Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 569
Alerts This Week
Warning Icon 1 569

Stay Secure with the Latest Linux Advisories

Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found 1,808 articles for you...
89

Fedora 44 rust-sequoia-octopus Low Severity Security Notice 2026-5c5f4f40a4

Update the sequoia-wot crate to version 0.15.2. Update the sequoia-keystore crate to version 0.7.3. This includes a rebuild of all dependent applications to address three low- severity security vulnerabilities in sequoia-wot: https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/77605b2f. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-5c5f4f40a4 2026-06-05 04:25:00.359000+00:00 -------------------------------------------------------------------------------- Name : rust-sequoia-octopus-librnp Product : Fedora 44 Version : 1.11.1 Release : 7.fc44 URL : https://crates.io/crates/sequoia-octopus-librnp Summary : Reimplementation of RNP's interface using Sequoia for use with Thunderbird Description : Reimplementation of RNP's interface using Sequoia for use with Thunderbird. -------------------------------------------------------------------------------- Update Information: Update the sequoia-wot crate to version 0.15.2. Update the sequoia-keystore crate to version 0.7.3. This includes a rebuild of all dependent applications to address three low- severity security vulnerabilities in sequoia-wot: https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/77605b2f https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/81210321 https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/dd2ffb50 -------------------------------------------------------------------------------- ChangeLog: * Wed May 27 2026 Fabio Valentini - 1.11.1-7 - Bump sequoia-wot dependency from 0.14 to 0.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2356514 - Package NEWS https://bugzilla.redhat.com/show_bug.cgi?id=2356514 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-5c5f4f40a4' at the command line. For moreinformation, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Update for Fedora 44 involves addressing low-severity issues in rust-sequoia-octopus with necessary crate versions.. Fedora 44, rust-sequoia-octopus, low severity, security advisory. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 Low Fedora
89

Fedora 43 rust-sequoia-octopus-librnp Low Security Update 2026-ecfadb29a1

Update the sequoia-wot crate to version 0.15.2. Update the sequoia-keystore crate to version 0.7.3. This includes a rebuild of all dependent applications to address three low- severity security vulnerabilities in sequoia-wot: https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/77605b2f. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-ecfadb29a1 2026-06-05 04:07:33.980011+00:00 -------------------------------------------------------------------------------- Name : rust-sequoia-octopus-librnp Product : Fedora 43 Version : 1.11.1 Release : 7.fc43 URL : https://crates.io/crates/sequoia-octopus-librnp Summary : Reimplementation of RNP's interface using Sequoia for use with Thunderbird Description : Reimplementation of RNP's interface using Sequoia for use with Thunderbird. -------------------------------------------------------------------------------- Update Information: Update the sequoia-wot crate to version 0.15.2. Update the sequoia-keystore crate to version 0.7.3. This includes a rebuild of all dependent applications to address three low- severity security vulnerabilities in sequoia-wot: https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/77605b2f https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/81210321 https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/dd2ffb50 -------------------------------------------------------------------------------- ChangeLog: * Wed May 27 2026 Fabio Valentini - 1.11.1-7 - Bump sequoia-wot dependency from 0.14 to 0.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2356514 - Package NEWS https://bugzilla.redhat.com/show_bug.cgi?id=2356514 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ecfadb29a1' at the command line. For moreinformation, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Stay updated on low-severity vulnerabilities for sequoia-octopus-librnp in Fedora 43 with this essential advisory.. sequoia-wot security updates, Fedora 43 vulnerabilities, rust-sequoia-octopus-librnp. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 Low Fedora
89

