Skip to content
OpenAdvisories
Medium RHSA-2024:6827 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.16.14 security update

Published Oct 2, 2024 · Updated Aug 19, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Openshift Ironic 4 openshift_ironic:4.16::el9 python-webob 0:1.8.8-2.el9
Red Hat · Openshift Ironic 4 openshift_ironic:4.16::el9 python3-webob 0:1.8.8-2.el9

Vulnerabilities 1

  • Medium 6.1
    CVE-2024-42353

    WebOb's location header normalization during redirect leads to open redirect

    WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urlparse, and joining it to the base URL. …

    Pylons webob python-webob python-webob Debian Ubuntu Azure Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6827.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-42353
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2305004
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-42353
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-42353
  • article
    https://github.com/Pylons/webob
  • article
    https://github.com/Pylons/webob/commit/f689bcf4f0a1f64f1735b1d5069aef5be6974b5b
  • article
    https://github.com/Pylons/webob/security/advisories/GHSA-mg3v-6m49-jhp3