RHSA-2020:4299: Moderate: rh-python38 security, bug fix, and enhancement update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.The following packages have been upgraded to a later upstream version: rh-python38-python (3.8.6). (BZ#1885289)Security Fix(es): python-psutil: double free because of refcount mishandling (CVE-2019-18874) python: infinite loop in the tarfile module via crafted TAR archive (CVE-2019-20907) python: DoS via inefficiency in IPv{4,6}Interface classes (CVE-2020-14422) python: CRLF injection via HTTP request method in httplib/http.client (CVE-2020-26116) python-urllib3: CRLF injection via HTTP request method (CVE-2020-26137) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2020:4299?
RHSA-2020:4299 is classified as a moderate severity vulnerability.
How do I fix RHSA-2020:4299?
You can resolve RHSA-2020:4299 by updating to the specified package versions outlined in the advisory.
What software is affected by RHSA-2020:4299?
RHSA-2020:4299 affects several Python packages, including rh-python38-python and its associated libraries.
Is RHSA-2020:4299 exploitable remotely?
Yes, RHSA-2020:4299 may be exploitable remotely depending on the affected Python libraries in use.
When was RHSA-2020:4299 released?
RHSA-2020:4299 was released on December 15, 2020.