Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Critical Vulnerability Discovered in Red Hat Python 2.7

published 2 years ago

Summary

An issue has been found in the Python 2.7 software used by Red Hat systems. This could allow an attacker to execute malicious code on vulnerable systems, potentially leading to data theft or system compromise. Users are advised to update their Python 2.7 software as soon as possible to fix this issue.

What to do

Update redhat cython to version 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e.
Update redhat cython-debugsource to version 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e.
Update redhat pyyaml to version 0:3.12-16.module+el8.1.0+3111+de3f2d8e.
Update redhat pyyaml-debugsource to version 0:3.12-16.module+el8.1.0+3111+de3f2d8e.
Update redhat babel to version 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e.
Update redhat numpy to version 1:1.14.2-16.module+el8.4.0+9406+221a4565.
Update redhat numpy-debugsource to version 1:1.14.2-16.module+el8.4.0+9406+221a4565.
Update redhat pytest to version 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e.
Update redhat python-pymysql to version 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e.
Update redhat python-attrs to version 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e.
Update redhat python-backports to version 0:1.0-16.module+el8.4.0+9193+f3daf6ef.
Update redhat python-backports-ssl_match_hostname to version 0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef.
Update redhat python-chardet to version 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e.
Update redhat python-coverage to version 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e.
Update redhat python-coverage-debugsource to version 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e.
Update redhat python-dns to version 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e.
Update redhat python-docs to version 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e.
Update redhat python-docutils to version 0:0.14-12.module+el8.1.0+3111+de3f2d8e.
Update redhat python-funcsigs to version 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e.
Update redhat python-idna to version 0:2.5-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python-ipaddress to version 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e.
Update redhat python-jinja2 to version 0:2.10-8.module+el8.1.0+3111+de3f2d8e.
Update redhat python-lxml to version 0:4.2.3-4.module+el8.4.0+9319+a932af88.
Update redhat python-lxml-debugsource to version 0:4.2.3-4.module+el8.4.0+9319+a932af88.
Update redhat python-markupsafe to version 0:0.23-19.module+el8.1.0+3111+de3f2d8e.
Update redhat python-mock to version 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e.
Update redhat python-nose to version 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e.
Update redhat python-nose-docs to version 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e.
Update redhat python-pluggy to version 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e.
Update redhat python-psycopg2 to version 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python-psycopg2-debuginfo to version 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python-psycopg2-debugsource to version 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python-psycopg2-doc to version 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python-py to version 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e.
Update redhat python-pygments to version 0:2.2.0-20.module+el8.1.0+3111+de3f2d8e.
Update redhat python-pymongo to version 0:3.6.1-11.module+el8.1.0+3446+c3d52da3.
Update redhat python-pymongo-debuginfo to version 0:3.6.1-11.module+el8.1.0+3446+c3d52da3.
Update redhat python-pymongo-debugsource to version 0:3.6.1-11.module+el8.1.0+3446+c3d52da3.
Update redhat python-pysocks to version 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e.
Update redhat python-pytest-mock to version 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e.
Update redhat python-requests to version 0:2.20.0-3.module+el8.2.0+4577+feefd9b8.
Update redhat python-setuptools_scm to version 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e.
Update redhat python-sqlalchemy to version 0:1.3.2-2.module+el8.3.0+6647+8d010749.
Update redhat python-sqlalchemy-doc to version 0:1.3.2-2.module+el8.3.0+6647+8d010749.
Update redhat python-urllib3 to version 0:1.24.2-3.module+el8.4.0+9193+f3daf6ef.
Update redhat python-virtualenv to version 0:15.1.0-19.module+el8.1.0+3507+d69c168d.
Update redhat python-wheel to version 1:0.31.1-2.module+el8.1.0+3725+aac5cd17.
Update redhat python2 to version 0:2.7.18-4.module+el8.4.0+9577+0b56c8de.
Update redhat python2-cython to version 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-cython-debuginfo to version 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-pymysql to version 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-attrs to version 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-babel to version 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-backports to version 0:1.0-16.module+el8.4.0+9193+f3daf6ef.
Update redhat python2-backports-ssl_match_hostname to version 0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef.
Update redhat python2-bson to version 0:3.6.1-11.module+el8.1.0+3446+c3d52da3.
