Skip to content
OpenAdvisories
Critical RHSA-2023:4591 2 CVEs

Red Hat Security Advisory: RHUI 4.5.0 release - Security, Bug Fixes, and Enhancements

Published Sep 16, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Rhui 4 rhui:4::el8 python-django 0:3.2.19-1.0.1.el8ui
Red Hat · Rhui 4 rhui:4::el8 python-sqlparse 0:0.4.4-1.0.1.el8ui
Red Hat · Rhui 4 rhui:4::el8 python39-django 0:3.2.19-1.0.1.el8ui
Red Hat · Rhui 4 rhui:4::el8 python39-sqlparse 0:0.4.4-1.0.1.el8ui

Vulnerabilities 2

  • Critical 9.8
    CVE-2023-31047

    Django bypasses validation when using one form field to upload multiple files

    In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last u…

    python-django django python-django Debian Ubuntu PyPI
  • Medium 5.5
    CVE-2023-30608

    Parser contains an inefficient regular expression in sqlparse

    sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability m…

    andialbrecht sqlparse sqlparse sqlparse Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1957871
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2079391
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2187903
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2192565
  • article
    https://issues.redhat.com/browse/RHUI-217
  • article
    https://issues.redhat.com/browse/RHUI-263
  • article
    https://issues.redhat.com/browse/RHUI-356
  • article
    https://issues.redhat.com/browse/RHUI-395
  • article
    https://issues.redhat.com/browse/RHUI-424
  • article
    https://issues.redhat.com/browse/RHUI-430
  • article
    https://issues.redhat.com/browse/RHUI-75
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4591.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-30608
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-30608
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-30608
  • article
    https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-rrm6-wvj7-cwh2
  • report
    https://access.redhat.com/security/cve/CVE-2023-31047
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-31047
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-31047
  • article
    https://www.djangoproject.com/weblog/2023/may/03/security-releases/