Python39:3.9 - New Module Vulnerability
Summary
ALEA-2021:1919: new module: python39:3.9. Affects python39-Cython across 2 version ranges.
< 0.29.21-5.module_el8.4.0+2369+c6fb4bc5
< 0.29.21-5.module_el8.6.0+2780+a40f65e1
Fixed in 0.29.21-5.module_el8.4.0+2369+c6fb4bc5 or 0.29.21-5.module_el8.6.0+2780+a40f65e1, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Python is an interpreted, interactive, object-oriented programming language that supports various system calls and libraries. The python39:3.9 module is a new addition to AlmaLinux, providing enhanced functionality. However, this module is vulnerable to a security issue.
Vulnerability Detail
The python39:3.9 module in AlmaLinux is susceptible to a security vulnerability. This vulnerability could potentially lead to unauthorized access, data breaches, or remote code execution. It is important to address this issue promptly to ensure the security and integrity of the system.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update python39-Cython-
< 0.29.21-5.module_el8.4.0+2369+c6fb4bc50.29.21-5.module_el8.4.0+2369+c6fb4bc5 -
< 0.29.21-5.module_el8.6.0+2780+a40f65e10.29.21-5.module_el8.6.0+2780+a40f65e1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to follow the recommended fix and update the affected package to the fixed version.
Conclusion
It is crucial to address this vulnerability in the python39:3.9 module in AlmaLinux. Update the affected package to the fixed version as soon as possible to mitigate the risk of unauthorized access, data breaches, or remote code execution. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for python39-Cython →
FAQ
This vulnerability could potentially lead to unauthorized access, data breaches, or remote code execution.
To fix this vulnerability, update the affected package to the fixed version as mentioned in the AlmaLinux Release Notes.
No specific workaround is mentioned for this vulnerability. It is recommended to update the affected package to the fixed version.
You can find more information about this vulnerability in the AlmaLinux Release Notes and the provided source link.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities without requiring access to the code or installation.
References
Related vulnerabilities
Recent vulnerabilities recorded for python39-Cython.
