Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-waitress) security update
Two security vulnerabilities were identified in python-waitress, a pure-Python WSGI server used in Red Hat OpenStack Platform 17.1. The first vulnerability (CVE-2024-49768) involves a race condition in HTTP pipelining when processing an invalid first request. The second vulnerability (CVE-2024-49769) is a denial of service issue that can cause high CPU usage and resource exhaustion. Red Hat has released an important security update addressing these issues for Red Hat OpenStack Platform 17.1 on RHEL 8 x86_64.
AI Analysis
Technical Summary
Red Hat OpenStack Platform 17.1 includes python-waitress, a pure-Python WSGI server. Two vulnerabilities were fixed: CVE-2024-49768, a race condition in HTTP pipelining with an invalid first request, and CVE-2024-49769, a denial of service vulnerability causing high CPU usage and resource exhaustion. These issues could impact request processing and system resource availability. Red Hat has issued an important security advisory (RHSA-2025:1192) with updated python-waitress packages to remediate these vulnerabilities.
Potential Impact
The race condition vulnerability (CVE-2024-49768) could lead to improper request processing under certain HTTP pipelining conditions, potentially affecting service reliability. The denial of service vulnerability (CVE-2024-49769) can cause excessive CPU consumption and resource exhaustion, degrading system performance or causing service outages. Both vulnerabilities affect Red Hat OpenStack Platform 17.1 deployments using python-waitress on RHEL 8 x86_64.
Mitigation Recommendations
Red Hat has released updated python-waitress packages for Red Hat OpenStack Platform 17.1 on RHEL 8 x86_64 that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2025:1192 and the related article at https://access.redhat.com/articles/11258. No alternative mitigations or workarounds are indicated. Patch status is confirmed as available.
Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-waitress) security update
Description
Two security vulnerabilities were identified in python-waitress, a pure-Python WSGI server used in Red Hat OpenStack Platform 17.1. The first vulnerability (CVE-2024-49768) involves a race condition in HTTP pipelining when processing an invalid first request. The second vulnerability (CVE-2024-49769) is a denial of service issue that can cause high CPU usage and resource exhaustion. Red Hat has released an important security update addressing these issues for Red Hat OpenStack Platform 17.1 on RHEL 8 x86_64.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat OpenStack Platform 17.1 includes python-waitress, a pure-Python WSGI server. Two vulnerabilities were fixed: CVE-2024-49768, a race condition in HTTP pipelining with an invalid first request, and CVE-2024-49769, a denial of service vulnerability causing high CPU usage and resource exhaustion. These issues could impact request processing and system resource availability. Red Hat has issued an important security advisory (RHSA-2025:1192) with updated python-waitress packages to remediate these vulnerabilities.
Potential Impact
The race condition vulnerability (CVE-2024-49768) could lead to improper request processing under certain HTTP pipelining conditions, potentially affecting service reliability. The denial of service vulnerability (CVE-2024-49769) can cause excessive CPU consumption and resource exhaustion, degrading system performance or causing service outages. Both vulnerabilities affect Red Hat OpenStack Platform 17.1 deployments using python-waitress on RHEL 8 x86_64.
Mitigation Recommendations
Red Hat has released updated python-waitress packages for Red Hat OpenStack Platform 17.1 on RHEL 8 x86_64 that address these vulnerabilities. Users should apply the security update as described in Red Hat advisory RHSA-2025:1192 and the related article at https://access.redhat.com/articles/11258. No alternative mitigations or workarounds are indicated. Patch status is confirmed as available.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:1192
- Cve Count
- 2
- Additional Cves
- ["CVE-2024-49769"]
- Cvss Version
- null
Threat ID: 6a483cba27e9c79719d82ab5
Added to database: 07/03/2026, 22:50:34 UTC
Last enriched: 07/03/2026, 23:04:47 UTC
Last updated: 07/04/2026, 00:51:10 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.