Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
219
security advisoryimportantTLSUbuntu OS 22.04 Ruby2.7 Significant SSL Flaw RLSB-2023-8256
Important: python27:2.7 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2023:5994", "synopsis": "Important: python27:2.7 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for python-mock, module.python-sqlalchemy, python-backports-ssl_match_hostname, python-attrs, python-chardet, python2-rpm-macros, module.numpy, module.python-mock, python-pymongo, python-markupsafe, python2-six, module.python-funcsigs, module.python-pygments, module.python-chardet, module.python-pluggy, module.python-virtualenv, module.python-PyMySQL, python-PyMySQL, module.python-dns, module.python-nose, python-pysocks, python-funcsigs, module.python-pytest-mock, scipy, module.python-attrs, numpy, python-wheel, PyYAML, module.python-docs, module.python-setuptools_scm, module.python-backports-ssl_match_hostname, babel, python-idna, python2-pip, module.python-wheel, module.python-ipaddress, module.python-markupsafe, module.scipy, module.PyYAML, python-nose, module.Cython, module.python-lxml, python-sqlalchemy, module.python2-pip, python-dns, pytest, module.python-backports, module.python-docutils, module.babel, python-pluggy, python-pygments, module.python-pymongo, module.python2-six, module.python-pysocks, python-docs, python-backports, python-py, python-lxml, python-pytest-mock, module.pytest, python-setuptools_scm, module.python-idna, module.python-py, python-ipaddress, Cython, module.python2-rpm-macros, python-docutils.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for MySQL and PostgreSQL.\n\nSecurity Fix(es):\n\n* python: TLShandshake bypass (CVE-2023-40217)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2235789", "sourceBy": "Red Hat", "sourceLink": "https://bugzilla.redhat.com/show_bug.cgi?id=2235789", "description": ""}], "cves": [{"name": "CVE-2023-40217", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2023-40217", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "cvss3BaseScore": "8.6", "cwe": "CWE-305"}], "references": [], "publishedAt": "2026-03-18T06:01:13.733535Z", "rpms": {"Rocky Linux 8": {"nvras": ["babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.src.rpm", "Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.src.rpm", "Cython-debugsource-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "Cython-debugsource-0:0.28.1-7.module+el8.9.0+1531+a18208f5.x86_64.rpm", "numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.src.rpm", "numpy-debugsource-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "numpy-debugsource-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "pytest-0:3.4.2-13.module+el8.9.0+1531+a18208f5.src.rpm", "python2-attrs-0:17.4.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-babel-0:2.5.1-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-backports-ssl_match_hostname-0:3.5.0.1-12.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-bson-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-bson-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-bson-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-bson-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm","python2-chardet-0:3.0.4-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-Cython-0:0.28.1-7.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-Cython-debuginfo-0:0.28.1-7.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-Cython-debuginfo-0:0.28.1-7.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-dns-0:1.15.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docs-0:2.7.16-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docs-info-0:2.7.16-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-docutils-0:0.14-12.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-funcsigs-0:1.0.2-13.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-idna-0:2.5-7.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-ipaddress-0:1.0.18-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-lxml-debuginfo-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-lxml-debuginfo-0:4.2.3-6.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-mock-0:2.0.0-13.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-nose-0:1.3.7-31.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-numpy-debuginfo-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-debuginfo-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-numpy-doc-1:1.14.2-16.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-numpy-f2py-1:1.14.2-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pip-0:9.0.3-19.module+el8.9.0+1531+a18208f5.noarch.rpm","python2-pip-0:9.0.3-19.module+el8.9.0+1531+a18208f5.src.rpm", "python2-pip-wheel-0:9.0.3-19.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pluggy-0:0.6.0-8.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-py-0:1.5.3-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pygments-0:2.2.0-22.