Linux · AlmaLinux · Security advisory · November 16, 2022

ALSA-2022:8492: Security update for 36 packages

ALSA-2022:8492, released November 16, 2022, fixes 1 CVE across 36 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
1
None rated Critical
Exploited
0
None reported
Highest CVSS
7.8
Base score, 0 to 10
Highest EPSS
0.0080
56th percentile

Fixed package versions

ProductReleaseFixed in
python39almalinux 83.9.13-2.module_el8.7.0+3351+e02cdf9b
python39-PyMySQLalmalinux 80.10.1-2.module_el8.6.0+2780+a40f65e1
python39-cffialmalinux 81.14.3-2.module_el8.6.0+2780+a40f65e1
python39-chardetalmalinux 83.0.4-19.module_el8.6.0+2780+a40f65e1
python39-cryptographyalmalinux 83.3.1-2.module_el8.6.0+2780+a40f65e1
python39-develalmalinux 83.9.13-2.module_el8.7.0+3351+e02cdf9b
python39-idlealmalinux 83.9.13-2.module_el8.7.0+3351+e02cdf9b
python39-idnaalmalinux 82.10-3.module_el8.6.0+2780+a40f65e1
python39-libsalmalinux 83.9.13-2.module_el8.7.0+3351+e02cdf9b
python39-lxmlalmalinux 84.6.5-1.module_el8.6.0+2780+a40f65e1
python39-mod_wsgialmalinux 84.7.1-5.module_el8.7.0+3344+df07b58a
python39-numpyalmalinux 81.19.4-3.module_el8.6.0+2780+a40f65e1
python39-numpy-docalmalinux 81.19.4-3.module_el8.6.0+2780+a40f65e1
python39-numpy-f2pyalmalinux 81.19.4-3.module_el8.6.0+2780+a40f65e1
python39-pipalmalinux 820.2.4-7.module_el8.6.0+2780+a40f65e1
python39-pip-wheelalmalinux 820.2.4-7.module_el8.6.0+2780+a40f65e1
python39-plyalmalinux 83.11-10.module_el8.6.0+2780+a40f65e1
python39-psutilalmalinux 85.8.0-4.module_el8.6.0+2780+a40f65e1
python39-psycopg2almalinux 82.8.6-2.module_el8.7.0+3344+df07b58a
python39-psycopg2-docalmalinux 82.8.6-2.module_el8.7.0+3344+df07b58a
python39-psycopg2-testsalmalinux 82.8.6-2.module_el8.7.0+3344+df07b58a
python39-pycparseralmalinux 82.20-3.module_el8.6.0+2780+a40f65e1
python39-pysocksalmalinux 81.7.1-4.module_el8.6.0+2780+a40f65e1
python39-pyyamlalmalinux 85.4.1-1.module_el8.6.0+2780+a40f65e1
python39-requestsalmalinux 82.25.0-2.module_el8.6.0+2780+a40f65e1
python39-rpm-macrosalmalinux 83.9.13-2.module_el8.7.0+3351+e02cdf9b
python39-scipyalmalinux 81.5.4-3.module_el8.6.0+3248+c431e88c
python39-setuptoolsalmalinux 850.3.2-4.module_el8.6.0+2780+a40f65e1
python39-setuptools-wheelalmalinux 850.3.2-4.module_el8.6.0+2780+a40f65e1
python39-sixalmalinux 81.15.0-3.module_el8.6.0+2780+a40f65e1
python39-testalmalinux 83.9.13-2.module_el8.7.0+3351+e02cdf9b
python39-tkinteralmalinux 83.9.13-2.module_el8.7.0+3351+e02cdf9b
python39-tomlalmalinux 80.10.1-5.module_el8.6.0+2780+a40f65e1
python39-urllib3almalinux 81.25.10-4.module_el8.6.0+2780+a40f65e1
python39-wheelalmalinux 81:0.35.1-4.module_el8.6.0+2780+a40f65e1
python39-wheel-wheelalmalinux 81:0.35.1-4.module_el8.6.0+2780+a40f65e1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-42919 Python 3.10 and 4 others: Deserialization of Untrusted Data7.8 0.0080 None reported
Showing 1 to 1 of 1 1

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.