CVE-2023-5625

Description

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.

Reserved 2023-10-17 | Published 2023-11-01 | Updated 2024-12-06 | Assigner redhat

Problem types

Allocation of Resources Without Limits or Throttling

Product status

Default status
affected

0:0.30.2-4.el9 before *
unaffected

Default status
affected

0:0.30.2-4.el8ost before *
unaffected

Default status
affected

0:0.30.2-4.el9ost before *
unaffected

Timeline

2023-10-17:	Reported to Red Hat.
2023-10-17:	Made public.

References

access.redhat.com/errata/RHSA-2023:6128 (RHSA-2023:6128) vendor-advisory

access.redhat.com/errata/RHSA-2024:0188 (RHSA-2024:0188) vendor-advisory

access.redhat.com/errata/RHSA-2024:0213 (RHSA-2024:0213) vendor-advisory

access.redhat.com/security/cve/CVE-2023-5625 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2244717 (RHBZ#2244717) issue-tracking

cve.org (CVE-2023-5625)

nvd.nist.gov (CVE-2023-5625)

Download JSON