Update redhat python2-bson-debuginfo to version 0:3.6.1-11.module+el8.1.0+3446+c3d52da3.
Update redhat python2-chardet to version 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-coverage to version 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-coverage-debuginfo to version 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-debug to version 0:2.7.18-4.module+el8.4.0+9577+0b56c8de.
Update redhat python2-debuginfo to version 0:2.7.18-4.module+el8.4.0+9577+0b56c8de.
Update redhat python2-debugsource to version 0:2.7.18-4.module+el8.4.0+9577+0b56c8de.
Update redhat python2-devel to version 0:2.7.18-4.module+el8.4.0+9577+0b56c8de.
Update redhat python2-dns to version 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-docs to version 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-docs-info to version 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-docutils to version 0:0.14-12.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-funcsigs to version 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-idna to version 0:2.5-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-ipaddress to version 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-jinja2 to version 0:2.10-8.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-libs to version 0:2.7.18-4.module+el8.4.0+9577+0b56c8de.
Update redhat python2-lxml to version 0:4.2.3-4.module+el8.4.0+9319+a932af88.
Update redhat python2-lxml-debuginfo to version 0:4.2.3-4.module+el8.4.0+9319+a932af88.
Update redhat python2-markupsafe to version 0:0.23-19.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-mock to version 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-nose to version 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-numpy to version 1:1.14.2-16.module+el8.4.0+9406+221a4565.
Update redhat python2-numpy-debuginfo to version 1:1.14.2-16.module+el8.4.0+9406+221a4565.
Update redhat python2-numpy-doc to version 1:1.14.2-16.module+el8.4.0+9406+221a4565.
Update redhat python2-numpy-f2py to version 1:1.14.2-16.module+el8.4.0+9406+221a4565.
Update redhat python2-pip to version 0:9.0.3-18.module+el8.3.0+7707+eb4bba01.
Update redhat python2-pip-wheel to version 0:9.0.3-18.module+el8.3.0+7707+eb4bba01.
Update redhat python2-pluggy to version 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-psycopg2 to version 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-psycopg2-debug to version 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-psycopg2-debug-debuginfo to version 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-psycopg2-debuginfo to version 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-psycopg2-tests to version 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-py to version 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-pygments to version 0:2.2.0-20.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-pymongo to version 0:3.6.1-11.module+el8.1.0+3446+c3d52da3.
Update redhat python2-pymongo-debuginfo to version 0:3.6.1-11.module+el8.1.0+3446+c3d52da3.
Update redhat python2-pymongo-gridfs to version 0:3.6.1-11.module+el8.1.0+3446+c3d52da3.
Update redhat python2-pysocks to version 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-pytest to version 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-pytest-mock to version 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-pytz to version 0:2017.2-12.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-pyyaml to version 0:3.12-16.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-pyyaml-debuginfo to version 0:3.12-16.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-requests to version 0:2.20.0-3.module+el8.2.0+4577+feefd9b8.
Update redhat python2-rpm-macros to version 0:3-38.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-scipy to version 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f.
Update redhat python2-scipy-debuginfo to version 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f.
Update redhat python2-setuptools to version 0:39.0.1-13.module+el8.4.0+9442+27d0e81c.
Update redhat python2-setuptools-wheel to version 0:39.0.1-13.module+el8.4.0+9442+27d0e81c.
Update redhat python2-setuptools_scm to version 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e.
Update redhat python2-six to version 0:1.11.0-6.module+el8.4.0+9287+299307c7.
Update redhat python2-sqlalchemy to version 0:1.3.2-2.module+el8.3.0+6647+8d010749.
Update redhat python2-test to version 0:2.7.18-4.module+el8.4.0+9577+0b56c8de.
Update redhat python2-tkinter to version 0:2.7.18-4.module+el8.4.0+9577+0b56c8de.
Update redhat python2-tools to version 0:2.7.18-4.module+el8.4.0+9577+0b56c8de.
Update redhat python2-urllib3 to version 0:1.24.2-3.module+el8.4.0+9193+f3daf6ef.
Update redhat python2-virtualenv to version 0:15.1.0-19.module+el8.1.0+3507+d69c168d.
Update redhat python2-wheel to version 1:0.31.1-2.module+el8.1.0+3725+aac5cd17.
Update redhat python2-wheel-wheel to version 1:0.31.1-2.module+el8.1.0+3725+aac5cd17.
Update redhat pytz to version 0:2017.2-12.module+el8.1.0+3111+de3f2d8e.
Update redhat scipy to version 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f.