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pymongo-gridfs-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pymongo-gridfs-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-PyMySQL-0:0.8.0-10.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pysocks-0:1.6.8-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pytest-0:3.4.2-13.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pytest-mock-0:1.9.0-4.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-pyyaml-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pyyaml-0:3.12-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-pyyaml-debuginfo-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-pyyaml-debuginfo-0:3.12-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-rpm-macros-0:3-38.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-rpm-macros-0:3-38.module+el8.9.0+1531+a18208f5.src.rpm", "python2-setuptools_scm-0:1.15.7-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-six-0:1.11.0-6.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-six-0:1.11.0-6.module+el8.9.0+1531+a18208f5.src.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python2-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python2-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.noarch.rpm", "python2-wheel-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.noarch.rpm","python-attrs-0:17.4.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-backports-0:1.0-16.module+el8.9.0+1531+a18208f5.src.rpm", "python-backports-ssl_match_hostname-0:3.5.0.1-12.module+el8.9.0+1531+a18208f5.src.rpm", "python-chardet-0:3.0.4-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-dns-0:1.15.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-docs-0:2.7.16-2.module+el8.9.0+1531+a18208f5.src.rpm", "python-docutils-0:0.14-12.module+el8.10.0+1592+61442852.src.rpm", "python-docutils-0:0.14-12.module+el8.10.0+1910+234ad790.src.rpm", "python-docutils-0:0.14-12.module+el8.9.0+1531+a18208f5.src.rpm", "python-funcsigs-0:1.0.2-13.module+el8.9.0+1531+a18208f5.src.rpm", "python-idna-0:2.5-7.module+el8.9.0+1531+a18208f5.src.rpm", "python-ipaddress-0:1.0.18-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-lxml-0:4.2.3-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-lxml-debugsource-0:4.2.3-6.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-lxml-debugsource-0:4.2.3-6.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python-markupsafe-0:0.23-19.module+el8.9.0+1531+a18208f5.src.rpm", "python-mock-0:2.0.0-13.module+el8.9.0+1531+a18208f5.src.rpm", "python-nose-0:1.3.7-31.module+el8.10.0+1910+234ad790.src.rpm", "python-nose-0:1.3.7-31.module+el8.9.0+1531+a18208f5.src.rpm", "python-nose-0:1.3.7-31.module+el8.10.0+1592+61442852.src.rpm", "python-nose-docs-0:1.3.7-31.module+el8.10.0+1910+234ad790.noarch.rpm", "python-nose-docs-0:1.3.7-31.module+el8.9.0+1531+a18208f5.noarch.rpm", "python-pluggy-0:0.6.0-8.module+el8.9.0+1531+a18208f5.src.rpm", "python-py-0:1.5.3-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-pygments-0:2.2.0-22.module+el8.10.0+1592+61442852.src.rpm", "python-pygments-0:2.2.0-22.module+el8.10.0+1910+234ad790.src.rpm", "python-pygments-0:2.2.0-22.module+el8.9.0+1531+a18208f5.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.10.0+1910+234ad790.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.src.rpm", "python-pymongo-0:3.7.0-1.module+el8.10.0+1592+61442852.src.rpm","python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1592+61442852.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1910+234ad790.aarch64.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1592+61442852.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1910+234ad790.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.9.0+1531+a18208f5.aarch64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.9.0+1531+a18208f5.x86_64.rpm", "python-PyMySQL-0:0.8.0-10.module+el8.9.0+1531+a18208f5.src.rpm", "python-pysocks-0:1.6.8-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-pytest-mock-0:1.9.0-4.module+el8.9.0+1531+a18208f5.src.rpm", "python-setuptools_scm-0:1.15.7-6.module+el8.9.0+1531+a18208f5.src.rpm", "python-sqlalchemy-0:1.3.2-2.module+el8.9.0+1531+a18208f5.src.rpm", "python-sqlalchemy-doc-0:1.3.2-2.module+el8.9.0+1531+a18208f5.noarch.rpm", "python-virtualenv-0:15.1.0-22.module+el8.10.0+1592+61442852.src.rpm", "python-wheel-1:0.31.1-3.module+el8.10.0+1592+61442852.src.rpm", "python-wheel-1:0.31.1-3.module+el8.9.0+1531+a18208f5.src.rpm", "python-wheel-1:0.31.1-3.module+el8.10.0+1910+234ad790.src.rpm", "PyYAML-0:3.12-16.module+el8.9.0+1531+a18208f5.src.rpm", "PyYAML-debugsource-0:3.12-16.module+el8.9.0+1531+a18208f5.aarch64.rpm", "PyYAML-debugsource-0:3.12-16.module+el8.9.0+1531+a18208f5.x86_64.rpm", "scipy-0:1.0.0-21.module+el8.10.0+1592+61442852.src.rpm", "scipy-0:1.0.0-21.module+el8.10.0+1910+234ad790.src.