Red Hat Security Advisory: RHUI 4.4.0 release - Security Fixes, Bug Fixes, and Enhancements Update
An updated version of Red Hat Update Infrastructure (RHUI) is now available. RHUI 4.4 fixes several security and operational bugs, and introduces multiple new features.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-24580US | high7.5 | — | ||
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of p… | ||||
| CVE-2023-23969US | high7.5 | — | ||
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a p… | ||||
| CVE-2022-40899US | high7.5 | — | ||
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server. | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2023:2101self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 2036408external
- 2084950external
- 2165444external
- 2165866external
- 2166457external
- 2169402external
remediations (6)
- Fixedpython-django-0:3.2.18-1.0.1.el8ui.src as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101 - Fixedpython-django-0:3.2.18-1.0.1.el8ui.src as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101 - Fixedpython-future-0:0.18.3-1.0.1.el8ui.src as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101 - Fixedpython39-django-0:3.2.18-1.0.1.el8ui.noarch as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101 - Fixedpython39-django-0:3.2.18-1.0.1.el8ui.noarch as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101 - Fixedpython39-future-0:0.18.3-1.0.1.el8ui.noarch as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan