Moderate CPU DoS Vulnerability in Rocky Linux Python27 Disclosed

A moderate CPU Denial of Service (DoS) vulnerability has been identified in Python27 affecting Rocky Linux 8. The vulnerability arises from multiple Python modules, including python-backports-ssl_match_hostname and python-ipaddress. Users are advised to update their systems to mitigate potential exploitation. The vulnerability has been assigned a Common Vulnerability Scoring System (CVSS) base score, indicating its severity. Affected modules include python-lxml, python-sqlalchemy, and others. The update is crucial for maintaining system integrity and performance. The vulnerability has not been reported as actively exploited in the wild. Users should apply the updates as soon as possible to ensure security. Detailed CVEs and severity ratings are available from the CVE list.

Key Points: • A moderate CPU DoS vulnerability affects multiple Python modules in Rocky Linux 8. • Users are urged to apply updates to mitigate potential exploitation risks. • The vulnerability has a CVSS base score indicating its severity.