We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2023-5625

Python-eventlet: patch regression for cve-2021-21419 in some red hat builds



Assignerredhat
Reserved2023-10-17
Published2023-11-01
Updated2024-09-16

Description

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.



MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Product status

Default status
affected

0:0.30.2-4.el9 before *
unaffected

Default status
affected

0:0.30.2-4.el8ost before *
unaffected

Default status
affected

0:0.30.2-4.el9ost before *
unaffected

Timeline

2023-10-17:Reported to Red Hat.
2023-10-17:Made public.

References

https://access.redhat.com/errata/RHSA-2023:6128 (RHSA-2023:6128) vendor-advisory

https://access.redhat.com/errata/RHSA-2024:0188 (RHSA-2024:0188) vendor-advisory

https://access.redhat.com/errata/RHSA-2024:0213 (RHSA-2024:0213) vendor-advisory

https://access.redhat.com/security/cve/CVE-2023-5625 vdb-entry

https://bugzilla.redhat.com/show_bug.cgi?id=2244717 (RHBZ#2244717) issue-tracking

cve.org CVE-2023-5625

nvd.nist.gov CVE-2023-5625

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2023-5625
Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.