Fixed packages 76
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8 enterprise_linux:8::appstream | mod_wsgi | 0:4.7.1-7.module+el8.10.0+23075+0aa18782.1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | numpy | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | numpy-debugsource | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-cffi | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-cffi-debugsource | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-chardet | 0:3.0.4-19.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-cryptography | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-cryptography-debugsource | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-idna | 0:2.10-4.module+el8.10.0+21815+bb024982 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-lxml | 0:4.6.5-1.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-lxml-debugsource | 0:4.6.5-1.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-ply | 0:3.11-10.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psutil | 0:5.8.0-4.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psutil-debugsource | 0:5.8.0-4.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psycopg2 | 0:2.8.6-3.module+el8.10.0+21142+453d2b75 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-psycopg2-debugsource | 0:2.8.6-3.module+el8.10.0+21142+453d2b75 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pycparser | 0:2.20-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-PyMySQL | 0:0.10.1-2.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-pysocks | 0:1.7.1-4.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-requests | 0:2.25.0-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-toml | 0:0.10.1-5.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-urllib3 | 0:1.25.10-5.module+el8.10.0+20443+f0a692fe |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python-wheel | 1:0.35.1-4.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39 | 0:3.9.20-1.module+el8.10.0+22342+478c159e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-cffi | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-cffi-debuginfo | 0:1.14.3-2.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-chardet | 0:3.0.4-19.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-cryptography | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-cryptography-debuginfo | 0:3.3.1-3.module+el8.10.0+21271+eccd1d86 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-debuginfo | 0:3.9.20-1.module+el8.10.0+22342+478c159e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-debugsource | 0:3.9.20-1.module+el8.10.0+22342+478c159e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-devel | 0:3.9.20-1.module+el8.10.0+22342+478c159e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-idle | 0:3.9.20-1.module+el8.10.0+22342+478c159e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-idna | 0:2.10-4.module+el8.10.0+21815+bb024982 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-libs | 0:3.9.20-1.module+el8.10.0+22342+478c159e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-lxml | 0:4.6.5-1.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-lxml-debuginfo | 0:4.6.5-1.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-mod_wsgi | 0:4.7.1-7.module+el8.10.0+23075+0aa18782.1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-numpy | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-numpy-debuginfo | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-numpy-doc | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-numpy-f2py | 0:1.19.4-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-pip | 0:20.2.4-9.module+el8.10.0+21329+8d76b841 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-pip-wheel | 0:20.2.4-9.module+el8.10.0+21329+8d76b841 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-ply | 0:3.11-10.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-psutil | 0:5.8.0-4.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-psutil-debuginfo | 0:5.8.0-4.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-psycopg2 | 0:2.8.6-3.module+el8.10.0+21142+453d2b75 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-psycopg2-debuginfo | 0:2.8.6-3.module+el8.10.0+21142+453d2b75 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-psycopg2-doc | 0:2.8.6-3.module+el8.10.0+21142+453d2b75 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-psycopg2-tests | 0:2.8.6-3.module+el8.10.0+21142+453d2b75 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-pycparser | 0:2.20-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-PyMySQL | 0:0.10.1-2.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-pysocks | 0:1.7.1-4.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-pyyaml | 0:5.4.1-1.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-pyyaml-debuginfo | 0:5.4.1-1.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-requests | 0:2.25.0-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-rpm-macros | 0:3.9.20-1.module+el8.10.0+22342+478c159e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-scipy | 0:1.5.4-5.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-scipy-debuginfo | 0:1.5.4-5.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-setuptools | 0:50.3.2-6.module+el8.10.0+22183+c898c0c1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-setuptools-wheel | 0:50.3.2-6.module+el8.10.0+22183+c898c0c1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-six | 0:1.15.0-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-test | 0:3.9.20-1.module+el8.10.0+22342+478c159e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-tkinter | 0:3.9.20-1.module+el8.10.0+22342+478c159e |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-toml | 0:0.10.1-5.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-urllib3 | 0:1.25.10-5.module+el8.10.0+20443+f0a692fe |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-wheel | 1:0.35.1-4.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python39-wheel-wheel | 1:0.35.1-4.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3x-pip | 0:20.2.4-9.module+el8.10.0+21329+8d76b841 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3x-setuptools | 0:50.3.2-6.module+el8.10.0+22183+c898c0c1 |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | python3x-six | 0:1.15.0-3.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | PyYAML | 0:5.4.1-1.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | PyYAML-debugsource | 0:5.4.1-1.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | scipy | 0:1.5.4-5.module+el8.9.0+19644+d68f775d |
| Red Hat · RHEL 8 enterprise_linux:8::appstream | scipy-debugsource | 0:1.5.4-5.module+el8.9.0+19644+d68f775d |
Vulnerabilities 1
-
High 7.5
Incorrect header handling in mod-wsgi
A vulnerability was found in mod_wsgi. The X-Client-IP header is not removed from a request from an untrusted proxy, allowing an attacker to pass the X-Client-IP header to the target WSGI application because the condition to remove it is missing.
References
-
article
https://access.redhat.com/security/updates/classification/#moderate
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2100563
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4791.json
-
report
https://access.redhat.com/security/cve/CVE-2022-2255
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-2255
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-2255
-
article
https://modwsgi.readthedocs.io/en/latest/release-notes/version-4.9.3.html