Summary
[4.2.1-121.2]
- bundled urllib3: fix CVE-2023-43804
Resolves: RHEL-11988
- bundled certifi: fix CVE-2023-37920
Resolves: RHEL-6972
Fixed packages 41
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | fence-agents-all | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-amt-ws | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-apc | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-apc-snmp | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-bladecenter | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-brocade | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-cisco-mds | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-cisco-ucs | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-common | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-compute | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-drac5 | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-eaton-snmp | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-emerson | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-eps | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-heuristics-ping | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-hpblade | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-ibm-powervs | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-ibm-vpc | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-ibmblade | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-ifmib | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-ilo-moonshot | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-ilo-mp | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-ilo-ssh | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-ilo2 | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-intelmodular | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-ipdu | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-ipmilan | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-kdump | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-kubevirt | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-lpar | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-mpath | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-redfish | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-rhevm | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-rsa | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-rsb | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-sbd | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-scsi | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-virsh | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-vmware-rest | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-vmware-soap | 0:4.2.1-121.el8_9.2 |
| Oracle Linux · 8 | fence-agents-wti | 0:4.2.1-121.el8_9.2 |
Vulnerabilities 2
-
High 7.5
Certifi's removal of e-Tugra root certificate
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were…
-
Medium 5.9CVE-2023-43804 Public exploit
`Cookie` HTTP header isn't stripped on cross-origin redirects
urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a `C…