medium5.3
CVE-2023-5625
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 …
Impact
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Openshift Container Platform For Arm64 | Version 4.12 |
| Redhat | Openshift Container Platform For Linuxone | Version 4.12 |
| Redhat | Openshift Container Platform For Power | Version 4.12 |
| Redhat | Openshift Container Platform Ibm Z Systems | Version 4.12 |
| Redhat | Openstack Platform | Version 17.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2023:6128
- https://access.redhat.com/errata/RHSA-2024:0188
- https://access.redhat.com/errata/RHSA-2024:0213
- https://access.redhat.com/security/cve/CVE-2023-5625
- https://bugzilla.redhat.com/show_bug.cgi?id=2244717
- https://access.redhat.com/errata/RHSA-2023:6128
- https://access.redhat.com/errata/RHSA-2024:0188
- https://access.redhat.com/errata/RHSA-2024:0213
- https://access.redhat.com/security/cve/CVE-2023-5625
- https://bugzilla.redhat.com/show_bug.cgi?id=2244717