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.10.0+1910+234ad790.aarch64.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.10.0+1592+61442852.aarch64.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.10.0+1910+234ad790.x86_64.rpm", "python-nose-docs-0:1.3.7-31.module+el8.10.0+1592+61442852.noarch.rpm", "python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1592+61442852.x86_64.rpm","python-pymongo-debuginfo-0:3.7.0-1.module+el8.10.0+1910+234ad790.x86_64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1592+61442852.x86_64.rpm", "python-pymongo-debugsource-0:3.7.0-1.module+el8.10.0+1910+234ad790.x86_64.rpm", "scipy-debugsource-0:1.0.0-21.module+el8.10.0+1592+61442852.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Rocky Linux updates for python27 includes important fixes addressing a crucial TLS handshake bypass issue. Stay secure!. Rocky Linux python27 updates TLS security. . Severity: Important. LinuxSecurity.com Team
Mar 18, 2026
•Important
Rocky Linux
219
security advisoryimportantTLSRocky Linux 8 RLSA-2023-8005 python38 Severe Flaw in Security Settings
Important: python39:3.9 and python39-devel:3.9 security update. {"type": "TYPE_SECURITY", "shortCode": "RL", "name": "RLSA-2023:5998", "synopsis": "Important: python39:3.9 and python39-devel:3.9 security update", "severity": "SEVERITY_IMPORTANT", "topic": "An update is available for module.python-cffi, module.python-more-itertools, python-cffi, python-chardet, python-attrs, module.numpy, python-ply, module.python3x-pyparsing, module.python-psutil, python-wcwidth, python-pycparser, python-psutil, module.python-chardet, module.python-pluggy, module.python-PyMySQL, python-PyMySQL, module.python-toml, python-pysocks, module.python-attrs, numpy, python-wheel, PyYAML, module.python-wcwidth, module.python-wheel, module.python3x-six, module.python-pycparser, pybind11, module.PyYAML, module.python-lxml, module.Cython, pytest, python3x-six, python-pluggy, python-toml, module.python-pysocks, module.python-iniconfig, python-iniconfig, python-packaging, module.pybind11, python-more-itertools, python-py, python-lxml, module.python-packaging, module.pytest, module.python-py, module.python-ply, Cython, python3x-pyparsing.\nThis update affects Rocky Linux 8.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list", "description": "Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.\n\nSecurity Fix(es):\n\n* python: TLS handshake bypass (CVE-2023-40217)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "solution": null, "affectedProducts": ["Rocky Linux 8"], "fixes": [{"ticket": "2235789", "sourceBy": "Red Hat", "sourceLink":"https://bugzilla.redhat.com/show_bug.cgi?id=2235789", "description": ""}], "cves": [{"name": "CVE-2023-40217", "sourceBy": "MITRE", "sourceLink": "https://www.cve.org/CVERecord?id=CVE-2023-40217", "cvss3ScoringVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "cvss3BaseScore": "8.6", "cwe": "CWE-305"}], "references": [], "publishedAt": "2026-03-18T06:01:13.733535Z", "rpms": {"Rocky Linux 8": {"nvras": ["Cython-0:0.29.21-5.module+el8.10.0+1582+bc278001.src.rpm", "Cython-0:0.29.21-5.module+el8.10.0+1860+afcc1c71.src.rpm", "Cython-debugsource-0:0.29.21-5.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "Cython-debugsource-0:0.29.21-5.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "numpy-0:1.19.4-3.module+el8.10.0+1860+afcc1c71.src.rpm", "numpy-debugsource-0:1.19.4-3.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "numpy-debugsource-0:1.19.4-3.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "pybind11-0:2.7.1-1.module+el8.9.0+1357+a3b80af7.src.rpm", "pytest-0:6.0.2-2.module+el8.10.0+1860+afcc1c71.src.rpm", "pytest-0:6.0.2-2.module+el8.10.0+1582+bc278001.src.rpm", "python39-attrs-0:20.3.0-2.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-cffi-0:1.14.3-2.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "python39-cffi-0:1.14.3-2.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "python39-cffi-debuginfo-0:1.14.3-2.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "python39-cffi-debuginfo-0:1.14.3-2.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "python39-chardet-0:3.0.4-19.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-Cython-0:0.29.21-5.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "python39-Cython-0:0.29.21-5.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "python39-Cython-debuginfo-0:0.29.21-5.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "python39-Cython-debuginfo-0:0.29.21-5.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "python39-iniconfig-0:1.1.1-2.module+el8.9.0+1332+dd574197.noarch.rpm", "python39-lxml-0:4.6.5-1.module+el8.10.0+1582+bc278001.aarch64.rpm", "python39-lxml-0:4.6.5-1.module+el8.10.0+1582+bc278001.x86_64.rpm","python39-lxml-debuginfo-0:4.6.5-1.module+el8.10.0+1582+bc278001.aarch64.rpm", "python39-lxml-debuginfo-0:4.6.5-1.module+el8.10.0+1582+bc278001.x86_64.rpm", "python39-more-itertools-0:8.5.0-2.