(RHSA-2023:2860) Moderate: python27:2.7 security update

2023-05-1605:56:37

access.redhat.com

python 2.7

security update

cpu denial of service

cve-2022-45061

red hat enterprise linux 8.8

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.008

Percentile

81.5%

JSON

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.

Security Fix(es):

Python: CPU denial of service via inefficient IDNA decoder (CVE-2022-45061)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanyaarch64python-pymongo-debugsource< 3.7.0-1.module+el8.5.0+10264+e5753a40python-pymongo-debugsource-3.7.0-1.module+el8.5.0+10264+e5753a40.aarch64.rpm
RedHatanyppc64lescipy-debugsource< 1.0.0-21.module+el8.5.0+10858+05337455scipy-debugsource-1.0.0-21.module+el8.5.0+10858+05337455.ppc64le.rpm
RedHatanyx86_64python2-scipy-debuginfo< 1.0.0-21.module+el8.5.0+10858+05337455python2-scipy-debuginfo-1.0.0-21.module+el8.5.0+10858+05337455.x86_64.rpm
RedHatanynoarchpython2-dns< 1.15.0-10.module+el8.1.0+3111+de3f2d8epython2-dns-1.15.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm
RedHatanyx86_64python-pymongo-debuginfo< 3.7.0-1.module+el8.5.0+10264+e5753a40python-pymongo-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.x86_64.rpm
RedHatanynoarchpython2-pluggy< 0.6.0-8.module+el8.1.0+3111+de3f2d8epython2-pluggy-0.6.0-8.module+el8.1.0+3111+de3f2d8e.noarch.rpm
RedHatanyx86_64python2-tools< 2.7.18-12.module+el8.8.0+17629+2cfc9d03python2-tools-2.7.18-12.module+el8.8.0+17629+2cfc9d03.x86_64.rpm
RedHatanyaarch64python2< 2.7.18-12.module+el8.8.0+17629+2cfc9d03python2-2.7.18-12.module+el8.8.0+17629+2cfc9d03.aarch64.rpm
RedHatanys390xpython2-pymongo< 3.7.0-1.module+el8.5.0+10264+e5753a40python2-pymongo-3.7.0-1.module+el8.5.0+10264+e5753a40.s390x.rpm
RedHatanys390xpython-coverage-debugsource< 4.5.1-4.module+el8.1.0+3111+de3f2d8epython-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	aarch64	python-pymongo-debugsource	< 3.7.0-1.module+el8.5.0+10264+e5753a40	python-pymongo-debugsource-3.7.0-1.module+el8.5.0+10264+e5753a40.aarch64.rpm
RedHat	any	ppc64le	scipy-debugsource	< 1.0.0-21.module+el8.5.0+10858+05337455	scipy-debugsource-1.0.0-21.module+el8.5.0+10858+05337455.ppc64le.rpm
RedHat	any	x86_64	python2-scipy-debuginfo	< 1.0.0-21.module+el8.5.0+10858+05337455	python2-scipy-debuginfo-1.0.0-21.module+el8.5.0+10858+05337455.x86_64.rpm
RedHat	any	noarch	python2-dns	< 1.15.0-10.module+el8.1.0+3111+de3f2d8e	python2-dns-1.15.0-10.module+el8.1.0+3111+de3f2d8e.noarch.rpm
RedHat	any	x86_64	python-pymongo-debuginfo	< 3.7.0-1.module+el8.5.0+10264+e5753a40	python-pymongo-debuginfo-3.7.0-1.module+el8.5.0+10264+e5753a40.x86_64.rpm
RedHat	any	noarch	python2-pluggy	< 0.6.0-8.module+el8.1.0+3111+de3f2d8e	python2-pluggy-0.6.0-8.module+el8.1.0+3111+de3f2d8e.noarch.rpm
RedHat	any	x86_64	python2-tools	< 2.7.18-12.module+el8.8.0+17629+2cfc9d03	python2-tools-2.7.18-12.module+el8.8.0+17629+2cfc9d03.x86_64.rpm
RedHat	any	aarch64	python2	< 2.7.18-12.module+el8.8.0+17629+2cfc9d03	python2-2.7.18-12.module+el8.8.0+17629+2cfc9d03.aarch64.rpm
RedHat	any	s390x	python2-pymongo	< 3.7.0-1.module+el8.5.0+10264+e5753a40	python2-pymongo-3.7.0-1.module+el8.5.0+10264+e5753a40.s390x.rpm
RedHat	any	s390x	python-coverage-debugsource	< 4.5.1-4.module+el8.1.0+3111+de3f2d8e	python-coverage-debugsource-4.5.1-4.module+el8.1.0+3111+de3f2d8e.s390x.rpm