Linux · Security advisory · August 29, 2024

ELSA-2024-5962: Security update for 37 packages

ELSA-2024-5962, released August 29, 2024, fixes 4 CVEs across 37 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0194
80th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
python39ol 80:3.9.19-7.module+el8.10.0+90395+b6c4aad1
python39-PyMySQLol 80:0.10.1-2.module+el8.9.0+90016+9c2d6573
python39-cffiol 80:1.14.3-2.module+el8.9.0+90016+9c2d6573
python39-chardetol 80:3.0.4-19.module+el8.9.0+90016+9c2d6573
python39-cryptographyol 80:3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99
python39-debugol 80:3.9.19-7.module+el8.10.0+90395+b6c4aad1
python39-develol 80:3.9.19-7.module+el8.10.0+90395+b6c4aad1
python39-idleol 80:3.9.19-7.module+el8.10.0+90395+b6c4aad1
python39-idnaol 80:2.10-4.module+el8.10.0+90341+71ca88f4
python39-libsol 80:3.9.19-7.module+el8.10.0+90395+b6c4aad1
python39-lxmlol 80:4.6.5-1.module+el8.9.0+90016+9c2d6573
python39-mod_wsgiol 80:4.7.1-7.module+el8.9.0+90016+9c2d6573
python39-numpyol 80:1.19.4-3.module+el8.9.0+90016+9c2d6573
python39-numpy-docol 80:1.19.4-3.module+el8.9.0+90016+9c2d6573
python39-numpy-f2pyol 80:1.19.4-3.module+el8.9.0+90016+9c2d6573
python39-pipol 80:20.2.4-9.module+el8.10.0+90269+2fa22b99
python39-pip-wheelol 80:20.2.4-9.module+el8.10.0+90269+2fa22b99
python39-plyol 80:3.11-10.module+el8.9.0+90016+9c2d6573
python39-psutilol 80:5.8.0-4.module+el8.9.0+90016+9c2d6573
python39-psycopg2ol 80:2.8.6-3.module+el8.10.0+90269+2fa22b99
python39-psycopg2-docol 80:2.8.6-3.module+el8.10.0+90269+2fa22b99
python39-psycopg2-testsol 80:2.8.6-3.module+el8.10.0+90269+2fa22b99
python39-pycparserol 80:2.20-3.module+el8.9.0+90016+9c2d6573
python39-pysocksol 80:1.7.1-4.module+el8.9.0+90016+9c2d6573
python39-pyyamlol 80:5.4.1-1.module+el8.9.0+90016+9c2d6573
python39-requestsol 80:2.25.0-3.module+el8.9.0+90016+9c2d6573
python39-rpm-macrosol 80:3.9.19-7.module+el8.10.0+90395+b6c4aad1
python39-scipyol 80:1.5.4-5.module+el8.9.0+90016+9c2d6573
python39-setuptoolsol 80:50.3.2-6.module+el8.10.0+90395+b6c4aad1
python39-setuptools-wheelol 80:50.3.2-6.module+el8.10.0+90395+b6c4aad1
python39-sixol 80:1.15.0-3.module+el8.9.0+90016+9c2d6573
python39-testol 80:3.9.19-7.module+el8.10.0+90395+b6c4aad1
python39-tkinterol 80:3.9.19-7.module+el8.10.0+90395+b6c4aad1
python39-tomlol 80:0.10.1-5.module+el8.9.0+90016+9c2d6573
python39-urllib3ol 80:1.25.10-5.module+el8.10.0+90269+2fa22b99
python39-wheelol 81:0.35.1-4.module+el8.9.0+90016+9c2d6573
python39-wheel-wheelol 81:0.35.1-4.module+el8.9.0+90016+9c2d6573

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-6345 fence-agents-aliyun: The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices 8.8 0.0194 None reported
High CVE-2024-8088 Infinite loop when iterating over zip archive entry names from zipfile.Path 8.8 0.0128 None reported
High CVE-2024-6923 Email header injection due to unquoted newlines 8.8 0.0110 None reported
High CVE-2024-4032 Incorrect IPv4 and IPv6 private ranges 8.8 0.0108 None reported
Showing 1 to 4 of 4 1