Fixed packages 120
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | babel | 0:2.5.1-10.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | Cython | 0:0.28.1-7.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | Cython-debugsource | 0:0.28.1-7.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | numpy | 1:1.14.2-16.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | numpy-debugsource | 1:1.14.2-16.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | pytest | 0:3.4.2-13.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-attrs | 0:17.4.0-10.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-backports | 0:1.0-16.module+el8.9.0+18326+1b5baeee |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-backports-ssl_match_hostname | 0:3.5.0.1-12.module+el8.9.0+18326+1b5baeee |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-chardet | 0:3.0.4-10.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-coverage | 0:4.5.1-5.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-coverage-debugsource | 0:4.5.1-5.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-dns | 0:1.15.0-10.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-docs | 0:2.7.16-2.module+el8.9.0+18326+1b5baeee |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-docutils | 0:0.14-12.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-funcsigs | 0:1.0.2-13.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-idna | 0:2.5-7.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-ipaddress | 0:1.0.18-6.module+el8.9.0+18326+1b5baeee |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-jinja2 | 0:2.10-10.module+el8.10.0+21290+abd5b761 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-lxml | 0:4.2.3-6.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-lxml-debugsource | 0:4.2.3-6.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-markupsafe | 0:0.23-19.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-mock | 0:2.0.0-13.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-nose | 0:1.3.7-31.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-nose-docs | 0:1.3.7-31.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pluggy | 0:0.6.0-8.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psycopg2 | 0:2.7.5-8.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psycopg2-debuginfo | 0:2.7.5-8.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psycopg2-debugsource | 0:2.7.5-8.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psycopg2-doc | 0:2.7.5-8.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-py | 0:1.5.3-6.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pygments | 0:2.2.0-22.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pymongo | 0:3.7.0-1.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pymongo-debuginfo | 0:3.7.0-1.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pymongo-debugsource | 0:3.7.0-1.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-PyMySQL | 0:0.8.0-10.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pysocks | 0:1.6.8-6.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pytest-mock | 0:1.9.0-4.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-requests | 0:2.20.0-4.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-setuptools_scm | 0:1.15.7-6.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-sqlalchemy | 0:1.3.2-2.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-sqlalchemy-doc | 0:1.3.2-2.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-urllib3 | 0:1.24.2-4.module+el8.10.0+20444+3bf7fee4 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-virtualenv | 0:15.1.0-22.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-wheel | 1:0.31.1-3.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2 | 0:2.7.18-17.module+el8.10.0+20822+a15ec22d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-attrs | 0:17.4.0-10.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-babel | 0:2.5.1-10.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-backports | 0:1.0-16.module+el8.9.0+18326+1b5baeee |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-backports-ssl_match_hostname | 0:3.5.0.1-12.module+el8.9.0+18326+1b5baeee |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-bson | 0:3.7.0-1.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-bson-debuginfo | 0:3.7.0-1.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-chardet | 0:3.0.4-10.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-coverage | 0:4.5.1-5.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-coverage-debuginfo | 0:4.5.1-5.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-Cython | 0:0.28.1-7.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-Cython-debuginfo | 0:0.28.1-7.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-debug | 0:2.7.18-17.module+el8.10.0+20822+a15ec22d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-debuginfo | 0:2.7.18-17.module+el8.10.0+20822+a15ec22d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-debugsource | 0:2.7.18-17.module+el8.10.0+20822+a15ec22d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-devel | 0:2.7.18-17.module+el8.10.0+20822+a15ec22d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-dns | 0:1.15.0-10.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-docs | 0:2.7.16-2.module+el8.9.0+18326+1b5baeee |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-docs-info | 0:2.7.16-2.module+el8.9.0+18326+1b5baeee |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-docutils | 0:0.14-12.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-funcsigs | 0:1.0.2-13.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-idna | 0:2.5-7.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-ipaddress | 0:1.0.18-6.module+el8.9.0+18326+1b5baeee |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-jinja2 | 0:2.10-10.module+el8.10.0+21290+abd5b761 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-libs | 0:2.7.18-17.module+el8.10.0+20822+a15ec22d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-lxml | 0:4.2.3-6.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-lxml-debuginfo | 0:4.2.3-6.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-markupsafe | 0:0.23-19.