Update redhat scipy-debugsource to version 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:8::appstream	redhat	cython	< 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	cython-debugsource	< 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	pyyaml	< 0:3.12-16.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:3.12-16.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	pyyaml-debugsource	< 0:3.12-16.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:3.12-16.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	babel	< 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	numpy	< 1:1.14.2-16.module+el8.4.0+9406+221a4565 Fix: upgrade to 1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat:enterprise_linux:8::appstream	redhat	numpy-debugsource	< 1:1.14.2-16.module+el8.4.0+9406+221a4565 Fix: upgrade to 1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat:enterprise_linux:8::appstream	redhat	pytest	< 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-pymysql	< 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-attrs	< 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-backports	< 0:1.0-16.module+el8.4.0+9193+f3daf6ef Fix: upgrade to 0:1.0-16.module+el8.4.0+9193+f3daf6ef
Red Hat:enterprise_linux:8::appstream	redhat	python-backports-ssl_match_hostname	< 0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef Fix: upgrade to 0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef
Red Hat:enterprise_linux:8::appstream	redhat	python-chardet	< 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-coverage	< 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-coverage-debugsource	< 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-dns	< 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-docs	< 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-docutils	< 0:0.14-12.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.14-12.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-funcsigs	< 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-idna	< 0:2.5-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-ipaddress	< 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-jinja2	< 0:2.10-8.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.10-8.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-lxml	< 0:4.2.3-4.module+el8.4.0+9319+a932af88 Fix: upgrade to 0:4.2.3-4.module+el8.4.0+9319+a932af88
Red Hat:enterprise_linux:8::appstream	redhat	python-lxml-debugsource	< 0:4.2.3-4.module+el8.4.0+9319+a932af88 Fix: upgrade to 0:4.2.3-4.module+el8.4.0+9319+a932af88
Red Hat:enterprise_linux:8::appstream	redhat	python-markupsafe	< 0:0.23-19.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.23-19.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-mock	< 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-nose	< 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-nose-docs	< 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-pluggy	< 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-psycopg2	< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-psycopg2-debuginfo	< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-psycopg2-debugsource	< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-psycopg2-doc	< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-py	< 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-pygments	< 0:2.2.0-20.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.2.0-20.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-pymongo	< 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 Fix: upgrade to 0:3.6.1-11.module+el8.1.0+3446+c3d52da3
Red Hat:enterprise_linux:8::appstream	redhat	python-pymongo-debuginfo	< 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 Fix: upgrade to 0:3.6.1-11.module+el8.1.0+3446+c3d52da3
Red Hat:enterprise_linux:8::appstream	redhat	python-pymongo-debugsource	< 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 Fix: upgrade to 0:3.6.1-11.module+el8.1.0+3446+c3d52da3
Red Hat:enterprise_linux:8::appstream	redhat	python-pysocks	< 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-pytest-mock	< 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-requests	< 0:2.20.0-3.module+el8.2.0+4577+feefd9b8 Fix: upgrade to 0:2.20.0-3.module+el8.2.0+4577+feefd9b8
Red Hat:enterprise_linux:8::appstream	redhat	python-setuptools_scm	< 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python-sqlalchemy	< 0:1.3.2-2.module+el8.3.0+6647+8d010749 Fix: upgrade to 0:1.3.2-2.module+el8.3.0+6647+8d010749
Red Hat:enterprise_linux:8::appstream	redhat	python-sqlalchemy-doc	< 0:1.3.2-2.module+el8.3.0+6647+8d010749 Fix: upgrade to 0:1.3.2-2.module+el8.3.0+6647+8d010749
Red Hat:enterprise_linux:8::appstream	redhat	python-urllib3	< 0:1.24.2-3.module+el8.4.0+9193+f3daf6ef Fix: upgrade to 0:1.24.2-3.module+el8.4.0+9193+f3daf6ef
Red Hat:enterprise_linux:8::appstream	redhat	python-virtualenv	< 0:15.1.0-19.module+el8.1.0+3507+d69c168d Fix: upgrade to 0:15.1.0-19.module+el8.1.0+3507+d69c168d
Red Hat:enterprise_linux:8::appstream	redhat	python-wheel	< 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 Fix: upgrade to 1:0.31.1-2.module+el8.1.0+3725+aac5cd17
Red Hat:enterprise_linux:8::appstream	redhat	python2	< 0:2.7.18-4.module+el8.4.0+9577+0b56c8de Fix: upgrade to 0:2.7.18-4.module+el8.4.0+9577+0b56c8de
Red Hat:enterprise_linux:8::appstream	redhat	python2-cython	< 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-cython-debuginfo	< 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.28.1-7.module+el8.1.0+3111+de3f2d8e

