Описание
ELSA-2021-4160: python39:3.9 and python39-devel:3.9 security update (MODERATE)
mod_wsgi [4.7.1-4]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[4.7.1-3]
[4.7.1-2]
- Rebuilt for Python 3.9
[4.7.1-1]
- update to 4.7.1 (#1721376)
numpy [1.19.4-3]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055
[1.19.4-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1:1.19.4-1]
- 1.19.4
python-cffi [1.14.3-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1.14.3-1]
- Update to 1.14.3
[1.14.2-1]
- Update to 1.14.2 (#1869032)
[1.14.1-1]
- Update to 1.14.1
- Fixes: rhbz#1860698
- Fixes: rhbz#1865276
python-cryptography [3.3.1-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[3.3.1-1]
- Update to 3.3.1 (#1905756)
python-idna [2.10-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[2.10-2]
[2.10-1]
- Update to 2.10 (#1851653)
[2.9-2]
- Rebuilt for Python 3.9
[2.9-1]
- Update to 2.9 (#1803654)
python-lxml [4.6.2-3]
- Security fix for CVE-2021-28957 Resolves: rhbz#1941534
[4.6.2-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[4.6.2-1]
- Update to 4.6.2
- Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
- Fixes: rhbz#1855415
- Fixes: rhbz#1901634
python-psutil [5.8.0-4]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[5.8.0-3]
- Disable test_leak_mem test.
[5.8.0-2]
- Disable test_sensors_temperatures test.
[5.8.0-1]
- Update to 5.8.0. Fixes rhbz#1909321
- Re-enable tests (skipping 2 that fail in mock).
python-psycopg2 [2.8.6-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[2.8.6-1]
- Rebase to upstream version 2.8.6
python-pycparser [2.20-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[2.20-2]
[2.20-1]
- Update to 2.20 (#1810349)
python-requests [2.25.0-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[2.25.0-1]
- Update to 2.25.0
python-toml [0.10.1-5]
- Convert spec for python39 module in RHEL8
- Revert usage of pyproject-rpm-macros
- Resolves: rhbz#1877430
[0.10.1-4]
- Dont BR pytest-cov
[0.10.1-3]
- Use pyproject-rpm-macros
[0.10.1-2]
[0.10.1-1]
- Update to 0.10.1 (#1835567)
python-urllib3 [1.25.10-4]
- Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser Resolves: rhbz#1968074
[1.25.10-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1.25.10-2]
- Update RECENT_DATE dynamically
[1.25.10-1]
- Update to 1.25.10. Fixed bug #1824900
python-wheel [1:0.35.1-4]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055
[1:0.35.1-3]
- Add back Epoch 1 to the package version because the original version with the epoch was available in CentOS Stream for a few days
- Resolves: rhbz#1877430
[1:0.35.1-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1:0.35.1-1]
- Update to 0.35.1
- Fixes: rhbz#1868821
python39 [3.9.6-2]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055
[3.9.6-1]
- Update to 3.9.6
- Fix CVE-2021-29921: Improper input validation of octal strings in the ipaddress module Resolves: rhbz#1957458
[3.9.2-2]
- Security fix for CVE-2021-3426: information disclosure via pydoc Resolves: rhbz#1935913
python3x-pip [20.2.4-6]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055
[20.2.4-5]
- Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser Resolves: rhbz#1968074
[20.2.4-4]
- Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references Resolves: rhbz#1962856
[20.2.4-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[20.2.4-2]
- Disable tests and documentation in Fedora ELN (and RHEL)
[20.2.4-1]
- Update to 20.2.4 (#1889112)
python3x-setuptools [50.3.2-4]
- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055
[50.3.2-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[50.3.2-2]
- Disable tests in Fedora ELN (and RHEL)
[50.3.2-1]
- Update to 50.3.2 (#1889093)
python3x-six [1.15.0-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1.15.0-2]
[1.15.0-1]
- Update to 1.15.0 (#1838702)
scipy [1.5.4-3]
- Specify LDFLAGS explicitly
- Force preprocessing of Fortran sources to make annobin record proper flags
- Resolves: rhbz#1778983 rhbz#1877430
[1.5.4-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[1.5.4-1]
- New upstream release 1.5.4
- Increase test timeout, 300 seconds is not always enough for test_logpdf_overflow on s390x resolves: #1894887
pytest [6.0.2-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[6.0.2-1]
- Update to 6.0.2.
