OESA-2023-1768

    Dashboard / Vulnerabilities / OESA-2023-1768

    OESA-2023-1768

    Published: 27 Oct 2023Last Modified: 18 Aug 2026
    Upstream:
    CVE-2023-5625

    Summary: python-eventlet security update

    Details: Eventlet is a concurrent networking library for Python that allows you to change how you run your code, not how you write it. Security Fix(es): A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.(CVE-2023-5625)

    References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1768, https://nvd.nist.gov/vuln/detail/CVE-2023-5625

    Affected packages

    Package

    Name: python-eventlet

    Purl: pkg:rpm/openEuler/python-eventlet&distro=openEuler-20.03-LTS-SP3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -0.30.2-2.oe1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OESA-2023-1768 | CVE-DB