Red Hat Security AdvisoryRHSA-2024:7987
Satellite 6.15.4 Security Update
Released 2024-10-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 6.15 for RHEL 8 python-cryptography-42.0.8-1.el8pc, python-django-4.2.15-1.el8pc, python-gunicorn-22.0.0-1.el8pc +5
Fixes 4 records
Priority MEDIUM 53
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01952 · Published 2024-06-05 · Partial fix · 1.21.11, 1.22.4
Priority MEDIUM 46
Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02996 · Published 2024-04-16 · Partial fix · 22.0.0 CWE-444
Priority MEDIUM 41
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00954 · Published 2024-08-07 · Partial fix · 5.0.8, 4.2.15 CWE-130
Priority MEDIUM 40
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00831 · Published 2024-02-21 · Fixed in 42.0.4 CWE-476
