+00:00", "generator": { "date": "2024-11-05T23:38:54+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.1.1" } }, "id": "RHSA-2021:2239", "initial_release_date": "2021-06-03T10:26:34+00:00", "revision_history": [ { "date": "2021-06-03T10:26:34+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-06-03T10:26:34+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-05T23:38:54+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product": { "name": "RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhev_hypervisor:4.4::el8" } } }, { "category": "product_name", "name": "Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product": { "name": "Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product_id": "8Base-RHV-Agents-4", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhev_hypervisor:4.4::el8" } } }, { "category": "product_name", "name": "Red Hat Virtualization 4 Hypervisor for RHEL 8", "product": { "name": "Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhev_hypervisor:4.4::el8" } } } ], "category": "product_family", "name": "Red Hat Virtualization" }, { "branches": [ { "category": "product_version", "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "product": { "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "product_id": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-release-virtualization-host@4.4.6-1.el8ev?arch=src" } } }, { "category": "product_version", "name": "imgbased-0:1.2.19-1.el8ev.src", "product": { "name": "imgbased-0:1.2.19-1.el8ev.src", "product_id": "imgbased-0:1.2.19-1.el8ev.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/imgbased@1.2.19-1.el8ev?arch=src" } } }, { "category": "product_version", "name": "scap-security-guide-0:0.1.54-1.el8ev.src", "product": { "name": "scap-security-guide-0:0.1.54-1.el8ev.src", "product_id": "scap-security-guide-0:0.1.54-1.el8ev.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/scap-security-guide@0.1.54-1.el8ev?arch=src" } } }, { "category": "product_version", "name": "cockpit-ovirt-0:0.15.0-2.el8ev.src", "product": { "name": "cockpit-ovirt-0:0.15.0-2.el8ev.src", "product_id": "cockpit-ovirt-0:0.15.0-2.el8ev.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-ovirt@0.15.0-2.el8ev?arch=src" } } }, { "category": "product_version", "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "product": { "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "product_id": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ovirt-hosted-engine-ha@2.4.7-1.el8ev?arch=src" } } }, { "category": "product_version", "name": "redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "product": { "name": "redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "product_id": "redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-virtualization-host@4.4.6-20210527.3.el8_4?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "product": { "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "product_id": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-release-virtualization-host@4.4.6-1.el8ev?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "product_id": "elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-debuginfod-client@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debugsource-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-debugsource-0:0.182-3.el8.x86_64", "product_id": "elfutils-debugsource-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-debugsource@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debuginfo-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-debuginfo-0:0.182-3.el8.x86_64", "product_id": "elfutils-debuginfo-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-debuginfo@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "product_id": "elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-debuginfod-client-debuginfo@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "product_id": "elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-debuginfod-debuginfo@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "product_id": "elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-libelf-debuginfo@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "product": { "name": "elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "product_id": "elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/elfutils-libs-debuginfo@0.182-3.el8?arch=x86_64" } } }, { "category": "product_version", "name": "redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64", "product": { "name": "redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64", "product_id": "redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-virtualization-host-image-update@4.4.6-20210527.3.el8_4?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "product": { "name": "redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "product_id": "redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/redhat-virtualization-host-image-update-placeholder@4.4.6-1.el8ev?arch=noarch" } } }, { "category": "product_version", "name": "imgbased-0:1.2.19-1.el8ev.noarch", "product": { "name": "imgbased-0:1.2.19-1.el8ev.noarch", "product_id": "imgbased-0:1.2.19-1.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/imgbased@1.2.19-1.el8ev?arch=noarch" } } }, { "category": "product_version", "name": "python3-imgbased-0:1.2.19-1.el8ev.noarch", "product": { "name": "python3-imgbased-0:1.2.19-1.el8ev.noarch", "product_id": "python3-imgbased-0:1.2.19-1.