Linux · Security advisory · August 1, 2023

RHSA-2023:4350: Security update for 3 packages

RHSA-2023:4350, released August 1, 2023, fixes 1 CVE across 3 products. None of them is reported as exploited. Patch Radar priority: Routine.

Routine

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0297

87th percentile

Fixed package versions

Product	Release	Fixed in
python3-requests	RHEL 9	0:2.25.1-7.el9_2
python3-requests+security	RHEL 9	0:2.25.1-7.el9_2
python3-requests+socks	RHEL 9	0:2.25.1-7.el9_2

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Routine	CVE-2023-32681	requests: Requests is a HTTP library		6.1	0.0297	None reported

Also fixes CVE-2023-32681

RLSA-2023:7034
pybind11, python-iniconfig, python-toml on rocky 8
RLSA-2023:7050
Cython, PyYAML, babel and 34 more on rocky 8
ELSA-2023-7034
python39, python39-Cython, python39-PyMySQL and 46 more on ol 8
ELSA-2023-7050
python38, python38-Cython, python38-PyMySQL and 48 more on ol 8
ALSA-2023:7034
python39, python39-Cython, python39-PyMySQL and 46 more on almalinux 8
ALSA-2023:7050
python38, python38-Cython, python38-PyMySQL and 48 more on almalinux 8
RHSA-2023:7034
python39, python39-Cython, python39-PyMySQL and 46 more on RHEL 8
RHSA-2023:7050
python38, python38-Cython, python38-PyMySQL and 48 more on RHEL 8

Vendor advisory

https://access.redhat.com/errata/RHSA-2023:4350

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo