Linux · Red Hat · Security advisory · May 22, 2024

RHSA-2024:2987: Security update for 62 packages

RHSA-2024:2987, released May 22, 2024, fixes 5 CVEs across 62 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
5
None rated Critical
Exploited
0
None reported
Highest CVSS
9.8
Base score, 0 to 10
Highest EPSS
0.0523
92nd percentile

Priority of the 5 CVEs

Patch now 0 Urgent 0 High 5 Routine 0

Fixed package versions

ProductReleaseFixed in
babelRHEL 80:2.5.1-10.module+el8.9.0+19487+7dc18407
python-nose-docsRHEL 80:1.3.7-31.module+el8.9.0+19487+7dc18407
python-psycopg2-docRHEL 80:2.7.5-8.module+el8.9.0+19487+7dc18407
python-sqlalchemy-docRHEL 80:1.3.2-2.module+el8.9.0+19487+7dc18407
python2RHEL 80:2.7.18-17.module+el8.10.0+20822+a15ec22d
python2-CythonRHEL 80:0.28.1-7.module+el8.9.0+19487+7dc18407
python2-PyMySQLRHEL 80:0.8.0-10.module+el8.9.0+19487+7dc18407
python2-attrsRHEL 80:17.4.0-10.module+el8.9.0+19487+7dc18407
python2-babelRHEL 80:2.5.1-10.module+el8.9.0+19487+7dc18407
python2-backportsRHEL 80:1.0-16.module+el8.9.0+18326+1b5baeee
python2-backports-ssl_match_hostnameRHEL 80:3.5.0.1-12.module+el8.9.0+18326+1b5baeee
python2-bsonRHEL 80:3.7.0-1.module+el8.9.0+19487+7dc18407
python2-chardetRHEL 80:3.0.4-10.module+el8.9.0+19487+7dc18407
python2-coverageRHEL 80:4.5.1-5.module+el8.9.0+19487+7dc18407
python2-debugRHEL 80:2.7.18-17.module+el8.10.0+20822+a15ec22d
python2-develRHEL 80:2.7.18-17.module+el8.10.0+20822+a15ec22d
python2-dnsRHEL 80:1.15.0-10.module+el8.9.0+19487+7dc18407
python2-docsRHEL 80:2.7.16-2.module+el8.9.0+18326+1b5baeee
python2-docs-infoRHEL 80:2.7.16-2.module+el8.9.0+18326+1b5baeee
python2-docutilsRHEL 80:0.14-12.module+el8.9.0+19487+7dc18407
python2-funcsigsRHEL 80:1.0.2-13.module+el8.9.0+19487+7dc18407
python2-idnaRHEL 80:2.5-7.module+el8.9.0+19487+7dc18407
python2-ipaddressRHEL 80:1.0.18-6.module+el8.9.0+18326+1b5baeee
python2-jinja2RHEL 80:2.10-10.module+el8.10.0+21290+abd5b761
python2-libsRHEL 80:2.7.18-17.module+el8.10.0+20822+a15ec22d
python2-lxmlRHEL 80:4.2.3-6.module+el8.9.0+19487+7dc18407
python2-markupsafeRHEL 80:0.23-19.module+el8.9.0+19487+7dc18407
python2-mockRHEL 80:2.0.0-13.module+el8.9.0+19487+7dc18407
python2-noseRHEL 80:1.3.7-31.module+el8.9.0+19487+7dc18407
python2-numpyRHEL 81:1.14.2-16.module+el8.9.0+19487+7dc18407
python2-numpy-docRHEL 81:1.14.2-16.module+el8.9.0+19487+7dc18407
python2-numpy-f2pyRHEL 81:1.14.2-16.module+el8.9.0+19487+7dc18407
python2-pipRHEL 80:9.0.3-19.module+el8.9.0+19487+7dc18407
python2-pip-wheelRHEL 80:9.0.3-19.module+el8.9.0+19487+7dc18407
python2-pluggyRHEL 80:0.6.0-8.module+el8.9.0+19487+7dc18407
python2-psycopg2RHEL 80:2.7.5-8.module+el8.9.0+19487+7dc18407
python2-psycopg2-debugRHEL 80:2.7.5-8.module+el8.9.0+19487+7dc18407
python2-psycopg2-testsRHEL 80:2.7.5-8.module+el8.9.0+19487+7dc18407
python2-pyRHEL 80:1.5.3-6.module+el8.9.0+19487+7dc18407
python2-pygmentsRHEL 80:2.2.0-22.module+el8.9.0+19487+7dc18407
python2-pymongoRHEL 80:3.7.0-1.module+el8.9.0+19487+7dc18407
python2-pymongo-gridfsRHEL 80:3.7.0-1.module+el8.9.0+19487+7dc18407
python2-pysocksRHEL 80:1.6.8-6.module+el8.9.0+19487+7dc18407
python2-pytestRHEL 80:3.4.2-13.module+el8.9.0+19487+7dc18407
python2-pytest-mockRHEL 80:1.9.0-4.module+el8.9.0+19487+7dc18407
python2-pytzRHEL 80:2017.2-13.module+el8.9.0+19487+7dc18407
python2-pyyamlRHEL 80:3.12-16.module+el8.9.0+19487+7dc18407
python2-requestsRHEL 80:2.20.0-4.module+el8.9.0+19487+7dc18407
python2-rpm-macrosRHEL 80:3-38.module+el8.9.0+19487+7dc18407
python2-scipyRHEL 80:1.0.0-22.module+el8.9.0+19487+7dc18407
python2-setuptoolsRHEL 80:39.0.1-14.module+el8.10.0+20444+3bf7fee4
python2-setuptools-wheelRHEL 80:39.0.1-14.module+el8.10.0+20444+3bf7fee4
python2-setuptools_scmRHEL 80:1.15.7-6.module+el8.9.0+19487+7dc18407
python2-sixRHEL 80:1.11.0-6.module+el8.9.0+18326+1b5baeee
python2-sqlalchemyRHEL 80:1.3.2-2.module+el8.9.0+19487+7dc18407
python2-testRHEL 80:2.7.18-17.module+el8.10.0+20822+a15ec22d
python2-tkinterRHEL 80:2.7.18-17.module+el8.10.0+20822+a15ec22d
python2-toolsRHEL 80:2.7.18-17.module+el8.10.0+20822+a15ec22d
python2-urllib3RHEL 80:1.24.2-4.module+el8.10.0+20444+3bf7fee4
python2-virtualenvRHEL 80:15.1.0-22.module+el8.9.0+19487+7dc18407
python2-wheelRHEL 81:0.31.1-3.module+el8.9.0+19487+7dc18407
python2-wheel-wheelRHEL 81:0.31.1-3.module+el8.9.0+19487+7dc18407

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
High CVE-2022-48565 Python 3.7 and 4 others: An XML External Entity (XXE) issue was discovered in Python through 3.9.1.9.8 0.0523 None reported
High CVE-2022-40897 python3-setuptools-wheel: The python-setuptools package provides a collection of enhancements to Python distribution utilities allowing conveni...7.8 0.0263 None reported
High CVE-2022-48560 Python 3.6 and 4 others: A use-after-free exists in Python through 3.9 via heappushpop in heapq.7.8 0.0204 None reported
High CVE-2023-43804 python-urllib3: urllib3 is a user-friendly HTTP client library for Python8.1 0.0136 None reported
High CVE-2024-22195 python-Jinja2: This update for python-Jinja2 fixes the following issues: - Fixed HTML attribute injection when passing user input a...7.8 0.0089 None reported
Showing 1 to 5 of 5 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.