advisories/28729.adv

type: security
subject: Updated python3 packages fix security vulnerability
CVE:
 - CVE-2021-3426
src:
  7:
   core:
     - python3-3.7.10-1.1.mga7
  8:
   core:
     - python3-3.8.9-1.mga8
description: |
  There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers
  or is able to convince another local or adjacent user to start a pydoc server
  could access the server and use it to disclose sensitive information belonging
  to the other user that they would not normally be able to access. The highest
  risk of this flaw is to data confidentiality (CVE-2021-3426).
references:
 - https://bugs.mageia.org/show_bug.cgi?id=28729
 - https://bugs.python.org/issue42988
 - https://bugzilla.redhat.com/show_bug.cgi?id=1935913
ID: MGASA-2021-0193
1	type: security
2	subject: Updated python3 packages fix security vulnerability
3	CVE:
4	- CVE-2021-3426
5	src:
6	7:
7	core:
8	- python3-3.7.10-1.1.mga7
9	8:
10	core:
11	- python3-3.8.9-1.mga8
12	description: \|
13	There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers
14	or is able to convince another local or adjacent user to start a pydoc server
15	could access the server and use it to disclose sensitive information belonging
16	to the other user that they would not normally be able to access. The highest
17	risk of this flaw is to data confidentiality (CVE-2021-3426).
18	references:
19	- https://bugs.mageia.org/show_bug.cgi?id=28729
20	- https://bugs.python.org/issue42988
21	- https://bugzilla.redhat.com/show_bug.cgi?id=1935913
22	ID: MGASA-2021-0193