First published: Wed May 22 2024(Updated: )
Moderate: Red Hat OpenStack Platform 17.1 (python-urllib3) security update
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/python-urllib3 | <1.25.10-6.el8 | 1.25.10-6.el8 |
redhat/python3-urllib3 | <1.25.10-6.el8 | 1.25.10-6.el8 |
Red Hat OpenStack Director Deployment Tools | ||
Red Hat Enterprise Linux 8 | ||
Red Hat OpenStack Services on OpenShift |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2024:2734 is classified as moderate.
To fix RHSA-2024:2734, update the python-urllib3 and python3-urllib3 packages to version 1.25.10-6.el8.
RHSA-2024:2734 affects the Red Hat OpenStack Platform 17.1 and several associated products using the python-urllib3 package.
RHSA-2024:2734 addresses a vulnerability where the request body is not stripped after a 303 redirect, changing the request method to GET (CVE-2023-45803).
Yes, RHSA-2024:2734 is specific to the urllib3 module in Python.