What is RHSA-2023:0833?

RHSA-2023:0833 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: python3 security update

Which CVE IDs does RHSA-2023:0833 cover?

RHSA-2023:0833 covers the following CVE IDs: CVE-2020-10735, CVE-2021-28861, CVE-2022-45061. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2023:0833?

RHSA-2023:0833 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

RHSA-2023:0833MediumCVSS 7.5

Red Hat Security Advisory: python3 security update

Vendor

Red Hat Product Security

Published

February 21, 2023

Last Modified

June 26, 2026

🔗 CVE IDs covered (3)

CVE-2020-10735 →CVE-2021-28861 →CVE-2022-45061 →

📋 Description

CVE-2020-10735 — python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS CVE-2021-28861 — python: open redirection vulnerability in lib/http/server.py may lead to information disclosure CVE-2022-45061 — python: CPU denial of service via inefficient IDNA decoder

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2023:0833
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1834423
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2120642
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2144072
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0833.json