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-numpy-0:1.19.4-3.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "python39-numpy-0:1.19.4-3.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "python39-numpy-debuginfo-0:1.19.4-3.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "python39-numpy-debuginfo-0:1.19.4-3.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "python39-numpy-doc-0:1.19.4-3.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-numpy-f2py-0:1.19.4-3.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "python39-numpy-f2py-0:1.19.4-3.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "python39-packaging-0:20.4-4.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-pluggy-0:0.13.1-3.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-ply-0:3.11-10.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-psutil-0:5.8.0-4.module+el8.9.0+1357+a3b80af7.aarch64.rpm", "python39-psutil-0:5.8.0-4.module+el8.9.0+1357+a3b80af7.x86_64.rpm", "python39-psutil-debuginfo-0:5.8.0-4.module+el8.9.0+1357+a3b80af7.aarch64.rpm", "python39-psutil-debuginfo-0:5.8.0-4.module+el8.9.0+1357+a3b80af7.x86_64.rpm", "python39-py-0:1.10.0-1.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-pybind11-0:2.7.1-1.module+el8.9.0+1357+a3b80af7.aarch64.rpm", "python39-pybind11-0:2.7.1-1.module+el8.9.0+1357+a3b80af7.x86_64.rpm", "python39-pybind11-devel-0:2.7.1-1.module+el8.9.0+1357+a3b80af7.aarch64.rpm", "python39-pybind11-devel-0:2.7.1-1.module+el8.9.0+1357+a3b80af7.x86_64.rpm", "python39-pycparser-0:2.20-3.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-PyMySQL-0:0.10.1-2.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-pyparsing-0:2.4.7-5.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-pysocks-0:1.7.1-4.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-pytest-0:6.0.2-2.module+el8.10.0+1860+afcc1c71.noarch.rpm","python39-pyyaml-0:5.4.1-1.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "python39-pyyaml-0:5.4.1-1.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "python39-pyyaml-debuginfo-0:5.4.1-1.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "python39-pyyaml-debuginfo-0:5.4.1-1.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "python39-six-0:1.15.0-3.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-toml-0:0.10.1-5.module+el8.9.0+1332+dd574197.noarch.rpm", "python39-wcwidth-0:0.2.5-3.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-wheel-1:0.35.1-4.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python39-wheel-wheel-1:0.35.1-4.module+el8.10.0+1860+afcc1c71.noarch.rpm", "python3x-pyparsing-0:2.4.7-5.module+el8.10.0+1860+afcc1c71.src.rpm", "python3x-pyparsing-0:2.4.7-5.module+el8.10.0+1582+bc278001.src.rpm", "python3x-six-0:1.15.0-3.module+el8.10.0+1860+afcc1c71.src.rpm", "python-attrs-0:20.3.0-2.module+el8.10.0+1582+bc278001.src.rpm", "python-attrs-0:20.3.0-2.module+el8.10.0+1860+afcc1c71.src.rpm", "python-cffi-0:1.14.3-2.module+el8.10.0+1860+afcc1c71.src.rpm", "python-cffi-debugsource-0:1.14.3-2.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "python-cffi-debugsource-0:1.14.3-2.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "python-chardet-0:3.0.4-19.module+el8.10.0+1860+afcc1c71.src.rpm", "python-chardet-0:3.0.4-19.module+el8.9.0+1418+f0d66789.src.rpm", "python-iniconfig-0:1.1.1-2.module+el8.9.0+1332+dd574197.src.rpm", "python-lxml-0:4.6.5-1.module+el8.10.0+1582+bc278001.src.rpm", "python-lxml-debugsource-0:4.6.5-1.module+el8.10.0+1582+bc278001.aarch64.rpm", "python-lxml-debugsource-0:4.6.5-1.module+el8.10.0+1582+bc278001.x86_64.rpm", "python-more-itertools-0:8.5.0-2.module+el8.10.0+1860+afcc1c71.src.rpm", "python-more-itertools-0:8.5.0-2.module+el8.10.0+1582+bc278001.src.rpm", "python-packaging-0:20.4-4.module+el8.10.0+1860+afcc1c71.src.rpm", "python-packaging-0:20.4-4.module+el8.10.0+1582+bc278001.src.rpm", "python-pluggy-0:0.13.1-3.module+el8.10.0+1860+afcc1c71.src.rpm", "python-pluggy-0:0.13.1-3.module+el8.10.0+1582+bc278001.src.rpm","python-ply-0:3.11-10.module+el8.10.0+1860+afcc1c71.src.rpm", "python-ply-0:3.11-10.module+el8.9.0+1418+f0d66789.src.rpm", "python-psutil-0:5.8.0-4.module+el8.9.0+1357+a3b80af7.src.rpm", "python-psutil-debugsource-0:5.8.0-4.module+el8.9.0+1357+a3b80af7.aarch64.rpm", "python-psutil-debugsource-0:5.8.0-4.module+el8.9.0+1357+a3b80af7.x86_64.rpm", "python-py-0:1.10.0-1.module+el8.10.0+1582+bc278001.src.rpm", "python-py-0:1.10.0-1.module+el8.10.0+1860+afcc1c71.src.rpm", "python-pycparser-0:2.20-3.module+el8.10.0+1860+afcc1c71.src.rpm", "python-PyMySQL-0:0.10.1-2.module+el8.10.0+1860+afcc1c71.src.rpm", "python-PyMySQL-0:0.10.1-2.module+el8.10.0+1910+234ad790.src.rpm", "python-pysocks-0:1.7.1-4.module+el8.10.0+1860+afcc1c71.src.rpm", "python-pysocks-0:1.7.1-4.module+el8.9.0+1418+f0d66789.src.rpm", "python-toml-0:0.10.1-5.module+el8.9.0+1332+dd574197.src.rpm", "python-wcwidth-0:0.2.5-3.module+el8.10.0+1860+afcc1c71.src.rpm