Red Hat Security AdvisoryRHSA-2024:5662
Satellite 6.15.3 Security Update
Released 2024-08-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 6.15 for RHEL 8 python-aiohttp-3.9.4-1.el8pc, python-django-4.2.14-1.el8pc, python-jinja2-3.1.4-1.el8pc +5
Fixes 5 records
Priority MEDIUM 42
An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01606 · Published 2024-02-06 · Partial fix · 3.2.24, 4.2.10 +1 CWE-770
Priority LOW 34
In _imagingcms.c in Pillow before 10.3.0, a buffer overflow exists because strcpy is used instead of strncpy.
CVSS 3.1MEDIUM 6.7· Local · Low privileges · User interaction · EPSS 0.00997 · Published 2024-04-03 · Partial fix · 10.3.0 CWE-680
Priority LOW 28
In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a potential regular expressi…
CVSS 3.1MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.01854 · Published 2024-03-15 · Partial fix · 3.2.25, 4.2.11 +1 CWE-1333
Priority LOW 28
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00666 · Published 2024-04-18 · Partial fix · 3.9.4 CWE-79
Priority LOW 26
Jinja is an extensible templating engine.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00979 · Published 2024-05-06 · Partial fix · 3.1.4 CWE-79
THREATIST.IORead the docs