AlmaLinux 2238 Published by

A python27:2.7 security update has been released for AlmaLinux.



ALSA-2022:1821 Moderate: python27:2.7 security update


Type:
security

Severity:
moderate

Release date:
2022-05-10

Description
Security Fix(es):
* python: urllib: Regular expression DoS in AbstractBasicAuthHandler (CVE-2021-3733)
* python: ftplib should not use the host from the PASV response (CVE-2021-4189)
* python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through (CVE-2021-43818)
* python: urllib.parse does not sanitize URLs containing ASCII newline and tabs (CVE-2022-0391)
* python: urllib: HTTP client possible infinite loop on a 100 Continue response (CVE-2021-3737)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References:
CVE-2021-3733
CVE-2021-3737
CVE-2021-4189
CVE-2021-43818
CVE-2022-0391
ALSA-2022-1821

Updates packages:
babel-2.5.1-10.module_el8.6.0+2781+fed64c13.noarch.rpm
python-nose-docs-1.3.7-31.module_el8.6.0+2781+fed64c13.noarch.rpm
python-psycopg2-doc-2.7.5-7.module_el8.6.0+2781+fed64c13.x86_64.rpm
python-sqlalchemy-doc-1.3.2-2.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.x86_64.rpm
python2-Cython-0.28.1-7.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-PyMySQL-0.8.0-10.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-attrs-17.4.0-10.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-babel-2.5.1-10.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-backports-1.0-16.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-backports-ssl_match_hostname-3.5.0.1-12.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-bson-3.7.0-1.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-chardet-3.0.4-10.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-coverage-4.5.1-4.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-debug-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.x86_64.rpm
python2-devel-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.x86_64.rpm
python2-dns-1.15.0-10.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-docs-2.7.16-2.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-docs-info-2.7.16-2.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-docutils-0.14-12.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-funcsigs-1.0.2-13.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-idna-2.5-7.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-ipaddress-1.0.18-6.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-jinja2-2.10-9.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-libs-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.x86_64.rpm
python2-lxml-4.2.3-6.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-markupsafe-0.23-19.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-mock-2.0.0-13.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-nose-1.3.7-31.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-numpy-1.14.2-16.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-numpy-doc-1.14.2-16.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-numpy-f2py-1.14.2-16.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-pip-9.0.3-19.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-pip-wheel-9.0.3-19.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-pluggy-0.6.0-8.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-psycopg2-2.7.5-7.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-psycopg2-debug-2.7.5-7.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-psycopg2-tests-2.7.5-7.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-py-1.5.3-6.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-pygments-2.2.0-22.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-pymongo-3.7.0-1.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-pymongo-gridfs-3.7.0-1.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-pysocks-1.6.8-6.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-pytest-3.4.2-13.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-pytest-mock-1.9.0-4.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-pytz-2017.2-12.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-pyyaml-3.12-16.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-requests-2.20.0-3.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-rpm-macros-3-38.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-scipy-1.0.0-21.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-setuptools-39.0.1-13.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-setuptools-wheel-39.0.1-13.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-setuptools_scm-1.15.7-6.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-six-1.11.0-6.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-sqlalchemy-1.3.2-2.module_el8.6.0+2781+fed64c13.x86_64.rpm
python2-test-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.x86_64.rpm
python2-tkinter-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.x86_64.rpm
python2-tools-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.x86_64.rpm
python2-urllib3-1.24.2-3.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-virtualenv-15.1.0-21.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-wheel-0.31.1-3.module_el8.6.0+2781+fed64c13.noarch.rpm
python2-wheel-wheel-0.31.1-3.module_el8.6.0+2781+fed64c13.noarch.rpm
python-psycopg2-doc-2.7.5-7.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.aarch64.rpm
python2-Cython-0.28.1-7.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-backports-1.0-16.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-bson-3.7.0-1.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-coverage-4.5.1-4.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-debug-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.aarch64.rpm
python2-devel-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.aarch64.rpm
python2-libs-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.aarch64.rpm
python2-lxml-4.2.3-6.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-markupsafe-0.23-19.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-numpy-1.14.2-16.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-numpy-f2py-1.14.2-16.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-psycopg2-2.7.5-7.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-psycopg2-debug-2.7.5-7.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-psycopg2-tests-2.7.5-7.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-pymongo-3.7.0-1.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-pymongo-gridfs-3.7.0-1.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-pyyaml-3.12-16.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-scipy-1.0.0-21.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-sqlalchemy-1.3.2-2.module_el8.6.0+2781+fed64c13.aarch64.rpm
python2-test-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.aarch64.rpm
python2-tkinter-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.aarch64.rpm
python2-tools-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.aarch64.rpm
python-psycopg2-doc-2.7.5-7.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.ppc64le.rpm
python2-Cython-0.28.1-7.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-backports-1.0-16.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-bson-3.7.0-1.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-coverage-4.5.1-4.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-debug-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.ppc64le.rpm
python2-devel-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.ppc64le.rpm
python2-libs-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.ppc64le.rpm
python2-lxml-4.2.3-6.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-markupsafe-0.23-19.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-numpy-1.14.2-16.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-numpy-f2py-1.14.2-16.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-psycopg2-2.7.5-7.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-psycopg2-debug-2.7.5-7.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-psycopg2-tests-2.7.5-7.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-pymongo-3.7.0-1.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-pymongo-gridfs-3.7.0-1.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-pyyaml-3.12-16.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-scipy-1.0.0-21.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-sqlalchemy-1.3.2-2.module_el8.6.0+2781+fed64c13.ppc64le.rpm
python2-test-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.ppc64le.rpm
python2-tkinter-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.ppc64le.rpm
python2-tools-2.7.18-10.module_el8.6.0+2781+fed64c13.alma.ppc64le.rpm

Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.

  ALSA-2022:1821 Moderate: python27:2.7 security update