Fedora 43 rust-sequoia-chameleon-gnupg Low Security Update 2026-ecfadb29a1

Update the sequoia-wot crate to version 0.15.2. Update the sequoia-keystore crate to version 0.7.3. This includes a rebuild of all dependent applications to address three low- severity security vulnerabilities in sequoia-wot: https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/77605b2f. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-ecfadb29a1 2026-06-05 04:07:33.980011+00:00 -------------------------------------------------------------------------------- Name : rust-sequoia-chameleon-gnupg Product : Fedora 43 Version : 0.13.1 Release : 13.fc43 URL : https://crates.io/crates/sequoia-chameleon-gnupg Summary : Sequoia's reimplementation of the GnuPG interface Description : Sequoia's reimplementation of the GnuPG interface. -------------------------------------------------------------------------------- Update Information: Update the sequoia-wot crate to version 0.15.2. Update the sequoia-keystore crate to version 0.7.3. This includes a rebuild of all dependent applications to address three low- severity security vulnerabilities in sequoia-wot: https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/77605b2f https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/81210321 https://gitlab.com/sequoia-pgp/sequoia-wot/-/commit/dd2ffb50 -------------------------------------------------------------------------------- ChangeLog: * Wed May 27 2026 Fabio Valentini - 0.13.1-13 - Bump sequoia-wot dependency from 0.14 to 0.15 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2356514 - Package NEWS https://bugzilla.redhat.com/show_bug.cgi?id=2356514 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-ecfadb29a1' at the command line. For more information, refer to the dnf documentationavailable at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Address low-severity security flaws in rust-sequoia-chameleon-gnupg with updated crates for Fedora 43.. Fedora updates, rust-sequoia-chameleon-gnupg, security issues, sequoia-wot, low severity. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Jun 05, 2026 Low Fedora
89

Fedora 42: exiv2 Low Severity Issues Fixed in Advisory 2025-387e64c9fd

Exiv2 0.28.6 + patch to fix silent abi breakage Exiv2 v0.28.6 (Fixes two low severity CVEs). -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2025-387e64c9fd 2025-09-01 00:50:28.877933+00:00 -------------------------------------------------------------------------------- Name : exiv2 Product : Fedora 42 Version : 0.28.6 Release : 2.fc42 URL : https://exiv2.org/ Summary : Exif, IPTC and XMP metadata manipulation library Description : A command line utility to access image metadata, allowing one to: * print the Exif metadata of Jpeg images as summary info, interpreted values, or the plain data for each tag * print the Iptc metadata of Jpeg images * print the Jpeg comment of Jpeg images * set, add and delete Exif and Iptc metadata of Jpeg images * adjust the Exif timestamp (that's how it all started...) * rename Exif image files according to the Exif timestamp * extract, insert and delete Exif metadata (including thumbnails), Iptc metadata and Jpeg comments -------------------------------------------------------------------------------- Update Information: Exiv2 0.28.6 + patch to fix silent abi breakage Exiv2 v0.28.6 (Fixes two low severity CVEs) -------------------------------------------------------------------------------- ChangeLog: * Sun Aug 31 2025 Steve Cossette - 0.28.6-2 - Make methods non-virtual (Fix for a silent ABI change introduced in 0.28.6) * Fri Aug 29 2025 Steve Cossette - 0.28.6-1 - 0.28.6 * Wed Jul 23 2025 Fedora Release Engineering - 0.28.5-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2391817 - CVE-2025-54080 exiv2: Exiv2 Segmentation Faults [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2391817 [ 2 ] Bug #2391838 - CVE-2025-55304 exiv2: Exiv2 has quadratic performance in ICC profileparsing in JpegBase::readMetadata [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2391838 [ 3 ] Bug #2391902 - exiv2-0.28.6 is available https://bugzilla.redhat.com/show_bug.cgi?id=2391902 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-387e64c9fd' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue . ExifTool 12.50 addresses several minor flaws in CentOS 8, enhancing reliable image metadata processing.. exiv2 metadata fix Fedora low severity. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Sep 01, 2025 Low Fedora
100

