What’s Vulnerable › Vulnerabilities

CVE-2023-5625: Python-eventlet: patch regression for cve-2021-21419 in some red hat builds

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-01 · updated 2026-06-17
• Weakness: CWE-770

Description

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.

Affected products

• RedHat Openshift Container Platform For Arm64: 4.12
• RedHat Openshift Container Platform For Linuxone: 4.12
• RedHat Openshift Container Platform For Power: 4.12
• RedHat Openshift Container Platform Ibm Z Systems: 4.12
• nova_libvirt container provided by the Red Hat OpenStack Platform: 17.1

References

• https://access.redhat.com/errata/RHSA-2023:6128
• https://access.redhat.com/errata/RHSA-2024:0188
• https://access.redhat.com/errata/RHSA-2024:0213
• https://access.redhat.com/security/cve/CVE-2023-5625
• https://bugzilla.redhat.com/show_bug.cgi?id=2244717
• https://access.redhat.com/errata/RHSA-2023:6128
• https://access.redhat.com/errata/RHSA-2024:0188
• https://access.redhat.com/errata/RHSA-2024:0213
• https://access.redhat.com/security/cve/CVE-2023-5625
• https://bugzilla.redhat.com/show_bug.cgi?id=2244717

Get alerted when CVE-2023-5625 or the next vulnerability affects your stack