RHSA-2024:9975HighCVSS 7.5

Red Hat Security Advisory: RHOSP 17.1.4 (python-werkzeug) security update

Published
November 21, 2024
Last Modified
November 1, 2026

🔗 CVE IDs covered (1)

CVE-2024-34069 →

📋 Description

CVE-2024-34069 — python-werkzeug: user may execute code on a developer's machine

🎯 Affected products3

  • Red Hat OpenStack Platform 17.1
  • python-werkzeug-0:2.0.1-9.el8ost.src as a component of Red Hat OpenStack Platform 17.1
  • python3-werkzeug-0:2.0.1-9.el8ost.noarch as a component of Red Hat OpenStack Platform 17.1

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.

🔗 References (4)