Red Hat Security Advisory: RHUI 4.4.0 release - Security Fixes, Bug Fixes, and Enhancements Update
An updated version of Red Hat Update Infrastructure (RHUI) is now available. RHUI 4.4 fixes several security and operational bugs, and introduces multiple new features.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-24580US | high7.5 | — | ||
An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of p… | ||||
| CVE-2023-23969US | high7.5 | — | ||
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a p… | ||||
| CVE-2022-40899US | high7.5 | — | ||
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2023:2101self
- https://access.redhat.com/security/updates/classification/#moderateexternal
- 2036408external
- 2084950external
- 2165444external
- 2165866external
- 2166457external
- 2169402external
Behebungen (6)
- Behobenpython-django-0:3.2.18-1.0.1.el8ui.src as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101 - Behobenpython-django-0:3.2.18-1.0.1.el8ui.src as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101 - Behobenpython-future-0:0.18.3-1.0.1.el8ui.src as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101 - Behobenpython39-django-0:3.2.18-1.0.1.el8ui.noarch as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101 - Behobenpython39-django-0:3.2.18-1.0.1.el8ui.noarch as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101 - Behobenpython39-future-0:0.18.3-1.0.1.el8ui.noarch as a component of RHUI 4 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:2101
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan