RHSA-2023:4591MediumCVSS 7.5

Red Hat Security Advisory: RHUI 4.5.0 release - Security, Bug Fixes, and Enhancements

Published
August 9, 2023
Last Modified
August 6, 2026

🔗 CVE IDs covered (2)

CVE-2023-30608 →CVE-2023-31047 →

📋 Description

CVE-2023-30608 — sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) CVE-2023-31047 — python-django: Potential bypass of validation when uploading multiple files using one form field

🎯 Affected products10

  • RHUI 4 for RHEL 8
  • python-django-0:3.2.19-1.0.1.el8ui.src as a component of RHUI 4 for RHEL 8
  • python-sqlparse-0:0.4.4-1.0.1.el8ui.src as a component of RHUI 4 for RHEL 8
  • python39-django-0:3.2.19-1.0.1.el8ui.noarch as a component of RHUI 4 for RHEL 8
  • python39-sqlparse-0:0.4.4-1.0.1.el8ui.noarch as a component of RHUI 4 for RHEL 8
  • rhui-installer-0:4.5.0.1-1.el8ui.noarch as a component of RHUI 4 for RHEL 8
  • rhui-installer-0:4.5.0.1-1.el8ui.src as a component of RHUI 4 for RHEL 8
  • rhui-tools-0:4.5.0.5-1.el8ui.noarch as a component of RHUI 4 for RHEL 8
  • rhui-tools-0:4.5.0.5-1.el8ui.src as a component of RHUI 4 for RHEL 8
  • rhui-tools-libs-0:4.5.0.5-1.el8ui.noarch as a component of RHUI 4 for RHEL 8

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions on how to apply this update, see: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4/html/migrating_red_hat_update_infrastructure/assembly_upgrading-red-hat-update-infrastructure_migrating-red-hat-update-infrastructure For other information, see the product documentation: https://access.redhat.com/documentation/en-us/red_hat_update_infrastructure/4

🔗 References (14)