Open redirect in Python - CVE-2021-28861

Vulnerability identifier: #VU67591

CSH Severity: Low

CVSS v4: 2.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-28861

CWE-ID: CWE-601

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to redirect victims to arbitrary URL.

The vulnerability exists due to improper sanitization of user-supplied data in lib/http/server.py due to missing protection against multiple (/) at the beginning of URI path. A remote attacker can create a link that leads to a trusted website, however, when clicked, redirects the victim to arbitrary domain.

Successful exploitation of this vulnerability may allow a remote attacker to perform a phishing attack and steal potentially sensitive information.

Python
Gentoo Linux
Oracle Linux
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Module for Web Scripting
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Desktop Applications
SUSE Linux Enterprise Module for Python2
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Python3
openSUSE Leap
Ubuntu
openEuler
Fedora
Self Node Remediation Operator
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Data Foundation (formerly OpenShift Container Storage)
Red Hat OpenShift GitOps
Migration Toolkit for Containers
Migration Toolkit for Virtualization
Red Hat Advanced Cluster Management for Kubernetes
IBM Watson Assistant for IBM Cloud Pak for Data
OpenShift Logging
Dell EMC Data Protection Search
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Dell Secure Connect Gateway
EMC Integrated Data Protection Appliance
rh-python38-python (Red Hat package)
python3.9 (Ubuntu package)
python3.9-minimal (Ubuntu package)
python39-wcwidth
python39-PyMySQL
python39-toml
python39-pluggy
python39-Cython
python39-wheel-wheel
python39-wheel
python39-iniconfig
python39-scipy
python39-pysocks
python39-py
python39-cffi
python39-six
python39-numpy-doc
python39-numpy-f2py
python39-numpy
python39-urllib3
python39-pyparsing
python39-pybind11-devel
python39-pybind11
python-doc
python-base-debuginfo
python-doc-pdf
python-xml-debuginfo
python-xml
python-tk-debuginfo
python-tk
python-idle
python-gdbm-debuginfo
libpython2_7-1_0
python-debuginfo-32bit
python-debuginfo
python-curses-debuginfo
python-curses
python-debugsource
python-demo
python-devel
python-gdbm
libpython2_7-1_0-debuginfo
libpython2_7-1_0-debuginfo-32bit
python
python-32bit
python-base
python-base-debugsource
python-base-debuginfo-32bit
libpython2_7-1_0-32bit
python-base-32bit
python-base-32bit-debuginfo
python-32bit-debuginfo
libpython2_7-1_0-32bit-debuginfo
python39-psycopg2
python39-psycopg2-doc
python39-psycopg2-tests
python39-idna
python39-pycparser
python39-requests
python39-chardet
python39-cryptography
python3-base-debuginfo
python3-base-debugsource
python3-dbm
libpython3_4m1_0
libpython3_4m1_0-debuginfo
python3
python3-base
python3-debuginfo
python3-curses-debuginfo
python3-curses
python3-base-debuginfo-32bit
libpython3_4m1_0-debuginfo-32bit
libpython3_4m1_0-32bit
python3-tk-debuginfo
python3-tk
python3-devel-debuginfo
python3-devel
python3-debugsource
python3-dbm-debuginfo
libpython3.5-stdlib (Ubuntu package)
libpython3.5 (Ubuntu package)
python3.5-minimal (Ubuntu package)
python3.5 (Ubuntu package)
libpython3.5-minimal (Ubuntu package)
python3 (Red Hat package)
platform-python
platform-python-debug
platform-python-devel
python3-idle
python3-tkinter
python3-test
python3-libs
python3.6
python36-debuginfo
python36-devel
libpython3_6m1_0
libpython3_6m1_0-debuginfo
python36
python36-base
libpython3_6m1_0-debuginfo-32bit
libpython3_6m1_0-32bit
python36-debugsource
python36-base-debuginfo
python3-tools
python3-testsuite
python3-core-debugsource
libpython3_6m1_0-32bit-debuginfo
python3-testsuite-debuginfo
python3-doc-devhelp
python3-doc
python3-help
python3-debug
python3.7
python3.8
python3.9 (Red Hat package)
python3.9
python39-doc-devhelp
python39-idle
python39-dbm-debuginfo
python39-debuginfo
python39-debugsource
python39-doc
python39-devel
libpython3_9-1_0-32bit-debuginfo
python39-32bit
python39-32bit-debuginfo
python39-base-32bit
python39-base-32bit-debuginfo
python39-curses
libpython3_9-1_0-32bit
libpython3_9-1_0-debuginfo
python39
python39-tools
python39-tk-debuginfo
python39-base
python39-base-debuginfo
python39-core-debugsource
python39-tk
python39-testsuite-debuginfo
python39-curses-debuginfo
libpython3_9-1_0
python39-testsuite
python39-dbm
python39-debug
python39-libs
python39-tkinter
python39-rpm-macros
python39-test
python310-debuginfo
libpython3_10-1_0
python310-base-32bit
python310-base-32bit-debuginfo
libpython3_10-1_0-debuginfo
python310
python310-base
python310-base-debuginfo
python310-core-debugsource
python310-curses
python310-curses-debuginfo
python310-dbm
python310-dbm-debuginfo
python310-32bit-debuginfo
python310-testsuite
python310-idle
python310-doc-devhelp
python310-doc
python310-devel
python310-debugsource
python310-testsuite-debuginfo
python310-tk
python310-tk-debuginfo
python310-tools
libpython3_10-1_0-32bit
libpython3_10-1_0-32bit-debuginfo
python310-32bit
mingw-python3
python39-ply
python39-lxml
python39-mod_wsgi
python39-pyyaml
python39-psutil
python39-pytest
pypy3.7
pypy3.9
pypy3.8
pypy3.10
python39-more-itertools
python39-pip
python39-pip-wheel
python39-attrs
python39-packaging
python39-setuptools
python39-setuptools-wheel
Oracle Business Intelligence Enterprise Edition
OpenManage Network Integration (OMNI)
EMC ECS
EMC Cloud Tiering Appliance
Robotic Process Automation for Cloud Pak
Dell Enterprise SONiC Distribution
IBM Qradar SIEM
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
Dell EMC VxRail Appliance
PowerScale OneFS
IBM Security Verify Access

Install updates from vendor's website.

Python - addressed in versions 3.7.14, 3.8.14, 3.9.14, 3.10.6
Self Node Remediation Operator - update to 0.5.1
Migration Toolkit for Containers - update to 1.7.8
Multicluster Engine for Kubernetes - update to 2.1.6
OpenShift Service Mesh - update to 2.3.2
Migration Toolkit for Virtualization - update to 2.4.3
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.5.8, 2.6.5
rh-python38-python (Red Hat package) - update to 3.8.14-1.el7
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.11.7, 4.12.1, 4.12.2, 4.13.0
OpenShift Logging - addressed in versions 5.4.12, 5.5.8, 5.6.3
Dell EMC Data Protection Search - update to 19.6.2
python3.9 (Ubuntu package) - update to Ubuntu Pro
python3.9-minimal (Ubuntu package) - update to Ubuntu Pro
python39-wcwidth - update to 0.2.5-3
python39-PyMySQL - update to 0.10.1-2
python39-toml - update to 0.10.1-5
python39-pluggy - update to 0.13.1-3
python39-Cython - update to 0.29.21-5
python39-wheel-wheel - update to 0.35.1-4
python39-wheel - update to 0.35.1-4
python39-iniconfig - update to 1.1.1-2
python39-scipy - update to 1.5.4-3
python39-pysocks - update to 1.7.1-4
python39-py - update to 1.10.0-1
python39-cffi - update to 1.14.3-2
python39-six - update to 1.15.0-3
python39-numpy-doc - update to 1.19.4-3.0.1
python39-numpy-f2py - update to 1.19.4-3.0.1
python39-numpy - update to 1.19.4-3.0.1
python39-urllib3 - update to 1.25.10-4
python39-pyparsing - update to 2.4.7-5
python39-pybind11-devel - update to 2.7.1-1
python39-pybind11 - update to 2.7.1-1
python-doc - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-base-debuginfo - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1, 2.7.18-150000.44.1
python-doc-pdf - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-xml-debuginfo - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1, 2.7.18-150000.44.1
python-xml - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1, 2.7.18-150000.44.1
python-tk-debuginfo - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-tk - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-idle - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-gdbm-debuginfo - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
libpython2_7-1_0 - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1, 2.7.18-150000.44.1
python-debuginfo-32bit - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2
python-debuginfo - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-curses-debuginfo - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-curses - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-debugsource - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-demo - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-devel - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1, 2.7.18-150000.44.1
python-gdbm - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
libpython2_7-1_0-debuginfo - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1, 2.7.18-150000.44.1
libpython2_7-1_0-debuginfo-32bit - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1
python - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-32bit - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.2, 2.7.18-150000.44.1
python-base - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1, 2.7.18-150000.44.1
python-base-debugsource - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1, 2.7.18-150000.44.1
python-base-debuginfo-32bit - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1
libpython2_7-1_0-32bit - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1, 2.7.18-150000.44.1
python-base-32bit - addressed in versions 2.7.18-28.90.1, 2.7.18-33.14.1, 2.7.18-150000.44.1
python-base-32bit-debuginfo - update to 2.7.18-150000.44.1
python-32bit-debuginfo - update to 2.7.18-150000.44.1
libpython2_7-1_0-32bit-debuginfo - update to 2.7.18-150000.44.1
python39-psycopg2 - update to 2.8.6-2.0.1
python39-psycopg2-doc - update to 2.8.6-2.0.1
python39-psycopg2-tests - update to 2.8.6-2.0.1
python39-idna - update to 2.10-3
python39-pycparser - update to 2.20-3
python39-requests - update to 2.25.0-2
python39-chardet - update to 3.0.4-19
python39-cryptography - update to 3.3.1-2
python3-base-debuginfo - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-base-debugsource - update to 3.4.10-25.96.1
python3-dbm - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
libpython3_4m1_0 - update to 3.4.10-25.96.1
libpython3_4m1_0-debuginfo - update to 3.4.10-25.96.1
python3 - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-base - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-debuginfo - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-curses-debuginfo - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-curses - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-base-debuginfo-32bit - update to 3.4.10-25.96.1
libpython3_4m1_0-debuginfo-32bit - update to 3.4.10-25.96.1
libpython3_4m1_0-32bit - update to 3.4.10-25.96.1
python3-tk-debuginfo - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-tk - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-devel-debuginfo - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-devel - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-debugsource - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-dbm-debuginfo - addressed in versions 3.4.10-25.96.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
libpython3.5-stdlib (Ubuntu package) - update to 3.5.22ubuntu0~16.04.13+esm5
libpython3.5 (Ubuntu package) - update to 3.5.22ubuntu0~16.04.13+esm5
python3.5-minimal (Ubuntu package) - update to 3.5.22ubuntu0~16.04.13+esm5
python3.5 (Ubuntu package) - update to 3.5.22ubuntu0~16.04.13+esm5
libpython3.5-minimal (Ubuntu package) - update to 3.5.22ubuntu0~16.04.13+esm5
python3 (Red Hat package) - update to 3.6.8-48.el8_7.1
platform-python - update to 3.6.8-48.0.2
platform-python-debug - update to 3.6.8-48.0.2
platform-python-devel - update to 3.6.8-48.0.2
python3-idle - update to 3.6.8-48.0.2
python3-tkinter - update to 3.6.8-48.0.2
python3-test - update to 3.6.8-48.0.2
python3-libs - update to 3.6.8-48.0.2
python3.6 - addressed in versions 3.6.15-5.fc35, 3.6.15-11.fc36, 3.6.15-12.fc37, 3.6.15-12.fc38
python36-debuginfo - update to 3.6.15-27.1
python36-devel - update to 3.6.15-27.1
libpython3_6m1_0 - addressed in versions 3.6.15-27.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
libpython3_6m1_0-debuginfo - addressed in versions 3.6.15-27.1, 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python36 - update to 3.6.15-27.1
python36-base - update to 3.6.15-27.1
libpython3_6m1_0-debuginfo-32bit - update to 3.6.15-27.1
libpython3_6m1_0-32bit - addressed in versions 3.6.15-27.1, 3.6.15-150300.10.30.1
python36-debugsource - update to 3.6.15-27.1
python36-base-debuginfo - update to 3.6.15-27.1
python3-idle - addressed in versions 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-tools - addressed in versions 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-testsuite - addressed in versions 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
python3-core-debugsource - addressed in versions 3.6.15-150000.3.109.1, 3.6.15-150300.10.30.1
libpython3_6m1_0-32bit-debuginfo - update to 3.6.15-150300.10.30.1
python3-testsuite-debuginfo - update to 3.6.15-150300.10.30.1
python3-doc-devhelp - update to 3.6.15-150300.10.30.1
python3-doc - update to 3.6.15-150300.10.30.1
OpenManage Network Integration (OMNI) - update to 3.7
python3-debugsource - update to 3.7.9-25
python3-help - update to 3.7.9-25
python3-debuginfo - update to 3.7.9-25
python3-devel - update to 3.7.9-25
python3-debug - update to 3.7.9-25
python3 - update to 3.7.9-25
python3.7 - addressed in versions 3.7.14-1.fc35, 3.7.14-1.fc37
EMC ECS - update to 3.8.0.2
python3.8 - addressed in versions 3.8.14-1.fc35, 3.8.14-1.fc37
python3.9 (Red Hat package) - update to 3.9.14-1.el9
python3.9 - addressed in versions 3.9.14-1.fc35, 3.9.14-1.fc37
python39-doc-devhelp - update to 3.9.14-150300.4.16.1
python39-idle - update to 3.9.14-150300.4.16.1
python39-dbm-debuginfo - update to 3.9.14-150300.4.16.1
python39-debuginfo - update to 3.9.14-150300.4.16.1
python39-debugsource - update to 3.9.14-150300.4.16.1
python39-doc - update to 3.9.14-150300.4.16.1
python39-devel - update to 3.9.14-150300.4.16.1
libpython3_9-1_0-32bit-debuginfo - update to 3.9.14-150300.4.16.1
python39-32bit - update to 3.9.14-150300.4.16.1
python39-32bit-debuginfo - update to 3.9.14-150300.4.16.1
python39-base-32bit - update to 3.9.14-150300.4.16.1
python39-base-32bit-debuginfo - update to 3.9.14-150300.4.16.1
python39-curses - update to 3.9.14-150300.4.16.1
libpython3_9-1_0-32bit - update to 3.9.14-150300.4.16.1
libpython3_9-1_0-debuginfo - update to 3.9.14-150300.4.16.1
python39 - update to 3.9.14-150300.4.16.1
python39-tools - update to 3.9.14-150300.4.16.1
python39-tk-debuginfo - update to 3.9.14-150300.4.16.1
python39-base - update to 3.9.14-150300.4.16.1
python39-base-debuginfo - update to 3.9.14-150300.4.16.1
python39-core-debugsource - update to 3.9.14-150300.4.16.1
python39-tk - update to 3.9.14-150300.4.16.1
python39-testsuite-debuginfo - update to 3.9.14-150300.4.16.1
python39-curses-debuginfo - update to 3.9.14-150300.4.16.1
libpython3_9-1_0 - update to 3.9.14-150300.4.16.1
python39-testsuite - update to 3.9.14-150300.4.16.1
python39-dbm - update to 3.9.14-150300.4.16.1
python39-debug - update to 3.9.16-2.0.1
python39 - update to 3.9.16-2.0.1
python39-idle - update to 3.9.16-2.0.1
python39-libs - update to 3.9.16-2.0.1
python39-devel - update to 3.9.16-2.0.1
python39-tkinter - update to 3.9.16-2.0.1
python39-rpm-macros - update to 3.9.16-2.0.1
python39-test - update to 3.9.16-2.0.1
python310-debuginfo - update to 3.10.7-150400.4.10.1
libpython3_10-1_0 - update to 3.10.7-150400.4.10.1
python310-base-32bit - update to 3.10.7-150400.4.10.1
python310-base-32bit-debuginfo - update to 3.10.7-150400.4.10.1
libpython3_10-1_0-debuginfo - update to 3.10.7-150400.4.10.1
python310 - update to 3.10.7-150400.4.10.1
python310-base - update to 3.10.7-150400.4.10.1
python310-base-debuginfo - update to 3.10.7-150400.4.10.1
python310-core-debugsource - update to 3.10.7-150400.4.10.1
python310-curses - update to 3.10.7-150400.4.10.1
python310-curses-debuginfo - update to 3.10.7-150400.4.10.1
python310-dbm - update to 3.10.7-150400.4.10.1
python310-dbm-debuginfo - update to 3.10.7-150400.4.10.1
python310-32bit-debuginfo - update to 3.10.7-150400.4.10.1
python310-testsuite - update to 3.10.7-150400.4.10.1
python310-idle - update to 3.10.7-150400.4.10.1
python310-doc-devhelp - update to 3.10.7-150400.4.10.1
python310-doc - update to 3.10.7-150400.4.10.1
python310-devel - update to 3.10.7-150400.4.10.1
python310-debugsource - update to 3.10.7-150400.4.10.1
python310-testsuite-debuginfo - update to 3.10.7-150400.4.10.1
python310-tk - update to 3.10.7-150400.4.10.1
python310-tk-debuginfo - update to 3.10.7-150400.4.10.1
python310-tools - update to 3.10.7-150400.4.10.1
libpython3_10-1_0-32bit - update to 3.10.7-150400.4.10.1
libpython3_10-1_0-32bit-debuginfo - update to 3.10.7-150400.4.10.1
python310-32bit - update to 3.10.7-150400.4.10.1
mingw-python3 - addressed in versions 3.10.8-1.fc36, 3.10.8-1.fc37
python39-ply - update to 3.11-10
Dell Enterprise SONiC Distribution - update to 4.4.2
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.6.5
python39-lxml - update to 4.6.5-1
python39-mod_wsgi - update to 4.7.1-5
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.8.0.1
EMC ViPR SRM - update to 4.8.0.1
python39-pyyaml - update to 5.4.1-1
python39-psutil - update to 5.8.0-4.0.1
Dell Secure Connect Gateway - update to 5.14.00.16
python39-pytest - update to 6.0.2-2
pypy3.7 - addressed in versions 7.3.9-4.3.7.fc35, 7.3.9-4.3.7.fc36
pypy3.9 - addressed in versions 7.3.9-4.3.9.fc35, 7.3.9-4.3.9.fc36, 7.3.9-4.3.9.fc37, 7.3.9-4.3.9.fc38
pypy3.8 - addressed in versions 7.3.9-5.3.8.fc35, 7.3.9-5.3.8.fc36, 7.3.9-5.3.8.fc37, 7.3.9-5.3.8.fc38
pypy3.10 - addressed in versions 7.3.12-1.3.10.fc39, 7.3.12-1.3.10.fc40
IBM Qradar SIEM - update to 7.5.0 Update Pack 6
Dell EMC VxRail Appliance - update to 8.0.000
python39-more-itertools - update to 8.5.0-2
PowerScale OneFS - update to 9.5.0.6
IBM Security Verify Access - update to 10.0.5.0 FP001
EMC Cloud Tiering Appliance - update to 13.1.0.2.29
python39-pip - update to 20.2.4-7
python39-pip-wheel - update to 20.2.4-7
python39-attrs - update to 20.3.0-2
python39-packaging - update to 20.4-4
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.3, 23.0.4
python39-setuptools - update to 50.3.2-4
python39-setuptools-wheel - update to 50.3.2-4