python-iniconfig [1.1.1-2]
- Convert from Fedora to the python39 module in RHEL8
- Revert usage of pyproject-rpm-macros
- Remove dependency on setuptools_scm
- Resolves: rhbz#1877430
[1.1.1-1]
- Update to 1.1.1 (#1888157)
python-more-itertools [8.5.0-2]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[8.5.0-1]
- Update to 8.5.0 (#1873653)
[8.4.0-1]
- Update to 8.4.0
- Fixes rhbz#1778332
python-wcwidth [0.2.5-3]
- Convert from Fedora to the python39 module in RHEL8
- Resolves: rhbz#1877430
[0.2.5-2]
[0.2.5-1]
- Update to 0.2.5 (#1850238)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
Module python39:3.9 is enabled
python39
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-PyMySQL
0.10.1-2.module+el8.4.0+20109+b7b1db01
python39-cffi
1.14.3-2.module+el8.4.0+20109+b7b1db01
python39-chardet
3.0.4-19.module+el8.4.0+20109+b7b1db01
python39-cryptography
3.3.1-2.module+el8.4.0+20109+b7b1db01
python39-devel
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-idle
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-idna
2.10-3.module+el8.4.0+20109+b7b1db01
python39-libs
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-lxml
4.6.2-3.module+el8.5.0+20364+c7fe1181
python39-mod_wsgi
4.7.1-4.module+el8.4.0+20109+b7b1db01
python39-numpy
1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-numpy-doc
1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-numpy-f2py
1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-pip
20.2.4-6.module+el8.5.0+20364+c7fe1181
python39-pip-wheel
20.2.4-6.module+el8.5.0+20364+c7fe1181
python39-ply
3.11-10.module+el8.4.0+20109+b7b1db01
python39-psutil
5.8.0-4.module+el8.4.0+20109+b7b1db01
python39-psycopg2
2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-psycopg2-doc
2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-psycopg2-tests
2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-pycparser
2.20-3.module+el8.4.0+20109+b7b1db01
python39-pysocks
1.7.1-4.module+el8.4.0+20109+b7b1db01
python39-pyyaml
5.4.1-1.module+el8.5.0+20364+c7fe1181
python39-requests
2.25.0-2.module+el8.4.0+20109+b7b1db01
python39-rpm-macros
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-scipy
1.5.4-3.module+el8.4.0+20109+b7b1db01
python39-setuptools
50.3.2-4.module+el8.5.0+20364+c7fe1181
python39-setuptools-wheel
50.3.2-4.module+el8.5.0+20364+c7fe1181
python39-six
1.15.0-3.module+el8.4.0+20109+b7b1db01
python39-test
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-tkinter
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-toml
0.10.1-5.module+el8.4.0+20109+b7b1db01
python39-urllib3
1.25.10-4.module+el8.5.0+20364+c7fe1181
python39-wheel
0.35.1-4.module+el8.5.0+20364+c7fe1181
python39-wheel-wheel
0.35.1-4.module+el8.5.0+20364+c7fe1181
Module python39-devel:3.9 is enabled
python39-Cython
0.29.21-5.module+el8.4.0+20109+b7b1db01
python39-attrs
20.3.0-2.module+el8.4.0+20109+b7b1db01
python39-debug
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-iniconfig
1.1.1-2.module+el8.4.0+20109+b7b1db01
python39-more-itertools
8.5.0-2.module+el8.4.0+20109+b7b1db01
python39-packaging
20.4-4.module+el8.4.0+20109+b7b1db01
python39-pluggy
0.13.1-3.module+el8.4.0+20109+b7b1db01
python39-py
1.10.0-1.module+el8.4.0+20109+b7b1db01
python39-pybind11
2.6.1-2.module+el8.4.0+20109+b7b1db01
python39-pybind11-devel
2.6.1-2.module+el8.4.0+20109+b7b1db01
python39-pyparsing
2.4.7-5.module+el8.4.0+20109+b7b1db01
python39-pytest
6.0.2-2.module+el8.4.0+20109+b7b1db01
python39-wcwidth
0.2.5-3.module+el8.4.0+20109+b7b1db01
Oracle Linux x86_64
Module python39:3.9 is enabled
python39
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-PyMySQL
0.10.1-2.module+el8.4.0+20109+b7b1db01
python39-cffi
1.14.3-2.module+el8.4.0+20109+b7b1db01
python39-chardet
3.0.4-19.module+el8.4.0+20109+b7b1db01
python39-cryptography
3.3.1-2.module+el8.4.0+20109+b7b1db01
python39-devel
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-idle
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-idna
2.10-3.module+el8.4.0+20109+b7b1db01
python39-libs
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-lxml
4.6.2-3.module+el8.5.0+20364+c7fe1181
python39-mod_wsgi
4.7.1-4.module+el8.4.0+20109+b7b1db01
python39-numpy
1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-numpy-doc
1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-numpy-f2py
1.19.4-3.module+el8.5.0+20364+c7fe1181
python39-pip
20.2.4-6.module+el8.5.0+20364+c7fe1181
python39-pip-wheel
20.2.4-6.module+el8.5.0+20364+c7fe1181
python39-ply
3.11-10.module+el8.4.0+20109+b7b1db01
python39-psutil
5.8.0-4.module+el8.4.0+20109+b7b1db01
python39-psycopg2
2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-psycopg2-doc
2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-psycopg2-tests
2.8.6-2.module+el8.4.0+20109+b7b1db01
python39-pycparser
2.20-3.module+el8.4.0+20109+b7b1db01
python39-pysocks
1.7.1-4.module+el8.4.0+20109+b7b1db01
python39-pyyaml
5.4.1-1.module+el8.5.0+20364+c7fe1181
python39-requests
2.25.0-2.module+el8.4.0+20109+b7b1db01
python39-rpm-macros
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-scipy
1.5.4-3.module+el8.4.0+20109+b7b1db01
python39-setuptools
50.3.2-4.module+el8.5.0+20364+c7fe1181
python39-setuptools-wheel
50.3.2-4.module+el8.5.0+20364+c7fe1181
python39-six
1.15.0-3.module+el8.4.0+20109+b7b1db01
python39-test
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-tkinter
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-toml
0.10.1-5.module+el8.4.0+20109+b7b1db01
python39-urllib3
1.25.10-4.module+el8.5.0+20364+c7fe1181
python39-wheel
0.35.1-4.module+el8.5.0+20364+c7fe1181
python39-wheel-wheel
0.35.1-4.module+el8.5.0+20364+c7fe1181
Module python39-devel:3.9 is enabled
python39-Cython
0.29.21-5.module+el8.4.0+20109+b7b1db01
python39-attrs
20.3.0-2.module+el8.4.0+20109+b7b1db01
python39-debug
3.9.6-2.module+el8.5.0+20364+c7fe1181
python39-iniconfig
1.1.1-2.module+el8.4.0+20109+b7b1db01
python39-more-itertools
8.5.0-2.module+el8.4.0+20109+b7b1db01
python39-packaging
20.4-4.module+el8.4.0+20109+b7b1db01
python39-pluggy
0.13.1-3.module+el8.4.0+20109+b7b1db01
python39-py
1.10.0-1.module+el8.4.0+20109+b7b1db01
python39-pybind11
2.6.1-2.module+el8.4.0+20109+b7b1db01
python39-pybind11-devel
2.6.1-2.module+el8.4.0+20109+b7b1db01
python39-pyparsing
2.4.7-5.module+el8.4.0+20109+b7b1db01
python39-pytest
6.0.2-2.module+el8.4.0+20109+b7b1db01
python39-wcwidth
0.2.5-3.module+el8.4.0+20109+b7b1db01
Ссылки на источники
Связанные уязвимости
ELSA-2021-4162: python38:3.8 and python38-devel:3.8 security update (MODERATE)
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.
An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3.