Red Hat Security Advisory

RHSA-2022:5602

RHUI 4.1.1 release - Security Fixes and Enhancement Update

Released 2022-07-19 · Red Hat rating Important · View on Red Hat →

Fixed in

RHUI 4 for RHEL 8 python-django-3.2.13-2.el8ui, python-pulpcore-3.17.6-3.el8ui, python38-pulpcore-3.17.6-3.el8ui

TI-2022-11106 CVE-2022-28346 · GHSA-2gwj-7jmv-h26r

MEDIUM 60

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18661 Published 2022-04-12 Partial fix · 2.2.28, 3.2.13 +1 CWE-89

TI-2022-11107 CVE-2022-28347 · GHSA-w24h-v9qh-8gxj

MEDIUM 47

A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02943 Published 2022-04-12 Partial fix · 2.2.28, 3.2.13 +1 CWE-89