SUSE 15 SP7: 2025:01534-1 low severity: augeas NULL pointer issue

* bsc#1239909 Cross-References: * CVE-2025-2588 . # Security update for augeas Announcement ID: SUSE-SU-2025:01534-1 Release Date: 2025-06-09T13:28:25Z Rating: low References: * bsc#1239909 Cross-References: * CVE-2025-2588 CVSS scores: * CVE-2025-2588 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2025-2588 ( NVD ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Affected Products: * Basesystem Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves one vulnerability can now be installed. ## Description: This update for augeas fixes the following issues: * CVE-2025-2588: Check for NULL pointers when calling re_case_expand in function fa_expand_nocase. (bsc#1239909) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-1534=1 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * augeas-lenses-1.14.1-150600.3.3.1 * libfa1-debuginfo-1.14.1-150600.3.3.1 * libaugeas0-1.14.1-150600.3.3.1 * augeas-debuginfo-1.14.1-150600.3.3.1 * augeas-1.14.1-150600.3.3.1 * libaugeas0-debuginfo-1.14.1-150600.3.3.1 * libfa1-1.14.1-150600.3.3.1 * augeas-debugsource-1.14.1-150600.3.3.1 * augeas-devel-1.14.1-150600.3.3.1 ## References: * https://www.suse.com/security/cve/CVE-2025-2588.html * https://bugzilla.suse.com/show_bug.cgi?id=1239909 . The recent Augeas update for SUSE resolves a minor vulnerability identified as CVE-2025-2588. Please adhere to the provided installation and update guidelines.. SUSE Linux, augeas, security update, patch instructions, software security. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Jun 09, 2025 Low SuSE
202

openSUSE Leap 15.4: 2025:01818-1 low: python-cryptography issue

An update that solves one vulnerability can now be installed.. # Security update for python-cryptography Announcement ID: SUSE-SU-2025:01818-1 Release Date: 2025-06-05T13:53:12Z Rating: low References: * bsc#1242631 Cross-References: * CVE-2025-3416 CVSS scores: * CVE-2025-3416 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-3416 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-3416 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-cryptography fixes the following issues: * CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` when `Some(...)` value passed as `properties` argument to either function (bsc#1242631). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-1818=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1818=1 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-cryptography-41.0.3-150400.16.22.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-cryptography-41.0.3-150400.16.22.1 ## References: * https://www.suse.com/security/cve/CVE-2025-3416.html * https://bugzilla.suse.com/show_bug.cgi?id=1242631 . Follow these precise steps to update the Python-Cryptography library on openSUSE Leap,addressing the low-severity vulnerability effectively and securely. python-cryptography, openSUSE patch, security update. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Jun 05, 2025 Low OpenSUSE
100

SUSE: 2025:01818-1 low: python-cryptography use-after-free issue

* bsc#1242631 Cross-References: * CVE-2025-3416 . # Security update for python-cryptography Announcement ID: SUSE-SU-2025:01818-1 Release Date: 2025-06-05T13:53:12Z Rating: low References: * bsc#1242631 Cross-References: * CVE-2025-3416 CVSS scores: * CVE-2025-3416 ( SUSE ): 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2025-3416 ( SUSE ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2025-3416 ( NVD ): 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: * openSUSE Leap 15.4 * Public Cloud Module 15-SP4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Manager Proxy 4.3 * SUSE Manager Retail Branch Server 4.3 * SUSE Manager Server 4.3 An update that solves one vulnerability can now be installed. ## Description: This update for python-cryptography fixes the following issues: * CVE-2025-3416: openssl: use-after-free in `Md::fetch` and `Cipher::fetch` when `Some(...)` value passed as `properties` argument to either function (bsc#1242631). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Public Cloud Module 15-SP4 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP4-2025-1818=1 * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1818=1 ## Package List: * Public Cloud Module 15-SP4 (aarch64 ppc64le s390x x86_64) * python311-cryptography-41.0.3-150400.16.22.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * python311-cryptography-41.0.3-150400.16.22.1 ## References: * https://www.suse.com/security/cve/CVE-2025-3416.html * https://bugzilla.suse.com/show_bug.cgi?id=1242631 . SUSE patch resolves CVE-2025-3416, categorized with a low severity level. Important installationguidance provided.. SUSE Linux, python-cryptography, security update, CVE-2025-3416, use-after-free. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Jun 05, 2025 Low SuSE
217