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-mock | 0:2.0.0-13.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-nose | 0:1.3.7-31.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-numpy | 1:1.14.2-16.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-numpy-debuginfo | 1:1.14.2-16.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-numpy-doc | 1:1.14.2-16.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-numpy-f2py | 1:1.14.2-16.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pip | 0:9.0.3-19.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pip-wheel | 0:9.0.3-19.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pluggy | 0:0.6.0-8.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-psycopg2 | 0:2.7.5-8.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-psycopg2-debug | 0:2.7.5-8.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-psycopg2-debug-debuginfo | 0:2.7.5-8.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-psycopg2-debuginfo | 0:2.7.5-8.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-psycopg2-tests | 0:2.7.5-8.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-py | 0:1.5.3-6.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pygments | 0:2.2.0-22.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pymongo | 0:3.7.0-1.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pymongo-debuginfo | 0:3.7.0-1.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pymongo-gridfs | 0:3.7.0-1.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-PyMySQL | 0:0.8.0-10.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pysocks | 0:1.6.8-6.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pytest | 0:3.4.2-13.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pytest-mock | 0:1.9.0-4.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pytz | 0:2017.2-13.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pyyaml | 0:3.12-16.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-pyyaml-debuginfo | 0:3.12-16.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-requests | 0:2.20.0-4.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-rpm-macros | 0:3-38.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-scipy | 0:1.0.0-22.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-scipy-debuginfo | 0:1.0.0-22.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-setuptools | 0:39.0.1-14.module+el8.10.0+20444+3bf7fee4 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-setuptools_scm | 0:1.15.7-6.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-setuptools-wheel | 0:39.0.1-14.module+el8.10.0+20444+3bf7fee4 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-six | 0:1.11.0-6.module+el8.9.0+18326+1b5baeee |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-sqlalchemy | 0:1.3.2-2.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-test | 0:2.7.18-17.module+el8.10.0+20822+a15ec22d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-tkinter | 0:2.7.18-17.module+el8.10.0+20822+a15ec22d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-tools | 0:2.7.18-17.module+el8.10.0+20822+a15ec22d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-urllib3 | 0:1.24.2-4.module+el8.10.0+20444+3bf7fee4 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-virtualenv | 0:15.1.0-22.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-wheel | 1:0.31.1-3.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python2-wheel-wheel | 1:0.31.1-3.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | pytz | 0:2017.2-13.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | PyYAML | 0:3.12-16.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | PyYAML-debugsource | 0:3.12-16.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | scipy | 0:1.0.0-22.module+el8.9.0+19487+7dc18407 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | scipy-debugsource | 0:1.0.0-22.module+el8.9.0+19487+7dc18407 |
Vulnerabilities 5
-
Medium 5.9
pypa/setuptools vulnerable to Regular Expression Denial of Service (ReDoS)
Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py.
-
Medium 5.9CVE-2023-43804 Public exploit
`Cookie` HTTP header isn't stripped on cross-origin redirects
urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a `C…
-
Medium 5.4
Jinja vulnerable to Cross-Site Scripting (XSS)
Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). …
-
Unscored —
A use-after-free exists in Python through 3.9 via heappushpop in heapq.
-
Unscored —CVE-2022-48565 Public exploit
An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity…
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
article
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2158559
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2240059
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2242493
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2249755
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2257854
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2987.json
-
report
https://access.redhat.com/security/cve/CVE-2022-40897
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-40897
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-40897
-
article
https://pyup.io/vulnerabilities/CVE-2022-40897/52495/
-
report
https://access.redhat.com/security/cve/CVE-2022-48560
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-48560
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-48560
-
article
https://bugs.python.org/issue39421
-
article
https://github.com/python/cpython/issues/83602
-
report
https://access.redhat.com/security/cve/CVE-2022-48565
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-48565
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-48565
-
report
https://access.redhat.com/security/cve/CVE-2023-43804
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-43804
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-43804
-
report
https://access.redhat.com/security/cve/CVE-2024-22195
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-22195
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-22195
-
article
https://github.com/pallets/jinja/releases/tag/3.1.3
-
article
https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95