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-imgbased@1.2.19-1.el8ev?arch=noarch" } } }, { "category": "product_version", "name": "scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch", "product": { "name": "scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch", "product_id": "scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/scap-security-guide-rhv@0.1.54-1.el8ev?arch=noarch" } } }, { "category": "product_version", "name": "cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "product": { "name": "cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "product_id": "cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/cockpit-ovirt-dashboard@0.15.0-2.el8ev?arch=noarch" } } }, { "category": "product_version", "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "product": { "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "product_id": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ovirt-hosted-engine-ha@2.4.7-1.el8ev?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "cockpit-ovirt-0:0.15.0-2.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product_id": "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src" }, "product_reference": "cockpit-ovirt-0:0.15.0-2.el8ev.src", "relates_to_product_reference": "8Base-RHV-Agents-4" }, { "category": "default_component_of", "full_product_name": { "name": "cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product_id": "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch" }, "product_reference": "cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-Agents-4" }, { "category": "default_component_of", "full_product_name": { "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product_id": "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch" }, "product_reference": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-Agents-4" }, { "category": "default_component_of", "full_product_name": { "name": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src as a component of Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts", "product_id": "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src" }, "product_reference": "ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "relates_to_product_reference": "8Base-RHV-Agents-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfo-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-debuginfo-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-debugsource-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-debugsource-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "elfutils-libs-debuginfo-0:0.182-3.el8.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64" }, "product_reference": "elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src" }, "product_reference": "redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8", "product_id": "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" }, "product_reference": "redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64", "relates_to_product_reference": "8Base-RHV-Hypervisor-4" }, { "category": "default_component_of", "full_product_name": { "name": "imgbased-0:1.2.19-1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch" }, "product_reference": "imgbased-0:1.2.19-1.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "imgbased-0:1.2.19-1.el8ev.src as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src" }, "product_reference": "imgbased-0:1.2.19-1.el8ev.src", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "python3-imgbased-0:1.2.19-1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch" }, "product_reference": "python3-imgbased-0:1.2.19-1.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.src as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src" }, "product_reference": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64 as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64" }, "product_reference": "redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch" }, "product_reference": "redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "scap-security-guide-0:0.1.54-1.el8ev.src as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src" }, "product_reference": "scap-security-guide-0:0.1.54-1.el8ev.src", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" }, { "category": "default_component_of", "full_product_name": { "name": "scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)", "product_id": "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" }, "product_reference": "scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch", "relates_to_product_reference": "8Base-RHV-HypervisorBuild-4" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Hubert Kario" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2020-25659", "cwe": { "id": "CWE-385", "name": "Covert Timing Channel" }, "discovery_date": "2020-10-21T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1889988" } ], "notes": [ { "category": "description", "text": "A flaw was found in python-cryptography, where it is vulnerable to Bleichenbacher timing attacks. This flaw allows an attacker, via the RSA decryption API, to decrypt parts of the ciphertext encrypted with RSA. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "known_not_affected": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-25659" }, { "category": "external", "summary": "RHBZ#1889988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1889988" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-25659", "url": "https://www.cve.org/CVERecord?id=CVE-2020-25659" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25659" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-2" } ], "release_date": "2020-10-25T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-06-03T10:26:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891", "product_ids": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:2239" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Bleichenbacher timing oracle attack against RSA decryption" }, { "cve": "CVE-2020-28196", "cwe": { "id": "CWE-674", "name": "Uncontrolled Recursion" }, "discovery_date": "2020-11-06T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1901041" } ], "notes": [ { "category": "description", "text": "A flaw was found in krb5. MIT Kerberos 5 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.", "title": "Vulnerability description" }, { "category": "summary", "text": "krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "known_not_affected": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-28196" }, { "category": "external", "summary": "RHBZ#1901041", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1901041" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-28196", "url": "https://www.cve.org/CVERecord?id=CVE-2020-28196" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-28196", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-28196" } ], "release_date": "2020-11-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-06-03T10:26:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891", "product_ids": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:2239" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS" }, { "cve": "CVE-2020-36242", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2021-02-07T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1926226" } ], "notes": [ { "category": "description", "text": "A buffer-overflow flaw was found in the python-cryptography package. In certain sequences of ``update()`` calls when symmetrically encrypting very large payloads (\u003e2GB) could result in an integer overflow, leading to buffer overflows. Note: This fix is a workaround for the OpenSSL CVE-2021-23840 flaw. Source: pyca/cryptography project", "title": "Vulnerability description" }, { "category": "summary", "text": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow", "title": "Vulnerability summary" }, { "category": "other", "text": "Triggering this flaw on in versions of python-cryptography as shipped with Red Hat Enterprise Linux 8 BaseOS, Appstream, as well as Red Hat Software Collections, can result in denial of service due to memory consumption or MemoryError exception.\n\nIn Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP python-cryptography package.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "known_not_affected": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-36242" }, { "category": "external", "summary": "RHBZ#1926226", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1926226" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-36242", "url": "https://www.cve.org/CVERecord?id=CVE-2020-36242" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242" }, { "category": "external", "summary": "https://cryptography.io/en/latest/changelog.html#v3-3-2", "url": "https://cryptography.io/en/latest/changelog.html#v3-3-2" } ], "release_date": "2020-12-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-06-03T10:26:34+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/2974891", "product_ids": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:2239" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "8Base-RHV-Agents-4:cockpit-ovirt-0:0.15.0-2.el8ev.src", "8Base-RHV-Agents-4:cockpit-ovirt-dashboard-0:0.15.0-2.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.noarch", "8Base-RHV-Agents-4:ovirt-hosted-engine-ha-0:2.4.7-1.el8ev.src", "8Base-RHV-Hypervisor-4:elfutils-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-client-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debuginfod-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-debugsource-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libelf-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:elfutils-libs-debuginfo-0:0.182-3.el8.x86_64", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:imgbased-0:1.2.19-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:python3-imgbased-0:1.2.19-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:redhat-release-virtualization-host-0:4.4.6-1.el8ev.x86_64", "8Base-RHV-HypervisorBuild-4:redhat-virtualization-host-image-update-placeholder-0:4.4.6-1.el8ev.noarch", "8Base-RHV-HypervisorBuild-4:scap-security-guide-0:0.1.54-1.el8ev.src", "8Base-RHV-HypervisorBuild-4:scap-security-guide-rhv-0:0.1.54-1.el8ev.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "8Base-RHV-Hypervisor-4:redhat-virtualization-host-0:4.4.6-20210527.3.el8_4.src", "8Base-RHV-Hypervisor-4:redhat-virtualization-host-image-update-0:4.4.6-20210527.3.el8_4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python-cryptography: Large inputs for symmetric encryption can trigger integer overflow leading to buffer overflow" } ] }
ghsa-rhm9-p9w5-fwm7
Vulnerability from github
Published
2021-02-10 01:32
Modified
2024-09-13 18:33
Severity ?
9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
8.8 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
8.8 (High) - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
Summary
PyCA Cryptography symmetrically encrypting large values can lead to integer overflow
Details
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. When certain sequences of update()
calls with large values (multiple GBs) for symetric encryption or decryption occur, it's possible for an integer overflow to happen, leading to mishandling of buffers. This is patched in version 3.3.2 and newer.
