RHSA-2021:4201: Moderate: babel security and bug fix update
Babel provides tools to build and work with gettext message catalogs, and a Python interface to the CLDR (Common Locale Data Repository), providing access to various locale display names, localized number and date formatting, etc.<br>Security Fix(es):<br><li> python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code (CVE-2021-20095, CVE-2021-42771)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.<br>Additional Changes:<br>For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes linked from the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2021:4201?
The severity of RHSA-2021:4201 is classified as important.
How do I fix RHSA-2021:4201?
To fix RHSA-2021:4201, upgrade to the fixed version 2.5.1-7.el8 of the babel or python3-babel packages.
What packages are affected by RHSA-2021:4201?
RHSA-2021:4201 affects the babel and python3-babel packages.
Is RHSA-2021:4201 applicable to all users?
RHSA-2021:4201 is applicable to users who utilize the affected versions of babel and python3-babel on Red Hat Enterprise Linux 8.
When was RHSA-2021:4201 released?
RHSA-2021:4201 was released on December 14, 2021.