Advisories ยป MGASA-2021-0386

Updated python3 packages fix security vulnerabilities

Publication date: 27 Jul 2021
Type: security
Affected Mageia releases : 8
CVE: CVE-2021-29921

Description

Update python3 to 3.8.11 to fix several security issues. Fixes in 3.8.10 are
also included.

Bundled pip and setuptools were updated in 3.8.11 so python-pip needs to be
updated to 21.1.3 and python-setuptools to 56.2.0 at the same time.

Also, we fix the following issue:

In Python before 3.9.5, the ipaddress library mishandles leading zero
characters in the octets of an IP address string. This (in some situations)
allows attackers to bypass access control that is based on IP addresses
(CVE-2021-29921).
                

References

SRPMS

8/core