Red Hat Security Advisory: RHUI 4.1.1 release - Security Fixes and Enhancement Update
An updated version of Red Hat Update Infrastructure (RHUI) is now available. RHUI 4.1.1 introduces important enhancements and fixes several security bugs.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-28347US | critical9.8 | — | ||
A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with d… | ||||
| CVE-2022-28346US | critical9.8 | Exploit | ||
An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2022:5602self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 1636435external
- 1890389external
- 2010343external
- 2072447external
- 2072459external
- 2079376external
remediations (5)
- Fixedpython-django-0:3.2.13-2.el8ui.src as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions on how to apply this update, see: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4/html/migrating_red_hat_update_infrastructure/assembly_upgrading-red-hat-update-infrastructure_migrating-red-hat-update-infrastructure For other information, consult the product documentation at: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4
https://access.redhat.com/errata/RHSA-2022:5602 - Fixedpython-django-0:3.2.13-2.el8ui.src as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions on how to apply this update, see: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4/html/migrating_red_hat_update_infrastructure/assembly_upgrading-red-hat-update-infrastructure_migrating-red-hat-update-infrastructure For other information, consult the product documentation at: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4
https://access.redhat.com/errata/RHSA-2022:5602 - Fixedpython-pulpcore-0:3.17.6-3.el8ui.src as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions on how to apply this update, see: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4/html/migrating_red_hat_update_infrastructure/assembly_upgrading-red-hat-update-infrastructure_migrating-red-hat-update-infrastructure For other information, consult the product documentation at: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4
https://access.redhat.com/errata/RHSA-2022:5602 - Fixedpython-pulpcore-0:3.17.6-3.el8ui.src as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions on how to apply this update, see: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4/html/migrating_red_hat_update_infrastructure/assembly_upgrading-red-hat-update-infrastructure_migrating-red-hat-update-infrastructure For other information, consult the product documentation at: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4
https://access.redhat.com/errata/RHSA-2022:5602 - Fixedpython38-pulpcore-0:3.17.6-3.el8ui.noarch as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions on how to apply this update, see: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4/html/migrating_red_hat_update_infrastructure/assembly_upgrading-red-hat-update-infrastructure_migrating-red-hat-update-infrastructure For other information, consult the product documentation at: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4
https://access.redhat.com/errata/RHSA-2022:5602
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan