What is RHSA-2021:4150?

RHSA-2021:4150 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: python36:3.6 security and bug fix update

Which CVE IDs does RHSA-2021:4150 cover?

RHSA-2021:4150 covers the following CVE IDs: CVE-2021-20270, CVE-2021-27291. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2021:4150?

RHSA-2021:4150 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2021:4150?

RHSA-2021:4150 affects 83 products, including: Red Hat Enterprise Linux AppStream (v. 8); python-PyMySQL-0:0.10.1-2.module+el8.4.0+9657+a4b6a102.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8); python-distro-0:1.4.0-2.module+el8.1.0+3334+5cb623d7.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8); python-docs-0:3.6.7-2.module+el8.1.0+3334+5cb623d7.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8); python-docutils-0:0.14-12.module+el8.1.0+3334+5cb623d7.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8); and others — see the full list on the advisory page.

RHSA-2021:4150MediumCVSS 7.5

Red Hat Security Advisory: python36:3.6 security and bug fix update

Vendor

Red Hat Product Security

Published

November 9, 2021

Last Modified

November 6, 2026

🔗 CVE IDs covered (2)

CVE-2021-20270 →CVE-2021-27291 →

📋 Description

CVE-2021-20270 — python-pygments: Infinite loop in SML lexer may lead to DoS CVE-2021-27291 — python-pygments: ReDoS in multiple lexers

🎯 Affected products83

Red Hat Enterprise Linux AppStream (v. 8)
python-PyMySQL-0:0.10.1-2.module+el8.4.0+9657+a4b6a102.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-distro-0:1.4.0-2.module+el8.1.0+3334+5cb623d7.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-docs-0:3.6.7-2.module+el8.1.0+3334+5cb623d7.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-docutils-0:0.14-12.module+el8.1.0+3334+5cb623d7.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-nose-0:1.3.7-31.module+el8.5.0+12207+5c5719bc.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-nose-docs-0:1.3.7-31.module+el8.5.0+12207+5c5719bc.noarch (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-pygments-0:2.2.0-22.module+el8.5.0+10789+e4939b94.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-pymongo-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-pymongo-debuginfo-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.aarch64 (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-pymongo-debuginfo-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.ppc64le (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-pymongo-debuginfo-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.s390x (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-pymongo-debuginfo-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.x86_64 (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-pymongo-debugsource-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.aarch64 (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-pymongo-debugsource-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.ppc64le (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-pymongo-debugsource-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.s390x (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-pymongo-debugsource-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.x86_64 (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-pymongo-doc-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.noarch (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-sqlalchemy-0:1.3.2-2.module+el8.3.0+6646+6b4b10ec.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-sqlalchemy-doc-0:1.3.2-2.module+el8.3.0+6646+6b4b10ec.noarch (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-virtualenv-0:15.1.0-21.module+el8.5.0+12207+5c5719bc.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-virtualenv-doc-0:15.1.0-21.module+el8.5.0+12207+5c5719bc.noarch (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python-wheel-1:0.31.1-3.module+el8.5.0+12207+5c5719bc.src (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python3-PyMySQL-0:0.10.1-2.module+el8.4.0+9657+a4b6a102.noarch (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python3-bson-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.aarch64 (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python3-bson-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.ppc64le (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python3-bson-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.s390x (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python3-bson-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.x86_64 (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python3-bson-debuginfo-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.aarch64 (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
python3-bson-debuginfo-0:3.7.0-1.module+el8.4.0+9670+1849b5f9.ppc64le (python36:3.6) as a component of Red Hat Enterprise Linux AppStream (v. 8)
+53 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

🔗 CVE IDs covered (2)

📋 Description

🎯 Affected products83

✅ Remediation

🔗 References (8)