A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/errata/RHSA-2023:6128 | Patch Vendor Advisory |
| https://access.redhat.com/errata/RHSA-2024:0188 | |
| https://access.redhat.com/errata/RHSA-2024:0213 | |
| https://access.redhat.com/security/cve/CVE-2023-5625 | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2244717 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
|
History
01 Aug 2024, 13:45
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-400 |
16 Jan 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Nov 2023, 17:34
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:redhat:openshift_container_platform_for_arm64:4.12:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform_for_linuxone:4.12:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform_ibm_z_systems:4.12:*:*:*:*:*:*:* cpe:2.3:a:redhat:openshift_container_platform_for_power:4.12:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Redhat openshift Container Platform For Power
Redhat openshift Container Platform Ibm Z Systems Redhat openshift Container Platform For Linuxone Redhat Redhat openstack Platform Redhat enterprise Linux Redhat openshift Container Platform For Arm64 |
|
| References | (MISC) https://access.redhat.com/errata/RHSA-2023:6128 - Patch, Vendor Advisory | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2244717 - Issue Tracking, Vendor Advisory | |
| References | (MISC) https://access.redhat.com/security/cve/CVE-2023-5625 - Vendor Advisory |
01 Nov 2023, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-01 14:15
Updated : 2024-08-01 13:45
NVD link : CVE-2023-5625
Mitre link : CVE-2023-5625
CVE.ORG link : CVE-2023-5625
JSON object : View
Products Affected
redhat
- openshift_container_platform_for_power
- openshift_container_platform_ibm_z_systems
- openshift_container_platform_for_arm64
- openstack_platform
- enterprise_linux
- openshift_container_platform_for_linuxone
CWE