Linux · Security advisory · November 14, 2023

RHSA-2023:7050: Security update for 51 packages

RHSA-2023:7050, released November 14, 2023, fixes 2 CVEs across 51 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.2710
98th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
python38RHEL 80:3.8.17-2.module+el8.9.0+19642+a12b4af6
python38-CythonRHEL 80:0.29.14-4.module+el8.9.0+19598+4a60c7b7
python38-PyMySQLRHEL 80:0.10.1-1.module+el8.9.0+19598+4a60c7b7
python38-asn1cryptoRHEL 80:1.2.0-3.module+el8.9.0+19598+4a60c7b7
python38-atomicwritesRHEL 80:1.3.0-8.module+el8.9.0+19592+4b459c9b
python38-attrsRHEL 80:19.3.0-3.module+el8.9.0+19592+4b459c9b
python38-babelRHEL 80:2.7.0-11.module+el8.9.0+19598+4a60c7b7
python38-cffiRHEL 80:1.13.2-3.module+el8.9.0+19598+4a60c7b7
python38-chardetRHEL 80:3.0.4-19.module+el8.9.0+19592+4b459c9b
python38-cryptographyRHEL 80:2.8-3.module+el8.9.0+19598+4a60c7b7
python38-debugRHEL 80:3.8.17-2.module+el8.9.0+19642+a12b4af6
python38-develRHEL 80:3.8.17-2.module+el8.9.0+19642+a12b4af6
python38-idleRHEL 80:3.8.17-2.module+el8.9.0+19642+a12b4af6
python38-idnaRHEL 80:2.8-6.module+el8.9.0+19598+4a60c7b7
python38-jinja2RHEL 80:2.11.3-1.module+el8.9.0+19598+4a60c7b7
python38-libsRHEL 80:3.8.17-2.module+el8.9.0+19642+a12b4af6
python38-lxmlRHEL 80:4.4.1-7.module+el8.9.0+19598+4a60c7b7
python38-markupsafeRHEL 80:1.1.1-6.module+el8.9.0+19592+4b459c9b
python38-mod_wsgiRHEL 80:4.6.8-5.module+el8.9.0+19598+4a60c7b7
python38-more-itertoolsRHEL 80:7.2.0-5.module+el8.9.0+19592+4b459c9b
python38-numpyRHEL 80:1.17.3-7.module+el8.9.0+19598+4a60c7b7
python38-numpy-docRHEL 80:1.17.3-7.module+el8.9.0+19598+4a60c7b7
python38-numpy-f2pyRHEL 80:1.17.3-7.module+el8.9.0+19598+4a60c7b7
python38-packagingRHEL 80:19.2-3.module+el8.9.0+19592+4b459c9b
python38-pipRHEL 80:19.3.1-7.module+el8.9.0+19642+a12b4af6
python38-pip-wheelRHEL 80:19.3.1-7.module+el8.9.0+19642+a12b4af6
python38-pluggyRHEL 80:0.13.0-3.module+el8.9.0+19592+4b459c9b
python38-plyRHEL 80:3.11-10.module+el8.9.0+19598+4a60c7b7
python38-psutilRHEL 80:5.6.4-4.module+el8.9.0+19598+4a60c7b7
python38-psycopg2RHEL 80:2.8.4-4.module+el8.9.0+19598+4a60c7b7
python38-psycopg2-docRHEL 80:2.8.4-4.module+el8.9.0+19598+4a60c7b7
python38-psycopg2-testsRHEL 80:2.8.4-4.module+el8.9.0+19598+4a60c7b7
python38-pyRHEL 80:1.8.0-8.module+el8.9.0+19592+4b459c9b
python38-pycparserRHEL 80:2.19-3.module+el8.9.0+19598+4a60c7b7
python38-pyparsingRHEL 80:2.4.5-3.module+el8.9.0+19592+4b459c9b
python38-pysocksRHEL 80:1.7.1-4.module+el8.9.0+19592+4b459c9b
python38-pytestRHEL 80:4.6.6-3.module+el8.9.0+19592+4b459c9b
python38-pytzRHEL 80:2019.3-4.module+el8.9.0+19598+4a60c7b7
python38-pyyamlRHEL 80:5.4.1-1.module+el8.9.0+19598+4a60c7b7
python38-requestsRHEL 80:2.22.0-10.module+el8.9.0+19598+4a60c7b7
python38-rpm-macrosRHEL 80:3.8.17-2.module+el8.9.0+19642+a12b4af6
python38-scipyRHEL 80:1.3.1-5.module+el8.9.0+19598+4a60c7b7
python38-setuptoolsRHEL 80:41.6.0-5.module+el8.9.0+19592+4b459c9b
python38-setuptools-wheelRHEL 80:41.6.0-5.module+el8.9.0+19592+4b459c9b
python38-sixRHEL 80:1.12.0-10.module+el8.9.0+19592+4b459c9b
python38-testRHEL 80:3.8.17-2.module+el8.9.0+19642+a12b4af6
python38-tkinterRHEL 80:3.8.17-2.module+el8.9.0+19642+a12b4af6
python38-urllib3RHEL 80:1.25.7-5.module+el8.9.0+19598+4a60c7b7
python38-wcwidthRHEL 80:0.1.7-16.module+el8.9.0+19592+4b459c9b
python38-wheelRHEL 80:0.33.6-6.module+el8.9.0+19592+4b459c9b
python38-wheel-wheelRHEL 80:0.33.6-6.module+el8.9.0+19592+4b459c9b

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2007-4559 Python 3.10 and 8 others: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 9.8 0.2710 None reported
Routine CVE-2023-32681 requests: Requests is a HTTP library 6.1 0.0297 None reported
Showing 1 to 2 of 2 1