Linux · Security advisory · June 14, 2024

RLSA-2024:2985: Security update for 32 packages

RLSA-2024:2985, released June 14, 2024, fixes 4 CVEs across 32 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0263
85th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 2 Routine 2

Fixed package versions

ProductReleaseFixed in
Cythonrocky 80:0.29.21-5.module+el8.10.0+1582+bc278001
PyYAMLrocky 80:5.4.1-1.module+el8.10.0+1582+bc278001
mod_wsgirocky 80:4.7.1-7.module+el8.10.0+1582+bc278001
numpyrocky 80:1.19.4-3.module+el8.10.0+1582+bc278001
pybind11rocky 80:2.7.1-1.module+el8.9.0+1357+a3b80af7
pytestrocky 80:6.0.2-2.module+el8.10.0+1582+bc278001
python-PyMySQLrocky 80:0.10.1-2.module+el8.10.0+1582+bc278001
python-attrsrocky 80:20.3.0-2.module+el8.10.0+1582+bc278001
python-cffirocky 80:1.14.3-2.module+el8.10.0+1582+bc278001
python-chardetrocky 80:3.0.4-19.module+el8.10.0+1582+bc278001
python-cryptographyrocky 80:3.3.1-3.module+el8.10.0+1697+7e517775
python-iniconfigrocky 80:1.1.1-2.module+el8.9.0+1332+dd574197
python-lxmlrocky 80:4.6.5-1.module+el8.10.0+1582+bc278001
python-more-itertoolsrocky 80:8.5.0-2.module+el8.10.0+1582+bc278001
python-packagingrocky 80:20.4-4.module+el8.10.0+1582+bc278001
python-pluggyrocky 80:0.13.1-3.module+el8.10.0+1582+bc278001
python-plyrocky 80:3.11-10.module+el8.10.0+1582+bc278001
python-psutilrocky 80:5.8.0-4.module+el8.9.0+1357+a3b80af7
python-psycopg2rocky 80:2.8.6-3.module+el8.10.0+1660+b5b6f004
python-pyrocky 80:1.10.0-1.module+el8.10.0+1582+bc278001
python-pycparserrocky 80:2.20-3.module+el8.10.0+1582+bc278001
python-pysocksrocky 80:1.7.1-4.module+el8.10.0+1582+bc278001
python-requestsrocky 80:2.25.0-3.module+el8.10.0+1582+bc278001
python-tomlrocky 80:0.10.1-5.module+el8.9.0+1332+dd574197
python-urllib3rocky 80:1.25.10-5.module+el8.10.0+1545+03246da9
python-wcwidthrocky 80:0.2.5-3.module+el8.10.0+1582+bc278001
python-wheelrocky 81:0.35.1-4.module+el8.10.0+1582+bc278001
python3x-piprocky 80:20.2.4-9.module+el8.10.0+1721+e52d6351
python3x-pyparsingrocky 80:2.4.7-5.module+el8.10.0+1582+bc278001
python3x-setuptoolsrocky 80:50.3.2-5.module+el8.10.0+1582+bc278001
python3x-sixrocky 80:1.15.0-3.module+el8.10.0+1582+bc278001
scipyrocky 80:1.5.4-5.module+el8.10.0+1582+bc278001

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2022-40897 python3-setuptools-wheel: The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing conveni... 7.8 0.0263 None reported
High CVE-2023-43804 python-urllib3: urllib3 is a user-friendly HTTP client library for Python 8.1 0.0136 None reported
Routine CVE-2023-27043 Python 3.10 and 8 others: Improper Input Validation 5.3 0.0253 None reported
Routine CVE-2023-23931 python3-cryptography: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers 6.5 0.0130 None reported
Showing 1 to 4 of 4 1