RLSA-2022:1764

Опубликовано: 10 мая 2022

Источник: rocky

Оценка: Moderate

Описание

Moderate: python38:3.8 and python38-devel:3.8 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python38 (3.8), python38-devel (3.8). (BZ#1997680, BZ#1997860)

Security Fix(es):

python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733)
python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)
python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391)
python: urllib: HTTP client possible infinite loop on a 100 Continue response (CVE-2021-3737)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.

Затронутые продукты

Rocky Linux 8

Наименование	Архитектура	Релиз	RPM
python38-asn1crypto	noarch	3.module+el8.4.0+570+c2eaf144	python38-asn1crypto-1.2.0-3.module+el8.4.0+570+c2eaf144.noarch.rpm
python38-babel	noarch	11.module+el8.5.0+672+ab6eb015	python38-babel-2.7.0-11.module+el8.5.0+672+ab6eb015.noarch.rpm
python38-cffi	x86_64	3.module+el8.4.0+570+c2eaf144	python38-cffi-1.13.2-3.module+el8.4.0+570+c2eaf144.x86_64.rpm
python38-chardet	noarch	19.module+el8.4.0+570+c2eaf144	python38-chardet-3.0.4-19.module+el8.4.0+570+c2eaf144.noarch.rpm
python38-cryptography	x86_64	3.module+el8.5.0+672+ab6eb015	python38-cryptography-2.8-3.module+el8.5.0+672+ab6eb015.x86_64.rpm
python38-Cython	x86_64	4.module+el8.4.0+570+c2eaf144	python38-Cython-0.29.14-4.module+el8.4.0+570+c2eaf144.x86_64.rpm
python38-idna	noarch	6.module+el8.4.0+570+c2eaf144	python38-idna-2.8-6.module+el8.4.0+570+c2eaf144.noarch.rpm
python38-lxml	x86_64	7.module+el8.6.0+794+eba84017	python38-lxml-4.4.1-7.module+el8.6.0+794+eba84017.x86_64.rpm
python38-markupsafe	x86_64	6.module+el8.4.0+570+c2eaf144	python38-markupsafe-1.1.1-6.module+el8.4.0+570+c2eaf144.x86_64.rpm
python38-numpy	x86_64	6.module+el8.5.0+672+ab6eb015	python38-numpy-1.17.3-6.module+el8.5.0+672+ab6eb015.x86_64.rpm