FlawAtlas
Search the atlas
ALSA-2021:4150 Not scored

Moderate: python36:3.6 security and bug fix update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270) * python-pygments: ReDoS in multiple lexers (CVE-2021-27291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Exploit probability Not scored
Published November 9, 2021
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

AlmaLinux:8 python-nose-docs
AlmaLinux:8 python-pymongo-doc
AlmaLinux:8 python-sqlalchemy-doc
AlmaLinux:8 python-virtualenv-doc
AlmaLinux:8 python3-PyMySQL
AlmaLinux:8 python3-bson
AlmaLinux:8 python3-distro
AlmaLinux:8 python3-docs
AlmaLinux:8 python3-docutils
AlmaLinux:8 python3-nose
AlmaLinux:8 python3-pygments
AlmaLinux:8 python3-pymongo
AlmaLinux:8 python3-pymongo-gridfs
AlmaLinux:8 python3-scipy
AlmaLinux:8 python3-sqlalchemy
AlmaLinux:8 python3-virtualenv
AlmaLinux:8 python3-wheel
AlmaLinux:8 python3-wheel-wheel
AlmaLinux:8 python36
AlmaLinux:8 python36-debug
AlmaLinux:8 python36-devel
AlmaLinux:8 python36-rpm-macros

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities ALSA-2021:4150

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * python-pygments: Infinite loop in SML lexer may lead to DoS (CVE-2021-20270) * python-pygments: ReDoS in multiple lexers (CVE-2021-27291) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

View original source

05 / REFERENCES

Further evidence