• https://github.com/python/cpython/pull/93879
• https://bugs.python.org/issue43223
• https://github.com/python/cpython/pull/24848
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OKYE2DOI2X7WZXAWTQJZAXYIWM37HDCY/

• Open redirect in Python
• Ubuntu update for python3.5
• SUSE update for python310
• SUSE update for python36
• SUSE update for python39
• Red Hat Software Collections update for rh-python38-python
• SUSE update for python3
• SUSE update for python
• SUSE update for python3
• SUSE update for python
• SUSE update for python3
• SUSE update for python
• SUSE update for python3
• SUSE update for python
• Red Hat Enterprise Linux 9 update for python3.9
• Multiple vulnerabilities in Dell SRM and Dell Storage Monitoring and Reporting
• Multiple vulnerabilities in Dell VxRail Appliance components
• Multiple vulnerabilities in Dell Data Protection Search
• Red Hat Enterprise Linux 8 update for python3
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Ubuntu update for python3.9
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.5
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.4
• Multiple vulnerabilities in OpenShift Logging 5.6
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.12
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC)
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.7
• Multiple vulnerabilities in Red Hat OpenShift GitOps 1.6
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.3
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.12
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.11
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.1
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Gentoo update for Python, PyPy3
• Open redirect in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.5
• Multiple vulnerabilities in IBM Security Verify Access
• Red Hat Enterprise Linux 8 update for the python39:3.9 and python39-devel:3.9 modules
• Red Hat Enterprise Linux 8 update for the python38:3.8 and python38-devel:3.8 modules
• Multiple vulnerabilities in Dell ECS
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Watson Assistant for IBM Cloud Pak for Data
• Multiple vulnerabilities in Oracle Linux
• Fedora 40 update for pypy3.10
• Fedora 39 update for pypy3.10
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in Dell PowerScale OneFS
• openEuler update for python3
• Multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition
• Fedora 37 update for python3.7
• Fedora 35 update for python3.7
• Fedora 35 update for python3.8
• Fedora 37 update for python3.8
• Fedora 37 update for python3.9
• Fedora 35 update for python3.9
• Fedora 38 update for python3.6
• Fedora 37 update for python3.6
• Fedora 36 update for python3.6
• Fedora 35 update for python3.6
• Fedora 38 update for pypy3.8
• Fedora 37 update for pypy3.8
• Fedora 38 update for pypy3.9
• Fedora 36 update for pypy3.8
• Fedora 35 update for pypy3.8
• Fedora 37 update for pypy3.9
• Fedora 36 update for pypy3.9
• Fedora 35 update for pypy3.9
• Fedora 35 update for pypy3.7
• Fedora 36 update for pypy3.7
• Fedora 37 update for mingw-python3
• Fedora 36 update for mingw-python3
• Multiple vulnerabilities in Dell OpenManage Network Integration (OMNI)
• Anolis OS update for python3
• Anolis OS update for python39:3.9 module
• Multiple vulnerabilities in Dell Enterprise SONiC Distribution