Linux · Security advisory · May 23, 2023

ELSA-2023-2763: Security update for 51 packages

ELSA-2023-2763, released May 23, 2023, fixes 3 CVEs across 51 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0454
91st percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
python38ol 80:3.8.16-1.module+el8.8.0+21001+646f3fba
python38-Cythonol 80:0.29.14-4.module+el8.4.0+20068+32a535e2
python38-PyMySQLol 80:0.10.1-1.module+el8.4.0+20068+32a535e2
python38-asn1cryptool 80:1.2.0-3.module+el8.4.0+20068+32a535e2
python38-atomicwritesol 80:1.3.0-8.module+el8.2.0+5579+085cd3bd
python38-attrsol 80:19.3.0-3.module+el8.2.0+5579+085cd3bd
python38-babelol 80:2.7.0-11.module+el8.5.0+20371+4f24d723
python38-cffiol 80:1.13.2-3.module+el8.4.0+20068+32a535e2
python38-chardetol 80:3.0.4-19.module+el8.4.0+20068+32a535e2
python38-cryptographyol 80:2.8-3.module+el8.4.0+20068+32a535e2
python38-debugol 80:3.8.16-1.module+el8.8.0+21001+646f3fba
python38-develol 80:3.8.16-1.module+el8.8.0+21001+646f3fba
python38-idleol 80:3.8.16-1.module+el8.8.0+21001+646f3fba
python38-idnaol 80:2.8-6.module+el8.4.0+20068+32a535e2
python38-jinja2ol 80:2.11.3-1.module+el8.7.0+20792+22659047
python38-libsol 80:3.8.16-1.module+el8.8.0+21001+646f3fba
python38-lxmlol 80:4.4.1-7.module+el8.6.0+20556+9910889d
python38-markupsafeol 80:1.1.1-6.module+el8.4.0+20068+32a535e2
python38-mod_wsgiol 80:4.6.8-4.module+el8.7.0+20869+e1465161
python38-more-itertoolsol 80:7.2.0-5.module+el8.2.0+5579+085cd3bd
python38-numpyol 80:1.17.3-6.module+el8.5.0+20371+4f24d723
python38-numpy-docol 80:1.17.3-6.module+el8.5.0+20371+4f24d723
python38-numpy-f2pyol 80:1.17.3-6.module+el8.5.0+20371+4f24d723
python38-packagingol 80:19.2-3.module+el8.2.0+5579+085cd3bd
python38-pipol 80:19.3.1-6.module+el8.7.0+20792+22659047
python38-pip-wheelol 80:19.3.1-6.module+el8.7.0+20792+22659047
python38-pluggyol 80:0.13.0-3.module+el8.2.0+5579+085cd3bd
python38-plyol 80:3.11-10.module+el8.4.0+20068+32a535e2
python38-psutilol 80:5.6.4-4.module+el8.5.0+20371+4f24d723
python38-psycopg2ol 80:2.8.4-4.module+el8.4.0+20068+32a535e2
python38-psycopg2-docol 80:2.8.4-4.module+el8.4.0+20068+32a535e2
python38-psycopg2-testsol 80:2.8.4-4.module+el8.4.0+20068+32a535e2
python38-pyol 80:1.8.0-8.module+el8.2.0+5579+085cd3bd
python38-pycparserol 80:2.19-3.module+el8.4.0+20068+32a535e2
python38-pyparsingol 80:2.4.5-3.module+el8.2.0+5579+085cd3bd
python38-pysocksol 80:1.7.1-4.module+el8.4.0+20068+32a535e2
python38-pytestol 80:4.6.6-3.module+el8.2.0+5579+085cd3bd
python38-pytzol 80:2019.3-3.module+el8.4.0+20068+32a535e2
python38-pyyamlol 80:5.4.1-1.module+el8.5.0+20371+4f24d723
python38-requestsol 80:2.22.0-9.module+el8.4.0+20068+32a535e2
python38-rpm-macrosol 80:3.8.16-1.module+el8.8.0+21001+646f3fba
python38-scipyol 80:1.3.1-4.module+el8.4.0+20068+32a535e2
python38-setuptoolsol 80:41.6.0-5.module+el8.5.0+20371+4f24d723
python38-setuptools-wheelol 80:41.6.0-5.module+el8.5.0+20371+4f24d723
python38-sixol 80:1.12.0-10.module+el8.4.0+20068+32a535e2
python38-testol 80:3.8.16-1.module+el8.8.0+21001+646f3fba
python38-tkinterol 80:3.8.16-1.module+el8.8.0+21001+646f3fba
python38-urllib3ol 80:1.25.7-5.module+el8.5.0+20371+4f24d723
python38-wcwidthol 80:0.1.7-16.module+el8.2.0+5579+085cd3bd
python38-wheelol 80:0.33.6-6.module+el8.5.0+20371+4f24d723
python38-wheel-wheelol 80:0.33.6-6.module+el8.5.0+20371+4f24d723

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-10735 Python 3.8 and 5 others: Incorrect Type Conversion or Cast 7.5 0.0454 None reported
High CVE-2022-45061 python2-pyyaml: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception... 7.5 0.0333 None reported
High CVE-2021-28861 Python 3.8 and 7 others: URL Redirection to Untrusted Site ('Open Redirect') 7.6 0.0268 None reported
Showing 1 to 3 of 3 1