vulnerability
CentOS Linux: CVE-2021-42771: Moderate: python27:2.7 security update (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | 11/09/2021 | 11/10/2021 | 05/25/2023 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
11/09/2021
Added
11/10/2021
Modified
05/25/2023
Description
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
Solution(s)
centos-upgrade-babelcentos-upgrade-cython-debugsourcecentos-upgrade-numpy-debugsourcecentos-upgrade-python-cffi-debugsourcecentos-upgrade-python-coverage-debugsourcecentos-upgrade-python-cryptography-debugsourcecentos-upgrade-python-lxml-debugsourcecentos-upgrade-python-markupsafe-debugsourcecentos-upgrade-python-nose-docscentos-upgrade-python-psutil-debugsourcecentos-upgrade-python-psycopg2-debuginfocentos-upgrade-python-psycopg2-debugsourcecentos-upgrade-python-psycopg2-doccentos-upgrade-python-pymongo-debuginfocentos-upgrade-python-pymongo-debugsourcecentos-upgrade-python-sqlalchemy-doccentos-upgrade-python2centos-upgrade-python2-attrscentos-upgrade-python2-babelcentos-upgrade-python2-backportscentos-upgrade-python2-backports-ssl_match_hostnamecentos-upgrade-python2-bsoncentos-upgrade-python2-bson-debuginfocentos-upgrade-python2-chardetcentos-upgrade-python2-coveragecentos-upgrade-python2-coverage-debuginfocentos-upgrade-python2-cythoncentos-upgrade-python2-cython-debuginfocentos-upgrade-python2-debugcentos-upgrade-python2-debuginfocentos-upgrade-python2-debugsourcecentos-upgrade-python2-develcentos-upgrade-python2-dnscentos-upgrade-python2-docscentos-upgrade-python2-docs-infocentos-upgrade-python2-docutilscentos-upgrade-python2-funcsigscentos-upgrade-python2-idnacentos-upgrade-python2-ipaddresscentos-upgrade-python2-jinja2centos-upgrade-python2-libscentos-upgrade-python2-lxmlcentos-upgrade-python2-lxml-debuginfocentos-upgrade-python2-markupsafecentos-upgrade-python2-mockcentos-upgrade-python2-nosecentos-upgrade-python2-numpycentos-upgrade-python2-numpy-debuginfocentos-upgrade-python2-numpy-doccentos-upgrade-python2-numpy-f2pycentos-upgrade-python2-pipcentos-upgrade-python2-pip-wheelcentos-upgrade-python2-pluggycentos-upgrade-python2-psycopg2centos-upgrade-python2-psycopg2-debugcentos-upgrade-python2-psycopg2-debug-debuginfocentos-upgrade-python2-psycopg2-debuginfocentos-upgrade-python2-psycopg2-testscentos-upgrade-python2-pycentos-upgrade-python2-pygmentscentos-upgrade-python2-pymongocentos-upgrade-python2-pymongo-debuginfocentos-upgrade-python2-pymongo-gridfscentos-upgrade-python2-pymysqlcentos-upgrade-python2-pysockscentos-upgrade-python2-pytestcentos-upgrade-python2-pytest-mockcentos-upgrade-python2-pytzcentos-upgrade-python2-pyyamlcentos-upgrade-python2-pyyaml-debuginfocentos-upgrade-python2-requestscentos-upgrade-python2-rpm-macroscentos-upgrade-python2-scipycentos-upgrade-python2-scipy-debuginfocentos-upgrade-python2-setuptoolscentos-upgrade-python2-setuptools-wheelcentos-upgrade-python2-setuptools_scmcentos-upgrade-python2-sixcentos-upgrade-python2-sqlalchemycentos-upgrade-python2-testcentos-upgrade-python2-tkintercentos-upgrade-python2-toolscentos-upgrade-python2-urllib3centos-upgrade-python2-virtualenvcentos-upgrade-python2-wheelcentos-upgrade-python2-wheel-wheelcentos-upgrade-python3-babelcentos-upgrade-python38centos-upgrade-python38-asn1cryptocentos-upgrade-python38-babelcentos-upgrade-python38-cfficentos-upgrade-python38-cffi-debuginfocentos-upgrade-python38-chardetcentos-upgrade-python38-cryptographycentos-upgrade-python38-cryptography-debuginfocentos-upgrade-python38-cythoncentos-upgrade-python38-cython-debuginfocentos-upgrade-python38-debugcentos-upgrade-python38-debuginfocentos-upgrade-python38-debugsourcecentos-upgrade-python38-develcentos-upgrade-python38-idlecentos-upgrade-python38-idnacentos-upgrade-python38-jinja2centos-upgrade-python38-libscentos-upgrade-python38-lxmlcentos-upgrade-python38-lxml-debuginfocentos-upgrade-python38-markupsafecentos-upgrade-python38-markupsafe-debuginfocentos-upgrade-python38-mod_wsgicentos-upgrade-python38-numpycentos-upgrade-python38-numpy-debuginfocentos-upgrade-python38-numpy-doccentos-upgrade-python38-numpy-f2pycentos-upgrade-python38-pipcentos-upgrade-python38-pip-wheelcentos-upgrade-python38-plycentos-upgrade-python38-psutilcentos-upgrade-python38-psutil-debuginfocentos-upgrade-python38-psycopg2centos-upgrade-python38-psycopg2-debuginfocentos-upgrade-python38-psycopg2-doccentos-upgrade-python38-psycopg2-testscentos-upgrade-python38-pycparsercentos-upgrade-python38-pymysqlcentos-upgrade-python38-pysockscentos-upgrade-python38-pytzcentos-upgrade-python38-pyyamlcentos-upgrade-python38-pyyaml-debuginfocentos-upgrade-python38-requestscentos-upgrade-python38-rpm-macroscentos-upgrade-python38-scipycentos-upgrade-python38-scipy-debuginfocentos-upgrade-python38-setuptoolscentos-upgrade-python38-setuptools-wheelcentos-upgrade-python38-sixcentos-upgrade-python38-testcentos-upgrade-python38-tkintercentos-upgrade-python38-urllib3centos-upgrade-python38-wheelcentos-upgrade-python38-wheel-wheelcentos-upgrade-pyyaml-debugsourcecentos-upgrade-scipy-debugsource
References
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.