Linux · Security advisory · June 14, 2024

RLSA-2024:3466: Security update for 34 packages

RLSA-2024:3466, released June 14, 2024, fixes 3 CVEs across 34 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0139
72nd percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 2 Routine 1

Fixed package versions

ProductReleaseFixed in
Cythonrocky 80:0.29.21-5.module+el8.10.0+1582+bc278001
PyYAMLrocky 80:5.4.1-1.module+el8.10.0+1582+bc278001
mod_wsgirocky 80:4.7.1-7.module+el8.10.0+1582+bc278001
numpyrocky 80:1.19.4-3.module+el8.10.0+1582+bc278001
pybind11rocky 80:2.7.1-1.module+el8.9.0+1357+a3b80af7
pytestrocky 80:6.0.2-2.module+el8.10.0+1582+bc278001
python-PyMySQLrocky 80:0.10.1-2.module+el8.10.0+1582+bc278001
python-attrsrocky 80:20.3.0-2.module+el8.10.0+1582+bc278001
python-cffirocky 80:1.14.3-2.module+el8.10.0+1582+bc278001
python-chardetrocky 80:3.0.4-19.module+el8.10.0+1582+bc278001
python-cryptographyrocky 80:3.3.1-3.module+el8.10.0+1697+7e517775
python-idnarocky 80:2.10-4.module+el8.10.0+1809+41195054
python-iniconfigrocky 80:1.1.1-2.module+el8.9.0+1332+dd574197
python-lxmlrocky 80:4.6.5-1.module+el8.10.0+1582+bc278001
python-more-itertoolsrocky 80:8.5.0-2.module+el8.10.0+1582+bc278001
python-packagingrocky 80:20.4-4.module+el8.10.0+1582+bc278001
python-pluggyrocky 80:0.13.1-3.module+el8.10.0+1582+bc278001
python-plyrocky 80:3.11-10.module+el8.10.0+1582+bc278001
python-psutilrocky 80:5.8.0-4.module+el8.9.0+1357+a3b80af7
python-psycopg2rocky 80:2.8.6-3.module+el8.10.0+1660+b5b6f004
python-pyrocky 80:1.10.0-1.module+el8.10.0+1582+bc278001
python-pycparserrocky 80:2.20-3.module+el8.10.0+1582+bc278001
python-pysocksrocky 80:1.7.1-4.module+el8.10.0+1582+bc278001
python-requestsrocky 80:2.25.0-3.module+el8.10.0+1582+bc278001
python-tomlrocky 80:0.10.1-5.module+el8.9.0+1332+dd574197
python-urllib3rocky 80:1.25.10-5.module+el8.10.0+1545+03246da9
python-wcwidthrocky 80:0.2.5-3.module+el8.10.0+1582+bc278001
python-wheelrocky 81:0.35.1-4.module+el8.10.0+1582+bc278001
python39rocky 80:3.9.19-1.module+el8.10.0+1809+41195054
python3x-piprocky 80:20.2.4-9.module+el8.10.0+1721+e52d6351
python3x-pyparsingrocky 80:2.4.7-5.module+el8.10.0+1582+bc278001
python3x-setuptoolsrocky 80:50.3.2-5.module+el8.10.0+1582+bc278001
python3x-sixrocky 80:1.15.0-3.module+el8.10.0+1582+bc278001
scipyrocky 80:1.5.4-5.module+el8.10.0+1582+bc278001

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2024-3651 python-idna: This update for python-idna fixes the following issues: - CVE-2024-3651: Fixed a denial of service via resource cons... 7.5 0.0139 None reported
High CVE-2023-6597 Python 3.10 and 9 others: An issue was found in the CPython `tempfile.TemporaryDirectory` class affecting versions 3.12.1, 3.11.7,… 7.8 0.0031 None reported
Routine CVE-2024-0450 Quoted zip-bomb protection for zipfile 6.2 0.0034 None reported
Showing 1 to 3 of 3 1