Red Hat Security Advisory: RHUI 4.11 security, bugfix, and enhancement update

Fixed packages 22

Vulnerabilities 13

• Critical 9.8
  CVE-2024-42005

  Django SQL injection vulnerability

  An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg.

  python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  Aug 7, 2024
• High 7.5
  CVE-2024-1135

  HTTP Request Smuggling in benoitc/gunicorn

  Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints…

  benoitc benoitc/gunicorn reflex gunicorn Debian Ubuntu Wolfi PyPI
  Apr 16, 2024
• High 7.5
  CVE-2024-26130

  cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

  cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did n…

  pyca cryptography py3-cassandra-medusa kubeflow-pipelines Debian Ubuntu Wolfi PyPI
  Feb 21, 2024
• High 7.5
  CVE-2024-30251

  Denial of service when trying to parse malformed POST requests in aiohttp

  aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In affected versions an attacker can send a specially crafted POST (multipart/form-data) request. When the aiohttp server processes it, the server will enter an infinite loop and …

  aio-libs aiohttp kserve-storage-controller kserve-agent Debian Ubuntu Azure Linux Wolfi PyPI
  May 2, 2024
• High 7.5
  CVE-2024-39614 Public exploit EPSS 29%

  Django vulnerable to Denial of Service

  An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack when used with very long strings containing specific characters.

  python-django django python-django py3-django Debian Ubuntu Alpine Wolfi PyPI
  Jul 10, 2024
• High 7.5
  CVE-2024-41989

  Django memory consumption vulnerability

  An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent.

  python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  Aug 7, 2024
• High 7.5
  CVE-2024-41990

  Django vulnerable to a denial-of-service attack

  An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters.

  python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  Aug 7, 2024
• High 7.5
  CVE-2024-41991

  Django vulnerable to denial-of-service attack

  An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unico…

  python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  Aug 7, 2024
• High 7.5
  CVE-2024-4340

  Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

  Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

  kubeflow-pipelines-visualization-server sqlparse sqlparse sqlparse Debian Ubuntu Wolfi PyPI
  Apr 30, 2024
• Medium 6.3
  CVE-2024-7246

  HPACK table poisoning in gRPC C++, Python & Ruby

  It's possible for a gRPC client communicating with a HTTP/2 proxy to poison the HPACK table between the proxy and the backend such that other clients see failed requests. It's also possible to use this vulnerability to leak other clients HTTP header keys, but…

  Google gRPC grpc grpc Debian Ubuntu Azure Linux
  Aug 6, 2024
• Medium 6.1
  CVE-2024-27306

  aiohttp vulnerable to XSS on index pages for static file handling

  aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulnerability is fixed in 3.9.4. We have always recommended using a reverse proxy server (e.g. nginx) for …

  aio-libs aiohttp kserve-storage-controller py3-cassandra-medusa Debian Ubuntu Azure Linux Wolfi PyPI
  Apr 18, 2024
• Medium 5.6
  CVE-2024-35195

  Requests `Session` object does not verify requests after making first request with verify=False

  Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests `Session`, if the first request is made with `verify=False` to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification r…

  psf requests katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  May 20, 2024
• Medium 5.4
  CVE-2024-34064 Public exploit

  Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter

  Jinja is an extensible templating engine. The `xmlattr` filter in affected versions of Jinja accepts keys containing non-attribute characters. XML/HTML attributes cannot contain spaces, `/`, `>`, or `=`, as each would then be interpreted as starting a separat…

  pallets jinja nodejs kubeflow-pipelines-visualization-server Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  May 6, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/4/html/release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2269617
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2275280
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2275989
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278038
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278710
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2279476
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2282114
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2295938
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302433
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302434
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302435
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2302436
• article
  https://issues.redhat.com/browse/RHUI-429
• article
  https://issues.redhat.com/browse/RHUI-577
• article
  https://issues.redhat.com/browse/RHUI-617
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1335.json
• report
  https://access.redhat.com/security/cve/CVE-2024-1135
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-1135
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-1135
• advisory
  https://github.com/advisories/GHSA-w3h3-4rj7-4ph4
• article
  https://github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d
• article
  https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1
• report
  https://access.redhat.com/security/cve/CVE-2024-4340
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-4340
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-4340
• advisory
  https://github.com/advisories/GHSA-2m57-hf25-phgg
• report
  https://access.redhat.com/security/cve/CVE-2024-7246
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2303104
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-7246
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-7246
• article
  https://github.com/grpc/grpc/issues/36245
• report
  https://access.redhat.com/security/cve/CVE-2024-26130
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-26130
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-26130
• report
  https://access.redhat.com/security/cve/CVE-2024-27306
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-27306
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-27306