", "python-wcwidth-0:0.2.5-3.module+el8.10.0+1582+bc278001.src.rpm", "python-wheel-1:0.35.1-4.module+el8.10.0+1860+afcc1c71.src.rpm", "PyYAML-0:5.4.1-1.module+el8.10.0+1860+afcc1c71.src.rpm", "PyYAML-0:5.4.1-1.module+el8.9.0+1418+f0d66789.src.rpm", "PyYAML-debugsource-0:5.4.1-1.module+el8.10.0+1860+afcc1c71.aarch64.rpm", "PyYAML-debugsource-0:5.4.1-1.module+el8.9.0+1418+f0d66789.aarch64.rpm", "PyYAML-debugsource-0:5.4.1-1.module+el8.9.0+1418+f0d66789.x86_64.rpm", "PyYAML-debugsource-0:5.4.1-1.module+el8.10.0+1860+afcc1c71.x86_64.rpm", "Cython-debugsource-0:0.29.21-5.module+el8.10.0+1582+bc278001.aarch64.rpm", "Cython-debugsource-0:0.29.21-5.module+el8.10.0+1582+bc278001.x86_64.rpm", "numpy-0:1.19.4-3.module+el8.10.0+1582+bc278001.src.rpm", "numpy-debugsource-0:1.19.4-3.module+el8.10.0+1582+bc278001.aarch64.rpm", "numpy-debugsource-0:1.19.4-3.module+el8.10.0+1582+bc278001.x86_64.rpm", "python39-attrs-0:20.3.0-2.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-cffi-0:1.14.3-2.module+el8.10.0+1582+bc278001.aarch64.rpm", "python39-cffi-0:1.14.3-2.module+el8.10.0+1582+bc278001.x86_64.rpm","python39-cffi-debuginfo-0:1.14.3-2.module+el8.10.0+1582+bc278001.aarch64.rpm", "python39-cffi-debuginfo-0:1.14.3-2.module+el8.10.0+1582+bc278001.x86_64.rpm", "python39-chardet-0:3.0.4-19.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-Cython-0:0.29.21-5.module+el8.10.0+1582+bc278001.aarch64.rpm", "python39-Cython-0:0.29.21-5.module+el8.10.0+1582+bc278001.x86_64.rpm", "python39-Cython-debuginfo-0:0.29.21-5.module+el8.10.0+1582+bc278001.aarch64.rpm", "python39-Cython-debuginfo-0:0.29.21-5.module+el8.10.0+1582+bc278001.x86_64.rpm", "python39-more-itertools-0:8.5.0-2.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-numpy-0:1.19.4-3.module+el8.10.0+1582+bc278001.aarch64.rpm", "python39-numpy-0:1.19.4-3.module+el8.10.0+1582+bc278001.x86_64.rpm", "python39-numpy-debuginfo-0:1.19.4-3.module+el8.10.0+1582+bc278001.aarch64.rpm", "python39-numpy-debuginfo-0:1.19.4-3.module+el8.10.0+1582+bc278001.x86_64.rpm", "python39-numpy-doc-0:1.19.4-3.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-numpy-f2py-0:1.19.4-3.module+el8.10.0+1582+bc278001.aarch64.rpm", "python39-numpy-f2py-0:1.19.4-3.module+el8.10.0+1582+bc278001.x86_64.rpm", "python39-packaging-0:20.4-4.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-pluggy-0:0.13.1-3.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-ply-0:3.11-10.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-py-0:1.10.0-1.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-pycparser-0:2.20-3.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-PyMySQL-0:0.10.1-2.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-pyparsing-0:2.4.7-5.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-pysocks-0:1.7.1-4.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-pytest-0:6.0.2-2.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-pyyaml-0:5.4.1-1.module+el8.10.0+1582+bc278001.aarch64.rpm", "python39-pyyaml-0:5.4.1-1.module+el8.10.0+1582+bc278001.x86_64.rpm", "python39-pyyaml-debuginfo-0:5.4.1-1.module+el8.10.0+1582+bc278001.aarch64.rpm","python39-pyyaml-debuginfo-0:5.4.1-1.module+el8.10.0+1582+bc278001.x86_64.rpm", "python39-six-0:1.15.0-3.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-wcwidth-0:0.2.5-3.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-wheel-1:0.35.1-4.module+el8.10.0+1582+bc278001.noarch.rpm", "python39-wheel-wheel-1:0.35.1-4.module+el8.10.0+1582+bc278001.noarch.rpm", "python3x-six-0:1.15.0-3.module+el8.10.0+1582+bc278001.src.rpm", "python-cffi-0:1.14.3-2.module+el8.10.0+1582+bc278001.src.rpm", "python-cffi-debugsource-0:1.14.3-2.module+el8.10.0+1582+bc278001.aarch64.rpm", "python-cffi-debugsource-0:1.14.3-2.module+el8.10.0+1582+bc278001.x86_64.rpm", "python-chardet-0:3.0.4-19.module+el8.10.0+1582+bc278001.src.rpm", "python-ply-0:3.11-10.module+el8.10.0+1582+bc278001.src.rpm", "python-pycparser-0:2.20-3.module+el8.10.0+1582+bc278001.src.rpm", "python-PyMySQL-0:0.10.1-2.module+el8.10.0+1582+bc278001.src.rpm", "python-PyMySQL-0:0.10.1-2.module+el8.10.0+1592+61442852.src.rpm", "python-pysocks-0:1.7.1-4.module+el8.10.0+1582+bc278001.src.rpm", "python-wheel-1:0.35.1-4.module+el8.10.0+1582+bc278001.src.rpm", "PyYAML-0:5.4.1-1.module+el8.10.0+1582+bc278001.src.rpm", "PyYAML-debugsource-0:5.4.1-1.module+el8.10.0+1582+bc278001.aarch64.rpm", "PyYAML-debugsource-0:5.4.1-1.module+el8.10.0+1582+bc278001.x86_64.rpm"]}}, "rebootSuggested": false, "buildReferences": []}. Rocky Linux's python39 gets important security updates for TLS handshake vulnerabilities to enhance system integrity and prevent exploits.. Rocky Linux python39 security important update TLS handshake. . Severity: Important. LinuxSecurity.com Team
Mar 18, 2026
•Important
Rocky Linux
202
security advisorybug fixTLSopenSUSE 15.4, 15.5: SUSE-SU-2023:3933-1 Important TLS Fix
