RHSA-2024:5662MediumCVSS 7.5
Red Hat Security Advisory: Satellite 6.15.3 Security Update
🔗 CVE IDs covered (5)
📋 Description
CVE-2024-24680 — Django: denial-of-service in intcomma template filter
CVE-2024-27306 — aiohttp: XSS on index pages for static file handling
CVE-2024-27351 — python-django: Potential regular expression denial-of-service in django.utils.text.Truncator.words()
CVE-2024-28219 — python-pillow: buffer overflow in _imagingcms.c
CVE-2024-34064 — jinja2: accepts keys containing non-attribute characters
🔗 References (18)
- selfhttps://access.redhat.com/errata/RHSA-2024:5662
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2261856
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2266045
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2272563
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2275989
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2279476
- externalhttps://issues.redhat.com/browse/SAT-25063
- externalhttps://issues.redhat.com/browse/SAT-25522
- externalhttps://issues.redhat.com/browse/SAT-26450
- externalhttps://issues.redhat.com/browse/SAT-26452
- externalhttps://issues.redhat.com/browse/SAT-26453
- externalhttps://issues.redhat.com/browse/SAT-26454
- externalhttps://issues.redhat.com/browse/SAT-26456
- externalhttps://issues.redhat.com/browse/SAT-26458
- externalhttps://issues.redhat.com/browse/SAT-26459
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5662.json