RLSA-2023:2764

Source
https://errata.rockylinux.org/RLSA-2023:2764
Import Source
https://storage.googleapis.com/resf-osv-data/RLSA-2023:2764.json
JSON Data
https://api.osv.dev/v1/vulns/RLSA-2023:2764
Upstream
Published
2025-12-18T09:04:06.340307Z
Modified
2025-12-18T09:29:50.484931Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Moderate: python39:3.9 and python39-devel:3.9 security update
Details

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.

The following packages have been upgraded to a later upstream version: python39 (3.9.16).

Security Fix(es):

  • python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS (CVE-2020-10735)

  • python: open redirection vulnerability in lib/http/server.py may lead to information disclosure (CVE-2021-28861)

  • python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.

References
Credits
    • Rocky Enterprise Software Foundation
    • Red Hat

Affected packages

Rocky Linux:8

Cython

Package

Name
Cython
Purl
pkg:rpm/rocky-linux/Cython?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.29.21-5.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "PowerTools"
}

Cython

Package

Name
Cython
Purl
pkg:rpm/rocky-linux/Cython?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.29.21-5.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "PowerTools"
}

numpy

Package

Name
numpy
Purl
pkg:rpm/rocky-linux/numpy?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.19.4-3.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "AppStream"
}

numpy

Package

Name
numpy
Purl
pkg:rpm/rocky-linux/numpy?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.19.4-3.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "AppStream"
}

pybind11

Package

Name
pybind11
Purl
pkg:rpm/rocky-linux/pybind11?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.7.1-1.module+el8.9.0+1357+a3b80af7
Database specific
{
    "yum_repository": "PowerTools"
}

pytest

Package

Name
pytest
Purl
pkg:rpm/rocky-linux/pytest?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:6.0.2-2.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "PowerTools"
}

pytest

Package

Name
pytest
Purl
pkg:rpm/rocky-linux/pytest?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:6.0.2-2.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "PowerTools"
}

python3x-pyparsing

Package

Name
python3x-pyparsing
Purl
pkg:rpm/rocky-linux/python3x-pyparsing?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.4.7-5.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "PowerTools"
}

python3x-pyparsing

Package

Name
python3x-pyparsing
Purl
pkg:rpm/rocky-linux/python3x-pyparsing?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.4.7-5.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "PowerTools"
}

python3x-six

Package

Name
python3x-six
Purl
pkg:rpm/rocky-linux/python3x-six?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.15.0-3.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "AppStream"
}

python3x-six

Package

Name
python3x-six
Purl
pkg:rpm/rocky-linux/python3x-six?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.15.0-3.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "AppStream"
}

python-attrs

Package

Name
python-attrs
Purl
pkg:rpm/rocky-linux/python-attrs?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:20.3.0-2.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "PowerTools"
}

python-attrs

Package

Name
python-attrs
Purl
pkg:rpm/rocky-linux/python-attrs?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:20.3.0-2.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "PowerTools"
}

python-cffi

Package

Name
python-cffi
Purl
pkg:rpm/rocky-linux/python-cffi?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.14.3-2.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "AppStream"
}

python-cffi

Package

Name
python-cffi
Purl
pkg:rpm/rocky-linux/python-cffi?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.14.3-2.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "AppStream"
}

python-chardet

Package

Name
python-chardet
Purl
pkg:rpm/rocky-linux/python-chardet?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:3.0.4-19.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "AppStream"
}

python-chardet

Package

Name
python-chardet
Purl
pkg:rpm/rocky-linux/python-chardet?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:3.0.4-19.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "AppStream"
}

python-chardet

Package

Name
python-chardet
Purl
pkg:rpm/rocky-linux/python-chardet?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:3.0.4-19.module+el8.9.0+1418+f0d66789
Database specific
{
    "yum_repository": "AppStream"
}

python-iniconfig

Package

Name
python-iniconfig
Purl
pkg:rpm/rocky-linux/python-iniconfig?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.1.1-2.module+el8.9.0+1332+dd574197
Database specific
{
    "yum_repository": "PowerTools"
}

python-lxml

Package

Name
python-lxml
Purl
pkg:rpm/rocky-linux/python-lxml?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:4.6.5-1.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "AppStream"
}

python-more-itertools

Package

Name
python-more-itertools
Purl
pkg:rpm/rocky-linux/python-more-itertools?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:8.5.0-2.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "PowerTools"
}

python-more-itertools

Package

Name
python-more-itertools
Purl
pkg:rpm/rocky-linux/python-more-itertools?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:8.5.0-2.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "PowerTools"
}

python-packaging

Package

Name
python-packaging
Purl
pkg:rpm/rocky-linux/python-packaging?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:20.4-4.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "PowerTools"
}

python-packaging

Package

Name
python-packaging
Purl
pkg:rpm/rocky-linux/python-packaging?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:20.4-4.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "PowerTools"
}