This update for python fixes the following issues: CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692).. # Security update for python Announcement ID: SUSE-SU-2023:3933-1 Rating: important References: * #1214692 Cross-References: * CVE-2023-40217 CVSS scores: * CVE-2023-40217 ( SUSE ): 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N * CVE-2023-40217 ( NVD ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE CaaS Platform 4.0 * SUSE Enterprise Storage 7.1 * SUSE Linux Enterprise Desktop 15 SP4 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise High Performance Computing 15 SP3 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 * SUSE Linux Enterprise Server 15 SP3 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 *SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Manager Proxy 4.2 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.2 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.2 * SUSE Manager Server 4.3 * SUSE Package Hub 15 15-SP4 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for python fixes the following issues: * CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-3933=1 * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-3933=1 * SUSE Package Hub 15 15-SP4 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-3933=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-3933=1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3933=1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-3933=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-3933=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 zypper in -t patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-3933=1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3933=1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 zypper in -t patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-3933=1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 zypper in -t patchSUSE-SLE-Product-SLES-15-SP3-LTSS-2023-3933=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3933=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-3933=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-3933=1 * SUSE Manager Proxy 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-3933=1 * SUSE Manager Retail Branch Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch- Server-4.2-2023-3933=1 * SUSE Manager Server 4.2 zypper in -t patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-3933=1 * SUSE Enterprise Storage 7.1 zypper in -t patch SUSE-Storage-7.1-2023-3933=1 * SUSE CaaS Platform 4.0 To install this update, use the SUSE CaaS Platform 'skuba' tool. It will inform you if it detects new updates and let you then trigger updating of the complete cluster in a controlled way. ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-curses-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-curses-2.7.18-150000.54.1 * python-idle-2.7.18-150000.54.1 * python-demo-2.7.18-150000.54.1 * python-gdbm-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-gdbm-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * openSUSE Leap 15.4 (x86_64) * python-32bit-debuginfo-2.7.18-150000.54.1 *python-base-32bit-debuginfo-2.7.18-150000.54.1 * libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.54.1 * libpython2_7-1_0-32bit-2.7.18-150000.54.1 * python-base-32bit-2.7.18-150000.54.1 * python-32bit-2.7.18-150000.54.1 * openSUSE Leap 15.4 (noarch) * python-doc-2.7.18-150000.54.1 * python-doc-pdf-2.7.18-150000.54.1 * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-curses-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-curses-2.7.18-150000.54.1 * python-idle-2.7.18-150000.54.1 * python-demo-2.7.18-150000.54.1 * python-gdbm-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-gdbm-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * openSUSE Leap 15.5 (x86_64) * python-32bit-debuginfo-2.7.18-150000.54.1 * python-base-32bit-debuginfo-2.7.18-150000.54.1 * libpython2_7-1_0-32bit-debuginfo-2.7.18-150000.54.1 * libpython2_7-1_0-32bit-2.7.18-150000.54.1 * python-base-32bit-2.7.18-150000.54.1 * python-32bit-2.7.18-150000.54.1 * openSUSE Leap 15.5 (noarch) * python-doc-2.7.18-150000.54.1 * python-doc-pdf-2.7.18-150000.54.1 * SUSE Package Hub 15 15-SP4 (aarch64 ppc64le s390x x86_64) * python-base-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-curses-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-curses-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-gdbm-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-gdbm-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1 (aarch64 x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-curses-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-curses-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-gdbm-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-gdbm-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS 15-SP2 (aarch64 