Skip to content
OpenAdvisories
Medium RHSA-2024:9983 1 CVE

Red Hat Security Advisory: RHOSP 17.1.4 (python-webob) security update

Published Nov 25, 2024 · Updated Aug 19, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 17 openstack:17.1::el9 python-webob 0:1.8.7-2.1.el9ost
Red Hat · OpenStack 17 openstack:17.1::el9 python3-webob 0:1.8.7-2.1.el9ost

Vulnerabilities 1

  • Medium 6.1
    CVE-2024-42353

    WebOb's location header normalization during redirect leads to open redirect

    WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by parsing the URL that the user is to be redirected to with Python's urlparse, and joining it to the base URL. …

    Pylons webob python-webob python-webob Debian Ubuntu Azure Linux PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9983.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-42353
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2305004
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-42353
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-42353
  • article
    https://github.com/Pylons/webob
  • article
    https://github.com/Pylons/webob/commit/f689bcf4f0a1f64f1735b1d5069aef5be6974b5b
  • article
    https://github.com/Pylons/webob/security/advisories/GHSA-mg3v-6m49-jhp3