Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2021-2813)

The remote host is missing an update for the Huawei EulerOS 'python3' package(s) announced via the EulerOS-SA-2021-2813 advisory.

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.(CVE-2021-3733) A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.(CVE-2021-3737)

'python3' package(s) on Huawei EulerOS V2.0SP8.

Checks if a vulnerable package version is present on the target host.

Please install the updated package(s).