Red Hat Security Advisory: Satellite 6.15.4 Security Update
Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers (CVE-2024-1135) * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790) * python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override (CVE-2024-26130) * python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget (CVE-2024-41991) Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.
AI Analysis
Technical Summary
Red Hat OpenShift Container Platform 4.12.59 and Red Hat OpenStack Platform 17.1 include a security fix for CVE-2024-1135, an HTTP Request Smuggling vulnerability in python-gunicorn caused by improper validation of Transfer-Encoding headers. This vulnerability is rated as important by Red Hat Product Security. The advisory provides updated container images and packages to remediate the issue. Users are advised to upgrade using the OpenShift CLI or web console following Red Hat's upgrade documentation. Additional related CVEs are noted but not detailed in this advisory.
Potential Impact
The vulnerability allows HTTP Request Smuggling attacks due to improper validation of Transfer-Encoding headers in python-gunicorn. This could potentially lead to request desynchronization issues affecting HTTP traffic handling. The advisory rates the security impact as important (medium severity). No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated python-gunicorn packages and container images that fix the vulnerability. Users of Red Hat OpenShift Container Platform 4.12 and Red Hat OpenStack Platform 17.1 should upgrade to these updated versions as soon as they are available via the appropriate release channels. Upgrade instructions are provided by Red Hat and can be performed using the OpenShift CLI or web console. Patch status is confirmed by the vendor advisory. No additional mitigations are specified.
Red Hat Security Advisory: Satellite 6.15.4 Security Update
Description
Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers (CVE-2024-1135) * golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790) * python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override (CVE-2024-26130) * python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget (CVE-2024-41991) Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat OpenShift Container Platform 4.12.59 and Red Hat OpenStack Platform 17.1 include a security fix for CVE-2024-1135, an HTTP Request Smuggling vulnerability in python-gunicorn caused by improper validation of Transfer-Encoding headers. This vulnerability is rated as important by Red Hat Product Security. The advisory provides updated container images and packages to remediate the issue. Users are advised to upgrade using the OpenShift CLI or web console following Red Hat's upgrade documentation. Additional related CVEs are noted but not detailed in this advisory.
Potential Impact
The vulnerability allows HTTP Request Smuggling attacks due to improper validation of Transfer-Encoding headers in python-gunicorn. This could potentially lead to request desynchronization issues affecting HTTP traffic handling. The advisory rates the security impact as important (medium severity). No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released updated python-gunicorn packages and container images that fix the vulnerability. Users of Red Hat OpenShift Container Platform 4.12 and Red Hat OpenStack Platform 17.1 should upgrade to these updated versions as soon as they are available via the appropriate release channels. Upgrade instructions are provided by Red Hat and can be performed using the OpenShift CLI or web console. Patch status is confirmed by the vendor advisory. No additional mitigations are specified.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:7987
- Cve Count
- 4
- Additional Cves
- ["CVE-2024-24790","CVE-2024-26130","CVE-2024-41991"]
- Cvss Version
- null
Threat ID: 6a1df669e29bf47b50461de0
Added to database: 06/01/2026, 21:15:21 UTC
Last enriched: 07/04/2026, 01:34:44 UTC
Last updated: 07/25/2026, 08:51:57 UTC
Views: 91
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.