python-pluggy

Package

Name
python-pluggy
Purl
pkg:rpm/rocky-linux/python-pluggy?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.13.1-3.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "PowerTools"
}

python-pluggy

Package

Name
python-pluggy
Purl
pkg:rpm/rocky-linux/python-pluggy?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.13.1-3.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "PowerTools"
}

python-ply

Package

Name
python-ply
Purl
pkg:rpm/rocky-linux/python-ply?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:3.11-10.module+el8.9.0+1418+f0d66789
Database specific
{
    "yum_repository": "AppStream"
}

python-ply

Package

Name
python-ply
Purl
pkg:rpm/rocky-linux/python-ply?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:3.11-10.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "AppStream"
}

python-ply

Package

Name
python-ply
Purl
pkg:rpm/rocky-linux/python-ply?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:3.11-10.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "AppStream"
}

python-psutil

Package

Name
python-psutil
Purl
pkg:rpm/rocky-linux/python-psutil?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:5.8.0-4.module+el8.9.0+1357+a3b80af7
Database specific
{
    "yum_repository": "AppStream"
}

python-py

Package

Name
python-py
Purl
pkg:rpm/rocky-linux/python-py?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.10.0-1.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "PowerTools"
}

python-py

Package

Name
python-py
Purl
pkg:rpm/rocky-linux/python-py?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.10.0-1.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "PowerTools"
}

python-pycparser

Package

Name
python-pycparser
Purl
pkg:rpm/rocky-linux/python-pycparser?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.20-3.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "AppStream"
}

python-pycparser

Package

Name
python-pycparser
Purl
pkg:rpm/rocky-linux/python-pycparser?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:2.20-3.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "AppStream"
}

python-PyMySQL

Package

Name
python-PyMySQL
Purl
pkg:rpm/rocky-linux/python-PyMySQL?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.10.1-2.module+el8.10.0+1910+234ad790
Database specific
{
    "yum_repository": "AppStream"
}

python-PyMySQL

Package

Name
python-PyMySQL
Purl
pkg:rpm/rocky-linux/python-PyMySQL?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.10.1-2.module+el8.10.0+1592+61442852
Database specific
{
    "yum_repository": "AppStream"
}

python-PyMySQL

Package

Name
python-PyMySQL
Purl
pkg:rpm/rocky-linux/python-PyMySQL?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.10.1-2.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "AppStream"
}

python-PyMySQL

Package

Name
python-PyMySQL
Purl
pkg:rpm/rocky-linux/python-PyMySQL?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.10.1-2.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "AppStream"
}

python-pysocks

Package

Name
python-pysocks
Purl
pkg:rpm/rocky-linux/python-pysocks?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.7.1-4.module+el8.9.0+1418+f0d66789
Database specific
{
    "yum_repository": "AppStream"
}

python-pysocks

Package

Name
python-pysocks
Purl
pkg:rpm/rocky-linux/python-pysocks?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.7.1-4.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "AppStream"
}

python-pysocks

Package

Name
python-pysocks
Purl
pkg:rpm/rocky-linux/python-pysocks?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:1.7.1-4.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "AppStream"
}

python-toml

Package

Name
python-toml
Purl
pkg:rpm/rocky-linux/python-toml?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.10.1-5.module+el8.9.0+1332+dd574197
Database specific
{
    "yum_repository": "AppStream"
}

python-wcwidth

Package

Name
python-wcwidth
Purl
pkg:rpm/rocky-linux/python-wcwidth?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.2.5-3.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "PowerTools"
}

python-wcwidth

Package

Name
python-wcwidth
Purl
pkg:rpm/rocky-linux/python-wcwidth?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:0.2.5-3.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "PowerTools"
}

python-wheel

Package

Name
python-wheel
Purl
pkg:rpm/rocky-linux/python-wheel?distro=rocky-linux-8&epoch=1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:0.35.1-4.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "AppStream"
}

python-wheel

Package

Name
python-wheel
Purl
pkg:rpm/rocky-linux/python-wheel?distro=rocky-linux-8&epoch=1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:0.35.1-4.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "AppStream"
}

PyYAML

Package

Name
PyYAML
Purl
pkg:rpm/rocky-linux/PyYAML?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.module+el8.9.0+1418+f0d66789
Database specific
{
    "yum_repository": "AppStream"
}

PyYAML

Package

Name
PyYAML
Purl
pkg:rpm/rocky-linux/PyYAML?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.module+el8.10.0+1582+bc278001
Database specific
{
    "yum_repository": "AppStream"
}

PyYAML

Package

Name
PyYAML
Purl
pkg:rpm/rocky-linux/PyYAML?distro=rocky-linux-8&epoch=0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0:5.4.1-1.module+el8.10.0+1860+afcc1c71
Database specific
{
    "yum_repository": "AppStream"
}