VDB

RLSA-2021%3A4160

RLSA-2021%3A4160 PUBLISHED CVSS 9.100000381469727 CRITICAL

Record from OSV · Published November 9, 2021

Moderate: python39:3.9 and python39-devel:3.9 security update

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
python-wcwidthRocky Linux:80.2.5-3.module, 0:0.2.5-3.module+el8.4.0+574+843c4898
python-plyRocky Linux:83.11-10.module, 0:3.11-10.module+el8.4.0+570+c2eaf144
python-requestsRocky Linux:82.25.0-2.module, 0:2.25.0-2.module+el8.4.0+574+843c4898
python-more-itertoolsRocky Linux:88.5.0-2.module, 0:8.5.0-2.module+el8.4.0+574+843c4898
python-iniconfigRocky Linux:81.1.1-2.module, 0:1.1.1-2.module+el8.4.0+574+843c4898
pytestRocky Linux:86.0.2-2.module, 0:6.0.2-2.module+el8.4.0+574+843c4898
python3x-sixRocky Linux:81.15.0-3.module, 0:1.15.0-3.module+el8.4.0+574+843c4898
python-cffiRocky Linux:81.14.3-2.module, 0:1.14.3-2.module+el8.4.0+574+843c4898
python-pycparserRocky Linux:82.20-3.module, 0:2.20-3.module+el8.4.0+574+843c4898
python-packagingRocky Linux:820.4-4.module, 0:20.4-4.module+el8.4.0+574+843c4898
python3x-pyparsingRocky Linux:82.4.7-5.module, 0:2.4.7-5.module+el8.4.0+574+843c4898
CythonRocky Linux:80.29.21-5.module, 0:0.29.21-5.module+el8.4.0+574+843c4898

22 more packages have a fixed version. See every fix in Lookup.

Risk scores

CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

VendorProductVersions
Rocky Linux:8python-wcwidth0, 0
Rocky Linux:8python-ply0, 0
Rocky Linux:8python-requests0, 0
Rocky Linux:8python-more-itertools0, 0
Rocky Linux:8python-iniconfig0, 0
Rocky Linux:8pytest0, 0
Rocky Linux:8python3x-six0, 0
Rocky Linux:8python-cffi0, 0
Rocky Linux:8python-pycparser0, 0
Rocky Linux:8python-packaging0, 0
Rocky Linux:8python3x-pyparsing0, 0
Rocky Linux:8Cython0, 0
Rocky Linux:8python-PyMySQL0, 0, 0
Rocky Linux:8python-psutil0, 0, 0
Rocky Linux:8python-py0, 0
Rocky Linux:8python-toml0, 0
Rocky Linux:8scipy0, 0, 0
Rocky Linux:8mod_wsgi0, 0
Rocky Linux:8python-attrs0, 0
Rocky Linux:8python-psycopg20, 0, 0

…and 14 more

Timeline

  • Nov 9, 2021 CVE Published
  • Feb 5, 2026 CVE Updated
  • May 1, 2026 Distribution Patch

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RLSA-2021%3A4160
vulnetix vdb fixes RLSA-2021%3A4160

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RLSA-2021%253A4160/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›