RHSA-2023:4282HighCVSS 7.5
Red Hat Security Advisory: Red Hat Virtualization Host 4.4.z SP 1 security update
🔗 CVE IDs covered (1)
📋 Description
CVE-2023-24329 — python: urllib.parse url blocklisting bypass
🎯 Affected products8
- RHEL 8-based RHEV-H for RHEV 4 (build requirements)
- Red Hat Virtualization 4 Hypervisor for RHEL 8
- redhat-release-virtualization-host-0:4.5.3-8.el8ev.src as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
- redhat-release-virtualization-host-0:4.5.3-8.el8ev.x86_64 as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
- redhat-release-virtualization-host-content-0:4.5.3-8.el8ev.x86_64 as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
- redhat-virtualization-host-0:4.5.3-202307191258_8.6.src as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8
- redhat-virtualization-host-image-update-0:4.5.3-202307191258_8.6.x86_64 as a component of Red Hat Virtualization 4 Hypervisor for RHEL 8
- redhat-virtualization-host-image-update-placeholder-0:4.5.3-8.el8ev.noarch as a component of RHEL 8-based RHEV-H for RHEV 4 (build requirements)
✅ Remediation
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/2974891
🔗 References (5)
- selfhttps://access.redhat.com/errata/RHSA-2023:4282
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2173917
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2212762
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4282.json