ALSA-2021:4150

Source
https://errata.almalinux.org/8/ALSA-2021-4150.html
Import Source
https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2021:4150.json
JSON Data
https://api.osv.dev/v1/vulns/ALSA-2021:4150
Related
Published
2021-11-09T08:24:37Z
Modified
2021-11-09T12:44:54Z
Summary
Moderate: python36:3.6 security and bug fix update
Details

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

Security Fix(es):

  • python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270)

  • python-pygments: ReDoS in multiple lexers (CVE-2021-27291)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References

Affected packages

AlmaLinux:8 / python-nose-docs

Package

Name
python-nose-docs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.3.7-31.module_el8.6.0+2781+fed64c13

AlmaLinux:8 / python-nose-docs

Package

Name
python-nose-docs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.3.7-31.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python-pymongo-doc

Package

Name
python-pymongo-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.0-1.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python-pymongo-doc

Package

Name
python-pymongo-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.0-1.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python-sqlalchemy-doc

Package

Name
python-sqlalchemy-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.3.2-2.module_el8.6.0+2781+fed64c13

AlmaLinux:8 / python-sqlalchemy-doc

Package

Name
python-sqlalchemy-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.3.2-2.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python-virtualenv-doc

Package

Name
python-virtualenv-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
15.1.0-21.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python-virtualenv-doc

Package

Name
python-virtualenv-doc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
15.1.0-21.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-PyMySQL

Package

Name
python3-PyMySQL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.10.1-2.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-PyMySQL

Package

Name
python3-PyMySQL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.10.1-2.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-bson

Package

Name
python3-bson

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.0-1.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-bson

Package

Name
python3-bson

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.0-1.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-distro

Package

Name
python3-distro

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0-2.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-distro

Package

Name
python3-distro

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.4.0-2.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-docs

Package

Name
python3-docs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.7-2.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-docs

Package

Name
python3-docs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.7-2.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-docutils

Package

Name
python3-docutils

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.14-12.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-docutils

Package

Name
python3-docutils

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.14-12.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-nose

Package

Name
python3-nose

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.3.7-31.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-nose

Package

Name
python3-nose

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.3.7-31.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-pygments

Package

Name
python3-pygments

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.0-22.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-pygments

Package

Name
python3-pygments

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.2.0-22.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-pymongo

Package

Name
python3-pymongo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.0-1.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-pymongo

Package

Name
python3-pymongo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.0-1.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-pymongo-gridfs

Package

Name
python3-pymongo-gridfs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.0-1.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-pymongo-gridfs

Package

Name
python3-pymongo-gridfs

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.7.0-1.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-scipy

Package

Name
python3-scipy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.0-21.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-scipy

Package

Name
python3-scipy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.0.0-21.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-sqlalchemy

Package

Name
python3-sqlalchemy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.3.2-2.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-sqlalchemy

Package

Name
python3-sqlalchemy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.3.2-2.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-virtualenv

Package

Name
python3-virtualenv

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
15.1.0-21.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-virtualenv

Package

Name
python3-virtualenv

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
15.1.0-21.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-wheel

Package

Name
python3-wheel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:0.31.1-3.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-wheel

Package

Name
python3-wheel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:0.31.1-3.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python3-wheel-wheel

Package

Name
python3-wheel-wheel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:0.31.1-3.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python3-wheel-wheel

Package

Name
python3-wheel-wheel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:0.31.1-3.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python36

Package

Name
python36

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.8-38.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python36

Package

Name
python36

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.8-38.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python36-debug

Package

Name
python36-debug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.8-38.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python36-debug

Package

Name
python36-debug

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.8-38.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python36-devel

Package

Name
python36-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.8-38.module_el8.5.0+2569+5c5719bc

AlmaLinux:8 / python36-devel

Package

Name
python36-devel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.8-38.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python36-rpm-macros

Package

Name
python36-rpm-macros

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.8-38.module_el8.5.0+135+5ce32bc4

AlmaLinux:8 / python36-rpm-macros

Package

Name
python36-rpm-macros

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.6.8-38.module_el8.5.0+2569+5c5719bc