Skip to content
OpenAdvisories
High RHSA-2022:1264 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 13.0 (python-waitress) security update

Published Sep 13, 2024 · Updated Jul 3, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 13 openstack:13::el7 python-waitress 0:1.4.4-2.el7ost
Red Hat · OpenStack 13 openstack:13::el7 python2-waitress 0:1.4.4-2.el7ost

Vulnerabilities 1

  • High 7.5
    CVE-2022-24761

    HTTP Request Smuggling in waitress

    Waitress is a Web Server Gateway Interface server for Python 2 and 3. When using Waitress versions 2.1.0 and prior behind a proxy that does not properly validate the incoming HTTP request matches the RFC7230 standard, Waitress and the frontend proxy may disag…

    Pylons Waitress waitress waitress Debian Ubuntu Azure Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2065086
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1264.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-24761
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24761
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24761
  • article
    https://github.com/Pylons/waitress/security/advisories/GHSA-4f7p-27jc-3c36