Moderate: python3 security update
Summary
ALSA-2021:4399: Moderate: python3 security update. Affects platform-python across 2 version ranges.
< 3.6.8-41.el8
< 3.6.8-41.el8.alma
Fixed in 3.6.8-41.el8 or 3.6.8-41.el8.alma, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Vulnerability Detail
The vulnerability identified as CVE-2021-3426 allows for information disclosure via pydoc in Python. This vulnerability can potentially lead to unauthorized access to sensitive information. It is rated as moderate in severity.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update platform-python-
< 3.6.8-41.el8.alma3.6.8-41.el8.alma -
< 3.6.8-41.el83.6.8-41.el8
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Conclusion
In conclusion, it is crucial to update the affected Python package to the recommended version in order to address the CVE-2021-3426 vulnerability. Failure to do so may result in information disclosure and potential unauthorized access to sensitive data. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform-python →
FAQ
This vulnerability can lead to information disclosure, potentially exposing sensitive data to unauthorized parties.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your manifest file, such as package-lock.json, and the tool will provide real-time alerts for open-source vulnerabilities.
No specific workaround has been provided for this vulnerability. It is recommended to update the affected package to the latest version.
At the time of this report, there are no known exploits for this vulnerability. However, it is important to apply the recommended security update to mitigate any potential risks.
You can refer to the CVE page for CVE-2021-3426 for more detailed information about this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for platform-python.
