title: RHSA-2020:1454 - Security Advisory
body: <p>I am building a docker image for my Java application using rhel7:7.7 as base image. There is a high criticality issue found by JFrog Xray when scanning the image &quot;Red Hat Security Advisory: Satellite 6.7 release.&quot; <a href="https://access.redhat.com/errata/RHSA-2020:1454" rel="nofollow noreferrer">https://access.redhat.com/errata/RHSA-2020:1454</a></p>
  <p>There are 4 python components are reported having issues:</p>
  <ul>
  <li>python-chardet-3.0.4-10.el7ar.src.rpm</li>
  <li>python-dateutil-2.8.1-2.el7ar.src.rpm</li>
  <li>python-six-1.11.0-8.el7ar.src.rpm</li>
  <li>python-pycurl-7.43.0.2-4.el7sat.src.rpm</li>
  </ul>
  <p>I am not sure:</p>
  <ul>
  <li>how does Xray detect those python libraries</li>
  <li>what's RH Satellite and how they are related to the python libraries.</li>
  <li>How to update RH security advisory updates manually</li>
  </ul>
  <p>What I have tried:</p>
  <ul>
  <li>Remove the python libriraies in the docker file, but doesn't help.</li>
  </ul>