Linux · Security advisory · December 18, 2025

RLSA-2023:2763: Security update for 10 packages

RLSA-2023:2763, released December 18, 2025, fixes 3 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0454
91st percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
babelrocky 80:2.7.0-11.module+el8.9.0+1418+f0d66789
python-asn1cryptorocky 80:1.2.0-3.module+el8.9.0+1418+f0d66789
python-atomicwritesrocky 80:1.3.0-8.module+el8.9.0+1418+f0d66789
python-cryptographyrocky 80:2.8-3.module+el8.9.0+1418+f0d66789
python-idnarocky 80:2.8-6.module+el8.9.0+1418+f0d66789
python-jinja2rocky 80:2.11.3-1.module+el8.9.0+1418+f0d66789
python-markupsaferocky 80:1.1.1-6.module+el8.9.0+1418+f0d66789
python-psycopg2rocky 80:2.8.4-4.module+el8.9.0+1418+f0d66789
python-urllib3rocky 80:1.25.7-5.module+el8.9.0+1418+f0d66789
python3x-setuptoolsrocky 80:41.6.0-5.module+el8.9.0+1418+f0d66789

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-10735 Python 3.8 and 5 others: Incorrect Type Conversion or Cast 7.5 0.0454 None reported
High CVE-2022-45061 python2-pyyaml: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception... 7.5 0.0333 None reported
High CVE-2021-28861 Python 3.8 and 7 others: URL Redirection to Untrusted Site ('Open Redirect') 7.6 0.0268 None reported
Showing 1 to 3 of 3 1