Showing 50 of 120. Show the rest

Ecosystem	Vendor	Product	Affected versions
Red Hat:enterprise_linux:8::appstream	redhat	python2-pymysql	< 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.8.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-attrs	< 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:17.4.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-babel	< 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.5.1-9.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-backports	< 0:1.0-16.module+el8.4.0+9193+f3daf6ef Fix: upgrade to 0:1.0-16.module+el8.4.0+9193+f3daf6ef
Red Hat:enterprise_linux:8::appstream	redhat	python2-backports-ssl_match_hostname	< 0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef Fix: upgrade to 0:3.5.0.1-12.module+el8.4.0+9193+f3daf6ef
Red Hat:enterprise_linux:8::appstream	redhat	python2-bson	< 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 Fix: upgrade to 0:3.6.1-11.module+el8.1.0+3446+c3d52da3
Red Hat:enterprise_linux:8::appstream	redhat	python2-bson-debuginfo	< 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 Fix: upgrade to 0:3.6.1-11.module+el8.1.0+3446+c3d52da3
Red Hat:enterprise_linux:8::appstream	redhat	python2-chardet	< 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:3.0.4-10.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-coverage	< 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-coverage-debuginfo	< 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:4.5.1-4.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-debug	< 0:2.7.18-4.module+el8.4.0+9577+0b56c8de Fix: upgrade to 0:2.7.18-4.module+el8.4.0+9577+0b56c8de
Red Hat:enterprise_linux:8::appstream	redhat	python2-debuginfo	< 0:2.7.18-4.module+el8.4.0+9577+0b56c8de Fix: upgrade to 0:2.7.18-4.module+el8.4.0+9577+0b56c8de
Red Hat:enterprise_linux:8::appstream	redhat	python2-debugsource	< 0:2.7.18-4.module+el8.4.0+9577+0b56c8de Fix: upgrade to 0:2.7.18-4.module+el8.4.0+9577+0b56c8de
Red Hat:enterprise_linux:8::appstream	redhat	python2-devel	< 0:2.7.18-4.module+el8.4.0+9577+0b56c8de Fix: upgrade to 0:2.7.18-4.module+el8.4.0+9577+0b56c8de
Red Hat:enterprise_linux:8::appstream	redhat	python2-dns	< 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.15.0-10.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-docs	< 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-docs-info	< 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.16-2.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-docutils	< 0:0.14-12.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.14-12.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-funcsigs	< 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.0.2-13.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-idna	< 0:2.5-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-ipaddress	< 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.0.18-6.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-jinja2	< 0:2.10-8.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.10-8.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-libs	< 0:2.7.18-4.module+el8.4.0+9577+0b56c8de Fix: upgrade to 0:2.7.18-4.module+el8.4.0+9577+0b56c8de
Red Hat:enterprise_linux:8::appstream	redhat	python2-lxml	< 0:4.2.3-4.module+el8.4.0+9319+a932af88 Fix: upgrade to 0:4.2.3-4.module+el8.4.0+9319+a932af88
Red Hat:enterprise_linux:8::appstream	redhat	python2-lxml-debuginfo	< 0:4.2.3-4.module+el8.4.0+9319+a932af88 Fix: upgrade to 0:4.2.3-4.module+el8.4.0+9319+a932af88
Red Hat:enterprise_linux:8::appstream	redhat	python2-markupsafe	< 0:0.23-19.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.23-19.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-mock	< 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.0.0-13.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-nose	< 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.3.7-30.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-numpy	< 1:1.14.2-16.module+el8.4.0+9406+221a4565 Fix: upgrade to 1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat:enterprise_linux:8::appstream	redhat	python2-numpy-debuginfo	< 1:1.14.2-16.module+el8.4.0+9406+221a4565 Fix: upgrade to 1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat:enterprise_linux:8::appstream	redhat	python2-numpy-doc	< 1:1.14.2-16.module+el8.4.0+9406+221a4565 Fix: upgrade to 1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat:enterprise_linux:8::appstream	redhat	python2-numpy-f2py	< 1:1.14.2-16.module+el8.4.0+9406+221a4565 Fix: upgrade to 1:1.14.2-16.module+el8.4.0+9406+221a4565
Red Hat:enterprise_linux:8::appstream	redhat	python2-pip	< 0:9.0.3-18.module+el8.3.0+7707+eb4bba01 Fix: upgrade to 0:9.0.3-18.module+el8.3.0+7707+eb4bba01
Red Hat:enterprise_linux:8::appstream	redhat	python2-pip-wheel	< 0:9.0.3-18.module+el8.3.0+7707+eb4bba01 Fix: upgrade to 0:9.0.3-18.module+el8.3.0+7707+eb4bba01
Red Hat:enterprise_linux:8::appstream	redhat	python2-pluggy	< 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:0.6.0-8.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-psycopg2	< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-psycopg2-debug	< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-psycopg2-debug-debuginfo	< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-psycopg2-debuginfo	< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-psycopg2-tests	< 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.7.5-7.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-py	< 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.5.3-6.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-pygments	< 0:2.2.0-20.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2.2.0-20.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-pymongo	< 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 Fix: upgrade to 0:3.6.1-11.module+el8.1.0+3446+c3d52da3
Red Hat:enterprise_linux:8::appstream	redhat	python2-pymongo-debuginfo	< 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 Fix: upgrade to 0:3.6.1-11.module+el8.1.0+3446+c3d52da3
Red Hat:enterprise_linux:8::appstream	redhat	python2-pymongo-gridfs	< 0:3.6.1-11.module+el8.1.0+3446+c3d52da3 Fix: upgrade to 0:3.6.1-11.module+el8.1.0+3446+c3d52da3
Red Hat:enterprise_linux:8::appstream	redhat	python2-pysocks	< 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-pytest	< 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:3.4.2-13.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-pytest-mock	< 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.9.0-4.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-pytz	< 0:2017.2-12.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2017.2-12.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-pyyaml	< 0:3.12-16.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:3.12-16.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-pyyaml-debuginfo	< 0:3.12-16.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:3.12-16.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-requests	< 0:2.20.0-3.module+el8.2.0+4577+feefd9b8 Fix: upgrade to 0:2.20.0-3.module+el8.2.0+4577+feefd9b8
Red Hat:enterprise_linux:8::appstream	redhat	python2-rpm-macros	< 0:3-38.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:3-38.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-scipy	< 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f Fix: upgrade to 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f
Red Hat:enterprise_linux:8::appstream	redhat	python2-scipy-debuginfo	< 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f Fix: upgrade to 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f
Red Hat:enterprise_linux:8::appstream	redhat	python2-setuptools	< 0:39.0.1-13.module+el8.4.0+9442+27d0e81c Fix: upgrade to 0:39.0.1-13.module+el8.4.0+9442+27d0e81c