x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-curses-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-curses-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-gdbm-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-gdbm-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP3 (aarch64 x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP3 (aarch64 x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1 (aarch64 ppc64le s390x x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-curses-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-curses-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-gdbm-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 *python-gdbm-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * SUSE Linux Enterprise Server 15 SP2 LTSS 15-SP2 (aarch64 ppc64le s390x x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-curses-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-curses-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-gdbm-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-gdbm-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * SUSE Linux Enterprise Server 15 SP3 LTSS 15-SP3 (aarch64 ppc64le s390x x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP1 (ppc64le x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-curses-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-curses-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 *python-gdbm-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-gdbm-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 (ppc64le x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-curses-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-curses-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-gdbm-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-gdbm-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP3 (ppc64le x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * SUSE Manager Proxy 4.2 (x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 *python-base-debugsource-2.7.18-150000.54.1 * SUSE Manager Retail Branch Server 4.2 (x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * SUSE Manager Server 4.2 (ppc64le s390x x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-curses-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-curses-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-gdbm-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-gdbm-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * SUSE Enterprise Storage 7.1 (aarch64 x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 * libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 * SUSE CaaS Platform 4.0 (x86_64) * python-base-2.7.18-150000.54.1 * python-debugsource-2.7.18-150000.54.1 * python-devel-2.7.18-150000.54.1 * libpython2_7-1_0-debuginfo-2.7.18-150000.54.1 * python-curses-debuginfo-2.7.18-150000.54.1 * python-2.7.18-150000.54.1 *libpython2_7-1_0-2.7.18-150000.54.1 * python-base-debuginfo-2.7.18-150000.54.1 * python-curses-2.7.18-150000.54.1 * python-xml-2.7.18-150000.54.1 * python-xml-debuginfo-2.7.18-150000.54.1 * python-gdbm-debuginfo-2.7.18-150000.54.1 * python-debuginfo-2.7.18-150000.54.1 * python-tk-debuginfo-2.7.18-150000.54.1 * python-base-debugsource-2.7.18-150000.54.1 * python-gdbm-2.7.18-150000.54.1 * python-tk-2.7.18-150000.54.1 ## References: * https://www.suse.com/security/cve/CVE-2023-40217.html * https://bugzilla.suse.com/show_bug.cgi?id=1214692 . Python addresses vulnerability in TLS handshake process. Essential for ensuring system reliability and safeguarding information.. openSUSE Python Update, TLS Handshake Fix, Security Advisory. . Severity: Important. LinuxSecurity.com Team
Oct 02, 2023
•Important
OpenSUSE
98
security advisoryred hatDoS attackRed Hat: RHSA-2023-0197-01 Medium: Java-11-OpenJDK DoS Fix
An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: java-11-openjdk security update Advisory ID: RHSA-2023:0197-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2023:0197 Issue date: 2023-01-18 CVE Names: CVE-2023-21835 CVE-2023-21843 ==================================================================== 1. Summary: An update for java-11-openjdk is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.2 Telecommunications Update Service, and Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux AppStream AUS (v. 8.2) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux AppStream E4S (v. 8.2) - aarch64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux AppStream TUS (v. 8.2) - aarch64, ppc64le, s390x, x86_64 3. Description: The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) (CVE-2023-21835) * OpenJDK: soundbank URL remote loading (Sound, 8293742) (CVE-2023-21843) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to theCVE page(s) listed in the References section. 