Oracle Linux 8: ELSA-2025-8419 low severity: python update

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2025-8419 http://linux.oracle.com/errata/ELSA-2025-8419.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable LinuxNetwork: x86_64: python36-3.6.8-39.module+el8.10.0+90473+c30184f9.x86_64.rpm python36-debug-3.6.8-39.module+el8.10.0+90473+c30184f9.x86_64.rpm python36-devel-3.6.8-39.module+el8.10.0+90473+c30184f9.x86_64.rpm python36-rpm-macros-3.6.8-39.module+el8.10.0+90473+c30184f9.noarch.rpm python3-bson-3.7.0-2.module+el8.10.0+90599+fd4ba14b.x86_64.rpm python3-distro-1.4.0-2.module+el8.10.0+90473+c30184f9.noarch.rpm python3-docs-3.6.7-2.module+el8.10.0+90473+c30184f9.noarch.rpm python3-docutils-0.14-12.module+el8.10.0+90473+c30184f9.noarch.rpm python3-nose-1.3.7-31.module+el8.10.0+90473+c30184f9.noarch.rpm python3-pygments-2.2.0-22.module+el8.10.0+90473+c30184f9.noarch.rpm python3-pymongo-3.7.0-2.module+el8.10.0+90599+fd4ba14b.x86_64.rpm python3-pymongo-gridfs-3.7.0-2.module+el8.10.0+90599+fd4ba14b.x86_64.rpm python3-PyMySQL-0.10.1-2.module+el8.10.0+90473+c30184f9.noarch.rpm python3-scipy-1.0.0-21.module+el8.10.0+90473+c30184f9.x86_64.rpm python3-sqlalchemy-1.3.2-3.module+el8.10.0+90473+c30184f9.x86_64.rpm python3-virtualenv-15.1.0-23.module+el8.10.0+90473+c30184f9.noarch.rpm python3-wheel-0.31.1-3.module+el8.10.0+90473+c30184f9.noarch.rpm python3-wheel-wheel-0.31.1-3.module+el8.10.0+90473+c30184f9.noarch.rpm python-nose-docs-1.3.7-31.module+el8.10.0+90473+c30184f9.noarch.rpm python-pymongo-doc-3.7.0-2.module+el8.10.0+90599+fd4ba14b.noarch.rpm python-sqlalchemy-doc-1.3.2-3.module+el8.10.0+90473+c30184f9.noarch.rpm python-virtualenv-doc-15.1.0-23.module+el8.10.0+90473+c30184f9.noarch.rpm aarch64: python36-3.6.8-39.module+el8.10.0+90473+c30184f9.aarch64.rpm python36-debug-3.6.8-39.module+el8.10.0+90473+c30184f9.aarch64.rpm python36-devel-3.6.8-39.module+el8.10.0+90473+c30184f9.aarch64.rpm python36-rpm-macros-3.6.8-39.module+el8.10.0+90473+c30184f9.noarch.rpm python3-bson-3.7.0-2.module+el8.10.0+90599+fd4ba14b.aarch64.rpm python3-distro-1.4.0-2.module+el8.10.0+90473+c30184f9.noarch.rpm python3-docs-3.6.7-2.module+el8.10.0+90473+c30184f9.noarch.rpm python3-docutils-0.14-12.module+el8.10.0+90473+c30184f9.noarch.rpm python3-nose-1.3.7-31.module+el8.10.0+90473+c30184f9.noarch.rpm python3-pygments-2.2.0-22.module+el8.10.0+90473+c30184f9.noarch.rpm python3-pymongo-3.7.0-2.module+el8.10.0+90599+fd4ba14b.aarch64.rpm python3-pymongo-gridfs-3.7.0-2.module+el8.10.0+90599+fd4ba14b.aarch64.rpm python3-PyMySQL-0.10.1-2.module+el8.10.0+90473+c30184f9.noarch.rpm python3-scipy-1.0.0-21.module+el8.10.0+90473+c30184f9.aarch64.rpm python3-sqlalchemy-1.3.2-3.module+el8.10.0+90473+c30184f9.aarch64.rpm python3-virtualenv-15.1.0-23.module+el8.10.0+90473+c30184f9.noarch.rpm python3-wheel-0.31.1-3.module+el8.10.0+90473+c30184f9.noarch.rpm python3-wheel-wheel-0.31.1-3.module+el8.10.0+90473+c30184f9.noarch.rpm