Linux · Security advisory · December 18, 2025

RLSA-2023:2764: Security update for 24 packages

RLSA-2023:2764, released December 18, 2025, fixes 3 CVEs across 24 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0454
91st percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
Cythonrocky 80:0.29.21-5.module+el8.10.0+1582+bc278001
PyYAMLrocky 80:5.4.1-1.module+el8.9.0+1418+f0d66789
numpyrocky 80:1.19.4-3.module+el8.10.0+1582+bc278001
pybind11rocky 80:2.7.1-1.module+el8.9.0+1357+a3b80af7
pytestrocky 80:6.0.2-2.module+el8.10.0+1860+afcc1c71
python-PyMySQLrocky 80:0.10.1-2.module+el8.10.0+1910+234ad790
python-attrsrocky 80:20.3.0-2.module+el8.10.0+1582+bc278001
python-cffirocky 80:1.14.3-2.module+el8.10.0+1860+afcc1c71
python-chardetrocky 80:3.0.4-19.module+el8.10.0+1582+bc278001
python-iniconfigrocky 80:1.1.1-2.module+el8.9.0+1332+dd574197
python-lxmlrocky 80:4.6.5-1.module+el8.10.0+1582+bc278001
python-more-itertoolsrocky 80:8.5.0-2.module+el8.10.0+1582+bc278001
python-packagingrocky 80:20.4-4.module+el8.10.0+1860+afcc1c71
python-pluggyrocky 80:0.13.1-3.module+el8.10.0+1582+bc278001
python-plyrocky 80:3.11-10.module+el8.9.0+1418+f0d66789
python-psutilrocky 80:5.8.0-4.module+el8.9.0+1357+a3b80af7
python-pyrocky 80:1.10.0-1.module+el8.10.0+1860+afcc1c71
python-pycparserrocky 80:2.20-3.module+el8.10.0+1582+bc278001
python-pysocksrocky 80:1.7.1-4.module+el8.9.0+1418+f0d66789
python-tomlrocky 80:0.10.1-5.module+el8.9.0+1332+dd574197
python-wcwidthrocky 80:0.2.5-3.module+el8.10.0+1860+afcc1c71
python-wheelrocky 81:0.35.1-4.module+el8.10.0+1582+bc278001
python3x-pyparsingrocky 80:2.4.7-5.module+el8.10.0+1860+afcc1c71
python3x-sixrocky 80:1.15.0-3.module+el8.10.0+1582+bc278001

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2020-10735 Python 3.8 and 5 others: Incorrect Type Conversion or Cast 7.5 0.0454 None reported
High CVE-2022-45061 python2-pyyaml: Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exception... 7.5 0.0333 None reported
High CVE-2021-28861 Python 3.8 and 7 others: URL Redirection to Untrusted Site ('Open Redirect') 7.6 0.0268 None reported
Showing 1 to 3 of 3 1