VDB
RLSA-2021%3A4160
RLSA-2021%3A4160
PUBLISHED
CVSS 9.100000381469727 CRITICAL
Record from OSV · Published November 9, 2021
Moderate: python39:3.9 and python39-devel:3.9 security update
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| python-wcwidth | Rocky Linux:8 | 0.2.5-3.module, 0:0.2.5-3.module+el8.4.0+574+843c4898 |
| python-ply | Rocky Linux:8 | 3.11-10.module, 0:3.11-10.module+el8.4.0+570+c2eaf144 |
| python-requests | Rocky Linux:8 | 2.25.0-2.module, 0:2.25.0-2.module+el8.4.0+574+843c4898 |
| python-more-itertools | Rocky Linux:8 | 8.5.0-2.module, 0:8.5.0-2.module+el8.4.0+574+843c4898 |
| python-iniconfig | Rocky Linux:8 | 1.1.1-2.module, 0:1.1.1-2.module+el8.4.0+574+843c4898 |
| pytest | Rocky Linux:8 | 6.0.2-2.module, 0:6.0.2-2.module+el8.4.0+574+843c4898 |
| python3x-six | Rocky Linux:8 | 1.15.0-3.module, 0:1.15.0-3.module+el8.4.0+574+843c4898 |
| python-cffi | Rocky Linux:8 | 1.14.3-2.module, 0:1.14.3-2.module+el8.4.0+574+843c4898 |
| python-pycparser | Rocky Linux:8 | 2.20-3.module, 0:2.20-3.module+el8.4.0+574+843c4898 |
| python-packaging | Rocky Linux:8 | 20.4-4.module, 0:20.4-4.module+el8.4.0+574+843c4898 |
| python3x-pyparsing | Rocky Linux:8 | 2.4.7-5.module, 0:2.4.7-5.module+el8.4.0+574+843c4898 |
| Cython | Rocky Linux:8 | 0.29.21-5.module, 0:0.29.21-5.module+el8.4.0+574+843c4898 |
22 more packages have a fixed version. See every fix in Lookup.
Risk scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Rocky Linux:8 | python-wcwidth | 0, 0 |
| Rocky Linux:8 | python-ply | 0, 0 |
| Rocky Linux:8 | python-requests | 0, 0 |
| Rocky Linux:8 | python-more-itertools | 0, 0 |
| Rocky Linux:8 | python-iniconfig | 0, 0 |
| Rocky Linux:8 | pytest | 0, 0 |
| Rocky Linux:8 | python3x-six | 0, 0 |
| Rocky Linux:8 | python-cffi | 0, 0 |
| Rocky Linux:8 | python-pycparser | 0, 0 |
| Rocky Linux:8 | python-packaging | 0, 0 |
| Rocky Linux:8 | python3x-pyparsing | 0, 0 |
| Rocky Linux:8 | Cython | 0, 0 |
| Rocky Linux:8 | python-PyMySQL | 0, 0, 0 |
| Rocky Linux:8 | python-psutil | 0, 0, 0 |
| Rocky Linux:8 | python-py | 0, 0 |
| Rocky Linux:8 | python-toml | 0, 0 |
| Rocky Linux:8 | scipy | 0, 0, 0 |
| Rocky Linux:8 | mod_wsgi | 0, 0 |
| Rocky Linux:8 | python-attrs | 0, 0 |
| Rocky Linux:8 | python-psycopg2 | 0, 0, 0 |
…and 14 more
Timeline
- Nov 9, 2021 CVE Published
- Feb 5, 2026 CVE Updated
- May 1, 2026 Distribution Patch
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln RLSA-2021%3A4160
vulnetix vdb fixes RLSA-2021%3A4160
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/RLSA-2021%253A4160/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://errata.rockylinux.org/RLSA-2021:4160 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1962856 report
- https://bugzilla.redhat.com/show_bug.cgi?id=1968074 report
- https://bugzilla.redhat.com/show_bug.cgi?id=1995162 report
- https://bugzilla.redhat.com/show_bug.cgi?id=1995234 report
- https://bugzilla.redhat.com/show_bug.cgi?id=1935913 report
- https://bugzilla.redhat.com/show_bug.cgi?id=1941534 report
- https://bugzilla.redhat.com/show_bug.cgi?id=1957458 report