python-nose-docs-1.3.7-31.module+el8.10.0+90473+c30184f9.noarch.rpm python-pymongo-doc-3.7.0-2.module+el8.10.0+90599+fd4ba14b.noarch.rpm python-sqlalchemy-doc-1.3.2-3.module+el8.10.0+90473+c30184f9.noarch.rpm python-virtualenv-doc-15.1.0-23.module+el8.10.0+90473+c30184f9.noarch.rpm SRPMS: http://oss.oracle.com/ol8/SRPMS-updates//python36-3.6.8-39.module+el8.10.0+90473+c30184f9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//python-distro-1.4.0-2.module+el8.10.0+90473+c30184f9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//python-docs-3.6.7-2.module+el8.10.0+90473+c30184f9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//python-docutils-0.14-12.module+el8.10.0+90473+c30184f9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//python-nose-1.3.7-31.module+el8.10.0+90473+c30184f9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//python-pygments-2.2.0-22.module+el8.10.0+90473+c30184f9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//python-pymongo-3.7.0-2.module+el8.10.0+90599+fd4ba14b.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//python-PyMySQL-0.10.1-2.module+el8.10.0+90473+c30184f9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//python-sqlalchemy-1.3.2-3.module+el8.10.0+90473+c30184f9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//python-virtualenv-15.1.0-23.module+el8.10.0+90473+c30184f9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//python-wheel-0.31.1-3.module+el8.10.0+90473+c30184f9.src.rpm http://oss.oracle.com/ol8/SRPMS-updates//scipy-1.0.0-21.module+el8.10.0+90473+c30184f9.src.rpm Related CVEs: CVE-2024-5629 Description of changes: python36 python-distro python-docs python-docutils python-nose python-pygments python-pymongo [3.7.0-2] - Backport CVE-2024-5629 python-PyMySQL python-sqlalchemy python-virtualenv [15.1.0-23] - Security fix for CVE-2024-53899 Resolves: RHEL-68876 python-wheel scipy _______________________________________________ El-errata mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://oss.oracle.com/mailman/listinfo/el-errata . Critical updates for Python in Oracle Linux 8 address vulnerabilities CVE-2024-5629 and CVE-2024-53899, enhancing security and compliance for systems.. Oracle Linux 8, Python security fixes, software updates, low severity, security advisory. . Severity: Low. LinuxSecurity.com Team

Calendar%202 Jun 05, 2025 Low Oracle
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

Is continuous patching actually viable?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/156-is-continuous-patching-actually-viable?task=poll.vote&format=json
156
radio
0
[{"id":503,"title":"Delayed updates invite catastrophic breaches.","votes":1,"type":"x","order":1,"pct":50,"resources":[]},{"id":504,"title":"Automated fixes break production environments.","votes":1,"type":"x","order":2,"pct":50,"resources":[]},{"id":505,"title":"Manual approvals cannot keep pace.","votes":0,"type":"x","order":3,"pct":0,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200