Summary
mod_wsgi
[4.7.1-7.1]
- Resolves: RHEL-87514 - CVE-2022-2255 python39:3.9/mod_wsgi: Trusted
Proxy Headers Removing Bypass
numpy
python39
python3x-pip
python3x-setuptools
python3x-six
python-cffi
python-chardet
python-cryptography
python-idna
python-lxml
python-ply
python-psutil
python-psycopg2
python-pycparser
python-PyMySQL
python-pysocks
python-requests
python-toml
python-urllib3
python-wheel
PyYAML
scipy
Fixed packages 36
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python39 | 0:3.9.20-1.module+el8.10.0+90419+54594e05 |
| Oracle Linux · 8 | python39-cffi | 0:1.14.3-2.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-chardet | 0:3.0.4-19.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-cryptography | 0:3.3.1-3.0.1.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-devel | 0:3.9.20-1.module+el8.10.0+90419+54594e05 |
| Oracle Linux · 8 | python39-idle | 0:3.9.20-1.module+el8.10.0+90419+54594e05 |
| Oracle Linux · 8 | python39-idna | 0:2.10-4.module+el8.10.0+90341+71ca88f4 |
| Oracle Linux · 8 | python39-libs | 0:3.9.20-1.module+el8.10.0+90419+54594e05 |
| Oracle Linux · 8 | python39-lxml | 0:4.6.5-1.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-mod_wsgi | 0:4.7.1-7.module+el8.10.0+90570+e9e3ed00.1 |
| Oracle Linux · 8 | python39-numpy | 0:1.19.4-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-numpy-doc | 0:1.19.4-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-numpy-f2py | 0:1.19.4-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-pip | 0:20.2.4-9.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-pip-wheel | 0:20.2.4-9.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-ply | 0:3.11-10.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-psutil | 0:5.8.0-4.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-psycopg2 | 0:2.8.6-3.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-psycopg2-doc | 0:2.8.6-3.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-psycopg2-tests | 0:2.8.6-3.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-pycparser | 0:2.20-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-PyMySQL | 0:0.10.1-2.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-pysocks | 0:1.7.1-4.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-pyyaml | 0:5.4.1-1.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-requests | 0:2.25.0-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-rpm-macros | 0:3.9.20-1.module+el8.10.0+90419+54594e05 |
| Oracle Linux · 8 | python39-scipy | 0:1.5.4-5.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-setuptools | 0:50.3.2-6.module+el8.10.0+90395+b6c4aad1 |
| Oracle Linux · 8 | python39-setuptools-wheel | 0:50.3.2-6.module+el8.10.0+90395+b6c4aad1 |
| Oracle Linux · 8 | python39-six | 0:1.15.0-3.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-test | 0:3.9.20-1.module+el8.10.0+90419+54594e05 |
| Oracle Linux · 8 | python39-tkinter | 0:3.9.20-1.module+el8.10.0+90419+54594e05 |
| Oracle Linux · 8 | python39-toml | 0:0.10.1-5.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-urllib3 | 0:1.25.10-5.module+el8.10.0+90269+2fa22b99 |
| Oracle Linux · 8 | python39-wheel | 1:0.35.1-4.module+el8.9.0+90016+9c2d6573 |
| Oracle Linux · 8 | python39-wheel-wheel | 1:0.35.1-4.module+el8.9.0+90016+9c2d6573 |
Vulnerabilities 1
-
High 7.5
Incorrect header handling in mod-wsgi
A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.