Stay Secure with the Latest Linux Advisories

security advisorysecurity updatehigh severity

Mageia 8: MGASA-2021-0193 High Risk: Python3 Pydoc Data Exposure

There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality (CVE-2021-3426). . MGASA-2021-0193 - Updated python3 packages fix security vulnerability Publication date: 18 Apr 2021 URL: https://advisories.mageia.org/MGASA-2021-0193.html Type: security Affected Mageia releases: 7, 8 CVE: CVE-2021-3426 There's a flaw in Python 3's pydoc. A local or adjacent attacker who discoversor is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to access. The highest risk of this flaw is to data confidentiality (CVE-2021-3426). References: - https://bugs.mageia.org/show_bug.cgi?id=28729 - https://bugs.python.org/issue42988 - https://bugzilla.redhat.com/show_bug.cgi?id=1935913 - https://www.cve.org/CVERecord?id=CVE-2021-3426 SRPMS: - 8/core/python3-3.8.9-1.mga8 - 7/core/python3-3.7.10-1.1.mga7 . MGASA-2021-0194 pertains to a Java vulnerability that jeopardizes system integrity; patch issued on April 20, 2021.. Python 3 Issue,Mageia 8 Advisory,Data Exposure Risk. . Severity: Important. LinuxSecurity.com Team

Apr 18, 2021 •Important Mageia