Skip to content
OpenAdvisories
Medium RHSA-2023:7042 1 CVE

Red Hat Security Advisory: python27:2.7 security and bug fix update

Published Sep 13, 2024 · Updated Aug 20, 2026

Ecosystem: Red Hat

Fixed packages 120

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream babel 0:2.5.1-10.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream Cython 0:0.28.1-7.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream Cython-debugsource 0:0.28.1-7.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream numpy 1:1.14.2-16.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream numpy-debugsource 1:1.14.2-16.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream pytest 0:3.4.2-13.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-attrs 0:17.4.0-10.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-backports 0:1.0-16.module+el8.9.0+18326+1b5baeee
Red Hat · RHEL 8 enterprise_linux:8::appstream python-backports-ssl_match_hostname 0:3.5.0.1-12.module+el8.9.0+18326+1b5baeee
Red Hat · RHEL 8 enterprise_linux:8::appstream python-chardet 0:3.0.4-10.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-coverage 0:4.5.1-5.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-coverage-debugsource 0:4.5.1-5.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-dns 0:1.15.0-10.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-docs 0:2.7.16-2.module+el8.9.0+18326+1b5baeee
Red Hat · RHEL 8 enterprise_linux:8::appstream python-docutils 0:0.14-12.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-funcsigs 0:1.0.2-13.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-idna 0:2.5-7.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-ipaddress 0:1.0.18-6.module+el8.9.0+18326+1b5baeee
Red Hat · RHEL 8 enterprise_linux:8::appstream python-jinja2 0:2.10-9.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-lxml 0:4.2.3-6.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-lxml-debugsource 0:4.2.3-6.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-markupsafe 0:0.23-19.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-mock 0:2.0.0-13.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-nose 0:1.3.7-31.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-nose-docs 0:1.3.7-31.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pluggy 0:0.6.0-8.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psycopg2 0:2.7.5-8.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psycopg2-debuginfo 0:2.7.5-8.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psycopg2-debugsource 0:2.7.5-8.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-psycopg2-doc 0:2.7.5-8.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-py 0:1.5.3-6.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pygments 0:2.2.0-22.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pymongo 0:3.7.0-1.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pymongo-debuginfo 0:3.7.0-1.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pymongo-debugsource 0:3.7.0-1.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-PyMySQL 0:0.8.0-10.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pysocks 0:1.6.8-6.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-pytest-mock 0:1.9.0-4.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-requests 0:2.20.0-4.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-setuptools_scm 0:1.15.7-6.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-sqlalchemy 0:1.3.2-2.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-sqlalchemy-doc 0:1.3.2-2.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-urllib3 0:1.24.2-3.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-virtualenv 0:15.1.0-22.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python-wheel 1:0.31.1-3.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2 0:2.7.18-15.module+el8.9.0+20125+68111a8f
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-attrs 0:17.4.0-10.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-babel 0:2.5.1-10.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-backports 0:1.0-16.module+el8.9.0+18326+1b5baeee
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-backports-ssl_match_hostname 0:3.5.0.1-12.module+el8.9.0+18326+1b5baeee
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-bson 0:3.7.0-1.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-bson-debuginfo 0:3.7.0-1.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-chardet 0:3.0.4-10.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-coverage 0:4.5.1-5.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-coverage-debuginfo 0:4.5.1-5.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-Cython 0:0.28.1-7.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-Cython-debuginfo 0:0.28.1-7.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-debug 0:2.7.18-15.module+el8.9.0+20125+68111a8f
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-debuginfo 0:2.7.18-15.module+el8.9.0+20125+68111a8f
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-debugsource 0:2.7.18-15.module+el8.9.0+20125+68111a8f
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-devel 0:2.7.18-15.module+el8.9.0+20125+68111a8f
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-dns 0:1.15.0-10.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-docs 0:2.7.16-2.module+el8.9.0+18326+1b5baeee
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-docs-info 0:2.7.16-2.module+el8.9.0+18326+1b5baeee
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-docutils 0:0.14-12.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-funcsigs 0:1.0.2-13.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-idna 0:2.5-7.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-ipaddress 0:1.0.18-6.module+el8.9.0+18326+1b5baeee
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-jinja2 0:2.10-9.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-libs 0:2.7.18-15.module+el8.9.0+20125+68111a8f
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-lxml 0:4.2.3-6.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-lxml-debuginfo 0:4.2.3-6.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-markupsafe 0:0.23-19.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-mock 0:2.0.0-13.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-nose 0:1.3.7-31.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-numpy 1:1.14.2-16.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-numpy-debuginfo 1:1.14.2-16.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-numpy-doc 1:1.14.2-16.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-numpy-f2py 1:1.14.2-16.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pip 0:9.0.3-19.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pip-wheel 0:9.0.3-19.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pluggy 0:0.6.0-8.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-psycopg2 0:2.7.5-8.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-psycopg2-debug 0:2.7.5-8.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-psycopg2-debug-debuginfo 0:2.7.5-8.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-psycopg2-debuginfo 0:2.7.5-8.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-psycopg2-tests 0:2.7.5-8.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-py 0:1.5.3-6.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pygments 0:2.2.0-22.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pymongo 0:3.7.0-1.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pymongo-debuginfo 0:3.7.0-1.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pymongo-gridfs 0:3.7.0-1.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-PyMySQL 0:0.8.0-10.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pysocks 0:1.6.8-6.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pytest 0:3.4.2-13.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pytest-mock 0:1.9.0-4.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pytz 0:2017.2-13.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pyyaml 0:3.12-16.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-pyyaml-debuginfo 0:3.12-16.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-requests 0:2.20.0-4.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-rpm-macros 0:3-38.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-scipy 0:1.0.0-22.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-scipy-debuginfo 0:1.0.0-22.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-setuptools 0:39.0.1-13.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-setuptools_scm 0:1.15.7-6.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-setuptools-wheel 0:39.0.1-13.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-six 0:1.11.0-6.module+el8.9.0+18326+1b5baeee
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-sqlalchemy 0:1.3.2-2.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-test 0:2.7.18-15.module+el8.9.0+20125+68111a8f
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-tkinter 0:2.7.18-15.module+el8.9.0+20125+68111a8f
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-tools 0:2.7.18-15.module+el8.9.0+20125+68111a8f
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-urllib3 0:1.24.2-3.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-virtualenv 0:15.1.0-22.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-wheel 1:0.31.1-3.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream python2-wheel-wheel 1:0.31.1-3.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream pytz 0:2017.2-13.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream PyYAML 0:3.12-16.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream PyYAML-debugsource 0:3.12-16.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream scipy 0:1.0.0-22.module+el8.9.0+19487+7dc18407
Red Hat · RHEL 8 enterprise_linux:8::appstream scipy-debugsource 0:1.0.0-22.module+el8.9.0+19487+7dc18407

Vulnerabilities 1

  • Medium 6.1
    CVE-2023-32681 Public exploit

    Unintended leak of Proxy-Authorization header in requests

    Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header…

    psf requests python-pip requests Debian Ubuntu Azure Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1909674
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2168662
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2209469
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2213054
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2213056
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2213283
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2213304
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2213306
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2213850
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2217852
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7042.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-32681
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-32681
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-32681
  • article
    https://github.com/psf/requests/security/advisories/GHSA-j8r2-6x86-q33q