Linux · AlmaLinux · Security advisory · November 14, 2023

ALSA-2023:7050: Security update for 51 packages

ALSA-2023:7050, released November 14, 2023, fixes 2 CVEs across 51 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.2710
98th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 1 Routine 1

Fixed package versions

ProductReleaseFixed in
python38almalinux 83.8.17-2.module_el8.9.0+3633+e453b53a
python38-Cythonalmalinux 80.29.14-4.module_el8.6.0+2778+cd494b30
python38-PyMySQLalmalinux 80.10.1-1.module_el8.6.0+2778+cd494b30
python38-asn1cryptoalmalinux 81.2.0-3.module_el8.6.0+2778+cd494b30
python38-atomicwritesalmalinux 81.3.0-8.module_el8.6.0+2778+cd494b30
python38-attrsalmalinux 819.3.0-3.module_el8.6.0+2778+cd494b30
python38-babelalmalinux 82.7.0-11.module_el8.6.0+2778+cd494b30
python38-cffialmalinux 81.13.2-3.module_el8.6.0+2778+cd494b30
python38-chardetalmalinux 83.0.4-19.module_el8.6.0+2778+cd494b30
python38-cryptographyalmalinux 82.8-3.module_el8.6.0+2778+cd494b30
python38-debugalmalinux 83.8.17-2.module_el8.9.0+3633+e453b53a
python38-develalmalinux 83.8.17-2.module_el8.9.0+3633+e453b53a
python38-idlealmalinux 83.8.17-2.module_el8.9.0+3633+e453b53a
python38-idnaalmalinux 82.8-6.module_el8.6.0+2778+cd494b30
python38-jinja2almalinux 82.11.3-1.module_el8.7.0+3344+99a6a656
python38-libsalmalinux 83.8.17-2.module_el8.9.0+3633+e453b53a
python38-lxmlalmalinux 84.4.1-7.module_el8.6.0+2778+cd494b30
python38-markupsafealmalinux 81.1.1-6.module_el8.6.0+2778+cd494b30
python38-mod_wsgialmalinux 84.6.8-5.module_el8.9.0+3633+e453b53a
python38-more-itertoolsalmalinux 87.2.0-5.module_el8.6.0+2778+cd494b30
python38-numpyalmalinux 81.17.3-7.module_el8.9.0+3633+e453b53a
python38-numpy-docalmalinux 81.17.3-7.module_el8.9.0+3633+e453b53a
python38-numpy-f2pyalmalinux 81.17.3-7.module_el8.9.0+3633+e453b53a
python38-packagingalmalinux 819.2-3.module_el8.6.0+2778+cd494b30
python38-pipalmalinux 819.3.1-7.module_el8.9.0+3633+e453b53a
python38-pip-wheelalmalinux 819.3.1-7.module_el8.9.0+3633+e453b53a
python38-pluggyalmalinux 80.13.0-3.module_el8.6.0+2778+cd494b30
python38-plyalmalinux 83.11-10.module_el8.6.0+2778+cd494b30
python38-psutilalmalinux 85.6.4-4.module_el8.6.0+2778+cd494b30
python38-psycopg2almalinux 82.8.4-4.module_el8.7.0+3344+99a6a656
python38-psycopg2-docalmalinux 82.8.4-4.module_el8.7.0+3344+99a6a656
python38-psycopg2-testsalmalinux 82.8.4-4.module_el8.7.0+3344+99a6a656
python38-pyalmalinux 81.8.0-8.module_el8.6.0+2778+cd494b30
python38-pycparseralmalinux 82.19-3.module_el8.6.0+2778+cd494b30
python38-pyparsingalmalinux 82.4.5-3.module_el8.6.0+2778+cd494b30
python38-pysocksalmalinux 81.7.1-4.module_el8.6.0+2778+cd494b30
python38-pytestalmalinux 84.6.6-3.module_el8.6.0+2778+cd494b30
python38-pytzalmalinux 82019.3-4.module_el8.9.0+3633+e453b53a
python38-pyyamlalmalinux 85.4.1-1.module_el8.6.0+2778+cd494b30
python38-requestsalmalinux 82.22.0-10.module_el8.9.0+3633+e453b53a
python38-rpm-macrosalmalinux 83.8.17-2.module_el8.9.0+3633+e453b53a
python38-scipyalmalinux 81.3.1-5.module_el8.9.0+3633+e453b53a
python38-setuptoolsalmalinux 841.6.0-5.module_el8.6.0+2778+cd494b30
python38-setuptools-wheelalmalinux 841.6.0-5.module_el8.6.0+2778+cd494b30
python38-sixalmalinux 81.12.0-10.module_el8.6.0+2778+cd494b30
python38-testalmalinux 83.8.17-2.module_el8.9.0+3633+e453b53a
python38-tkinteralmalinux 83.8.17-2.module_el8.9.0+3633+e453b53a
python38-urllib3almalinux 81.25.7-5.module_el8.6.0+2778+cd494b30
python38-wcwidthalmalinux 80.1.7-16.module_el8.6.0+2778+cd494b30
python38-wheelalmalinux 80.33.6-6.module_el8.6.0+2778+cd494b30
python38-wheel-wheelalmalinux 80.33.6-6.module_el8.6.0+2778+cd494b30

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2007-4559 Python 3.10 and 8 others: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')9.8 0.2710 None reported
Routine CVE-2023-32681 requests: Requests is a HTTP library6.1 0.0297 None reported
Showing 1 to 2 of 2 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.