Skip to content
OpenAdvisories
High RHSA-2022:1253 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-waitress) security update

Published Sep 13, 2024 · Updated Jul 3, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.2::el8 python-waitress 0:2.0.0-1.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 python3-waitress 0:2.0.0-1.el8ost

Vulnerabilities 1

  • High 7.5
    CVE-2022-24761

    HTTP Request Smuggling in waitress

    Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the RFC7230 standard, Waitress and the frontend proxy may disag…

    Pylons Waitress waitress waitress Debian Ubuntu Azure Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2065086
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1253.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-24761
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24761
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24761
  • article
    https://github.com/Pylons/waitress/security/advisories/GHSA-4f7p-27jc-3c36