Red Hat:enterprise_linux:8::appstream	redhat	python2-setuptools-wheel	< 0:39.0.1-13.module+el8.4.0+9442+27d0e81c Fix: upgrade to 0:39.0.1-13.module+el8.4.0+9442+27d0e81c
Red Hat:enterprise_linux:8::appstream	redhat	python2-setuptools_scm	< 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:1.15.7-6.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	python2-six	< 0:1.11.0-6.module+el8.4.0+9287+299307c7 Fix: upgrade to 0:1.11.0-6.module+el8.4.0+9287+299307c7
Red Hat:enterprise_linux:8::appstream	redhat	python2-sqlalchemy	< 0:1.3.2-2.module+el8.3.0+6647+8d010749 Fix: upgrade to 0:1.3.2-2.module+el8.3.0+6647+8d010749
Red Hat:enterprise_linux:8::appstream	redhat	python2-test	< 0:2.7.18-4.module+el8.4.0+9577+0b56c8de Fix: upgrade to 0:2.7.18-4.module+el8.4.0+9577+0b56c8de
Red Hat:enterprise_linux:8::appstream	redhat	python2-tkinter	< 0:2.7.18-4.module+el8.4.0+9577+0b56c8de Fix: upgrade to 0:2.7.18-4.module+el8.4.0+9577+0b56c8de
Red Hat:enterprise_linux:8::appstream	redhat	python2-tools	< 0:2.7.18-4.module+el8.4.0+9577+0b56c8de Fix: upgrade to 0:2.7.18-4.module+el8.4.0+9577+0b56c8de
Red Hat:enterprise_linux:8::appstream	redhat	python2-urllib3	< 0:1.24.2-3.module+el8.4.0+9193+f3daf6ef Fix: upgrade to 0:1.24.2-3.module+el8.4.0+9193+f3daf6ef
Red Hat:enterprise_linux:8::appstream	redhat	python2-virtualenv	< 0:15.1.0-19.module+el8.1.0+3507+d69c168d Fix: upgrade to 0:15.1.0-19.module+el8.1.0+3507+d69c168d
Red Hat:enterprise_linux:8::appstream	redhat	python2-wheel	< 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 Fix: upgrade to 1:0.31.1-2.module+el8.1.0+3725+aac5cd17
Red Hat:enterprise_linux:8::appstream	redhat	python2-wheel-wheel	< 1:0.31.1-2.module+el8.1.0+3725+aac5cd17 Fix: upgrade to 1:0.31.1-2.module+el8.1.0+3725+aac5cd17
Red Hat:enterprise_linux:8::appstream	redhat	pytz	< 0:2017.2-12.module+el8.1.0+3111+de3f2d8e Fix: upgrade to 0:2017.2-12.module+el8.1.0+3111+de3f2d8e
Red Hat:enterprise_linux:8::appstream	redhat	scipy	< 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f Fix: upgrade to 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f
Red Hat:enterprise_linux:8::appstream	redhat	scipy-debugsource	< 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f Fix: upgrade to 0:1.0.0-20.module+el8.1.0+3323+7ac3e00f

Original advisory text

Red Hat Security Advisory: python27:2.7 security and bug fix update

References

https://access.redhat.com/errata/RHSA-2021:1761 Vendor Advisory
https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.... Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1883014 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1883632 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1886754 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1901633 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1918168 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1761.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2020-26116 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2020-26116 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-26116 Vendor Advisory
https://python-security.readthedocs.io/vuln/http-header-injection-method.html Third Party Advisory
https://access.redhat.com/security/cve/CVE-2020-26137 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2020-26137 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-26137 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2020-27783 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2020-27783 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-27783 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2021-3177 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2021-3177 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2021-3177 Vendor Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

6.5 Medium

Timeline

Published18 Sep 2024

Updated27 Mar 2026

First seen27 Mar 2026

Sources

RHSA-2021:1761 · OSV

Track software like this

Free during beta