Skip to content
OpenAdvisories
Medium RHSA-2024:1518 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.6 (python-twisted) security update

Published Sep 16, 2024 · Updated Jun 3, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.2::el8 python-twisted 0:16.4.1-21.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 python-twisted-debugsource 0:16.4.1-21.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 python3-twisted 0:16.4.1-21.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 python3-twisted-debuginfo 0:16.4.1-21.el8ost

Vulnerabilities 1

  • Medium 5.3
    CVE-2023-46137

    twisted.web has disordered HTTP pipeline response

    Twisted is an event-based framework for internet applications. Prior to version 23.10.0rc1, when sending multiple HTTP requests in one TCP packet, twisted.web will process the requests asynchronously without guaranteeing the response order. If one of the endp…

    twisted twisted twisted twisted Debian Ubuntu Azure Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2246264
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1518.json
  • report
    https://access.redhat.com/security/cve/CVE-2023-46137
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2023-46137
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2023-46137