{ "affected": [ { "ecosystem_specific": { "affected_functions": [ "cryptography.hazmat.backends.openssl.ciphers._CipherContext" ] }, "package": { "ecosystem": "PyPI", "name": "cryptography" }, "ranges": [ { "events": [ { "introduced": "3.1" }, { "fixed": "3.3.2" } ], "type": "ECOSYSTEM" } ] } ], "aliases": [ "CVE-2020-36242" ], "database_specific": { "cwe_ids": [ "CWE-190", "CWE-787" ], "github_reviewed": true, "github_reviewed_at": "2021-02-10T01:31:02Z", "nvd_published_at": "2021-02-07T20:15:00Z", "severity": "HIGH" }, "details": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. When certain sequences of `update()` calls with large values (multiple GBs) for symetric encryption or decryption occur, it\u0027s possible for an integer overflow to happen, leading to mishandling of buffers. This is patched in version 3.3.2 and newer.\n", "id": "GHSA-rhm9-p9w5-fwm7", "modified": "2024-09-13T18:33:13Z", "published": "2021-02-10T01:32:27Z", "references": [ { "type": "WEB", "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-rhm9-p9w5-fwm7" }, { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36242" }, { "type": "WEB", "url": "https://github.com/pyca/cryptography/issues/5615" }, { "type": "WEB", "url": "https://github.com/pyca/cryptography/commit/82b6ce28389f0a317bc55ba2091a74b346db7cae" }, { "type": "ADVISORY", "url": "https://github.com/advisories/GHSA-rhm9-p9w5-fwm7" }, { "type": "PACKAGE", "url": "https://github.com/pyca/cryptography" }, { "type": "WEB", "url": "https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst" }, { "type": "WEB", "url": "https://github.com/pyca/cryptography/compare/3.3.1...3.3.2" }, { "type": "WEB", "url": "https://github.com/pypa/advisory-database/tree/main/vulns/cryptography/PYSEC-2021-63.yaml" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E" }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E" }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "type": "CVSS_V3" }, { "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N", "type": "CVSS_V4" } ], "summary": "PyCA Cryptography symmetrically encrypting large values can lead to integer overflow" }
gsd-2020-36242
Vulnerability from gsd
Modified
2023-12-13 01:21
Details
In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2020-36242", "description": "In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.", "id": "GSD-2020-36242", "references": [ "https://www.suse.com/security/cve/CVE-2020-36242.html", "https://access.redhat.com/errata/RHSA-2021:3254", "https://access.redhat.com/errata/RHSA-2021:2239", "https://access.redhat.com/errata/RHSA-2021:1608", "https://advisories.mageia.org/CVE-2020-36242.html", "https://security.archlinux.org/CVE-2020-36242", "https://linux.oracle.com/cve/CVE-2020-36242.html" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2020-36242" ], "details": "In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.", "id": "GSD-2020-36242", "modified": "2023-12-13T01:21:55.450222Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2020-36242", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/pyca/cryptography/issues/5615", "refsource": "MISC", "url": "https://github.com/pyca/cryptography/issues/5615" }, { "name": "FEDORA-2021-8e36e7ed1a", "refsource": "FEDORA", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/" }, { "name": "https://www.oracle.com/security-alerts/cpuapr2022.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "name": "https://github.com/pyca/cryptography/compare/3.3.1...3.3.2", "refsource": "CONFIRM", "url": "https://github.com/pyca/cryptography/compare/3.3.1...3.3.2" }, { "name": "https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst", "refsource": "CONFIRM", "url": "https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst" }, { "name": "https://www.oracle.com/security-alerts/cpujul2022.html", "refsource": "MISC", "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ] } }, "gitlab.com": { "advisories": [ { "affected_range": "\u003c3.3.2", "affected_versions": "All versions before 3.3.2", "cvss_v2": "AV:N/AC:L/Au:N/C:P/I:N/A:P", "cvss_v3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "cwe_ids": [ "CWE-1035", "CWE-120", "CWE-190", "CWE-937" ], "date": "2021-07-21", "description": "In the cryptography package for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.", "fixed_versions": [ "3.3.2" ], "identifier": "CVE-2020-36242", "identifiers": [ "CVE-2020-36242" ], "not_impacted": "All versions starting from 3.3.2", "package_slug": "pypi/cryptography", "pubdate": "2021-02-07", "solution": "Upgrade to version 3.3.2 or above.", "title": "Integer Overflow or Wraparound", "urls": [ "https://nvd.nist.gov/vuln/detail/CVE-2020-36242" ], "uuid": "30f28712-557f-4730-bb50-7715cf75c14b" } ] }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:cryptography_project:cryptography:*:*:*:*:*:python:*:*", "cpe_name": [], "versionEndExcluding": "3.3.2", "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2020-36242" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-787" }, { "lang": "en", "value": "CWE-190" } ] } ] }, "references": { "reference_data": [ { "name": "https://github.com/pyca/cryptography/issues/5615", "refsource": "MISC", "tags": [ "Exploit", "Patch", "Third Party Advisory" ], "url": "https://github.com/pyca/cryptography/issues/5615" }, { "name": "https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst", "refsource": "CONFIRM", "tags": [ "Release Notes", "Third Party Advisory" ], "url": "https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst" }, { "name": "https://github.com/pyca/cryptography/compare/3.3.1...3.3.2", "refsource": "CONFIRM", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://github.com/pyca/cryptography/compare/3.3.1...3.3.2" }, { "name": "FEDORA-2021-8e36e7ed1a", "refsource": "FEDORA", "tags": [ "Mailing List", "Third Party Advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L7RGQLK4J5ZQFRLKCHVVG6BKZTUQMG7E/" }, { "name": "https://www.oracle.com/security-alerts/cpuapr2022.html", "refsource": "MISC", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "name": "N/A", "refsource": "N/A", "tags": [ "Patch", "Third Party Advisory" ], "url": "https://www.oracle.com/security-alerts/cpujul2022.html" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.2 } }, "lastModifiedDate": "2022-12-06T21:52Z", "publishedDate": "2021-02-07T20:15Z" } } }
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.