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of OpenJDK Java must be restarted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 2160421 - CVE-2023-21835 OpenJDK: handshake DoS attack against DTLS connections (JSSE, 8287411) 2160475 - CVE-2023-21843 OpenJDK: soundbank URL remote loading (Sound, 8293742) 6. Package List: Red Hat Enterprise Linux AppStream AUS (v.8.2): Source: java-11-openjdk-11.0.18.0.10-1.el8_2.src.rpm aarch64: java-11-openjdk-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.aarch64.rpm ppc64le: java-11-openjdk-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.ppc64le.rpm s390x: java-11-openjdk-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.s390x.rpm x86_64: java-11-openjdk-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.x86_64.rpm Red Hat Enterprise Linux AppStream E4S (v.8.2): Source: java-11-openjdk-11.0.18.0.10-1.el8_2.src.rpm aarch64: java-11-openjdk-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.aarch64.rpm ppc64le: java-11-openjdk-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.ppc64le.rpm s390x: java-11-openjdk-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.s390x.rpm x86_64: java-11-openjdk-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.x86_64.rpm Red Hat Enterprise Linux AppStream TUS (v.8.2): Source: java-11-openjdk-11.0.18.0.10-1.el8_2.src.rpm aarch64: java-11-openjdk-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.aarch64.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.aarch64.rpm ppc64le: java-11-openjdk-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.ppc64le.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.ppc64le.rpm s390x: java-11-openjdk-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.s390x.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.s390x.rpm x86_64: java-11-openjdk-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-debugsource-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-demo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-devel-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-devel-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-devel-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-headless-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-headless-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-headless-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-javadoc-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-javadoc-zip-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-jmods-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-slowdebug-debuginfo-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-src-11.0.18.0.10-1.el8_2.x86_64.rpm java-11-openjdk-static-libs-11.0.18.0.10-1.el8_2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are availablefrom https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2023-21835 https://access.redhat.com/security/cve/CVE-2023-21843 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2023 Red Hat, Inc. -- RHSA-announce mailing list
Jan 18, 2023
Red Hat
89
security advisoryupdateFedoraFedora 22: 2016-7942ee2cc5 Moderate: Libssh2 Weak Handshake
During the SSHv2 handshake when libssh2 is to get a suitable value for 'group order' in the Diffle Hellman negotiation, it would pass in number of bytes to a function that expected number of bits. This would result in the library generating numbers using only an 8th the number of random bits than what were intended: 128 or 256 bits instead of 1023 or 2047 Using such drastically. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-7942ee2cc5 2016-03-09 20:10:36.386658 -------------------------------------------------------------------------------- Name : libssh2 Product : Fedora 22 Version : 1.5.0 Release : 2.fc22 URL : https://libssh2.org/ Summary : A library implementing the SSH2 protocol Description : libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS(22), SECSH-USERAUTH(25), SECSH-CONNECTION(23), SECSH-ARCH(20), SECSH-FILEXFER(06)*, SECSH-DHGEX(04), and SECSH-NUMBERS(10). -------------------------------------------------------------------------------- Update Information: During the SSHv2 handshake when libssh2 is to get a suitable value for 'group order' in the Diffle Hellman negotiation, it would pass in number of bytes to a function that expected number of bits. This would result in the library generating numbers using only an 8th the number of random bits than what were intended: 128 or 256 bits instead of 1023 or 2047 Using such drastically reduced amount of random bits for Diffie Hellman weakened the handshake security significantly. The Common Vulnerabilities and Exposures (CVE) project has assigned the name CVE-2016-0787 to this issue. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1306021 - CVE-2016-0787 libssh2: bits/bytes confusion resulting in truncated Diffie-Hellman secret length https://bugzilla.redhat.com/show_bug.cgi?id=1306021 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update libssh2' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list
Mar 09, 2016
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!