RHSA-2024:4054HighCVSS 7.5
Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-gunicorn) security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2024-1135 — python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers
🎯 Affected products3
- Red Hat OpenStack Platform 16.2
- python-gunicorn-0:19.9.0-11.el8ost.src as a component of Red Hat OpenStack Platform 16.2
- python3-gunicorn-0:19.9.0-11.el8ost.noarch as a component of Red Hat OpenStack Platform 16.2
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.