Inconsistent interpretation of HTTP requests in aiohttp - CVE-2023-47627

 

Inconsistent interpretation of HTTP requests in aiohttp - CVE-2023-47627

Published: December 4, 2023


Vulnerability identifier: #VU83631
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-47627
CWE-ID: CWE-444
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform HTTP request smuggling attacks.

The vulnerability exists due to improper validation of HTTP requests when AIOHTTP_NO_EXTENSIONS is enabled. A remote attacker can send a specially crafted HTTP request to the server and smuggle arbitrary HTTP headers.

Successful exploitation of vulnerability may allow an attacker to poison HTTP cache and perform phishing attacks.


Affected software

aiohttp
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
Red Hat Enterprise Linux for x86_64
Fedora
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Python 3 Module
openSUSE Leap
openEuler
QRadar Suite
Splunk Enterprise
Ansible Automation Platform
Red Hat Satellite
Red Hat Update Infrastructure (RHUI)
Siebel CRM Cloud Applications
satellite-maintain (Red Hat package)
postgresql-evr (Red Hat package)
rubygem-kafo_wizards (Red Hat package)
yggdrasil-worker-forwarder (Red Hat package)
rubygem-hammer_cli_foreman_webhooks (Red Hat package)
rubygem-ruby2_keywords (Red Hat package)
rubygem-apipie-params (Red Hat package)
rubygem-smart_proxy_dhcp_remote_isc (Red Hat package)
rubygem-faraday-cookie_jar (Red Hat package)
rubygem-hammer_cli_foreman_puppet (Red Hat package)
rubygem-smart_proxy_dhcp_infoblox (Red Hat package)
rubygem-hammer_cli_foreman_tasks (Red Hat package)
rubygem-declarative (Red Hat package)
rubygem-hammer_cli_foreman_virt_who_configure (Red Hat package)
rubygem-uber (Red Hat package)
rubygem-sd_notify (Red Hat package)
rubygem-hammer_cli_foreman_leapp (Red Hat package)
rubygem-trailblazer-option (Red Hat package)
rubygem-server_sent_events (Red Hat package)
rubygem-fog-xml (Red Hat package)
rubygem-hammer_cli_foreman_kubevirt (Red Hat package)
rubygem-websocket-extensions (Red Hat package)
rubygem-rkerberos (Red Hat package)
rubygem-foreman_kubevirt (Red Hat package)
libcomps (Red Hat package)
python-debian (Red Hat package)
rubygem-hammer_cli_foreman_openscap (Red Hat package)
ansiblerole-foreman_scap_client (Red Hat package)
python-requirements-parser (Red Hat package)
rubygem-net_http_unix (Red Hat package)
rubygem-hammer_cli_foreman_remote_execution (Red Hat package)
rubygem-get_process_mem (Red Hat package)
python-ruamel-yaml-clib (Red Hat package)
rubygem-hammer_cli_foreman_azure_rm (Red Hat package)
rubygem-hammer_cli_foreman_templates (Red Hat package)
rubygem-hammer_cli_foreman_bootdisk (Red Hat package)
rubygem-xmlrpc (Red Hat package)
rubygem-polyglot (Red Hat package)
rubygem-timeliness (Red Hat package)
rubygem-foreman_hooks (Red Hat package)
puppet-foreman_scap_client (Red Hat package)
rubygem-net-ssh-krb (Red Hat package)
rubygem-smart_proxy_dynflow_core (Red Hat package)
rubygem-bundler_ext (Red Hat package)
rubygem-rsec (Red Hat package)
python-sqlparse (Red Hat package)
python-colorama (Red Hat package)
rubygem-openscap (Red Hat package)
python-galaxy-importer (Red Hat package)
python-json-stream-rs-tokenizer (Red Hat package)
python-iniparse (Red Hat package)
rubygem-mqtt (Red Hat package)
rubygem-google-cloud-compute (Red Hat package)
python-gnupg (Red Hat package)
python-inflection (Red Hat package)
python-webencodings (Red Hat package)
rubygem-graphql-batch (Red Hat package)
rubygem-redfish_client (Red Hat package)
puppet-agent-oauth (Red Hat package)
rubygem-foreman_virt_who_configure (Red Hat package)
rubygem-apipie-bindings (Red Hat package)
rubygem-hammer_cli_foreman_ansible (Red Hat package)
rubygem-ldap_fluff (Red Hat package)
rubygem-concurrent-ruby-edge (Red Hat package)
rubygem-http_parser.rb (Red Hat package)
rubygem-domain_name (Red Hat package)
python-mccabe (Red Hat package)
rubygem-fx (Red Hat package)
python-ptyprocess (Red Hat package)
python-defusedxml (Red Hat package)
rubygem-anemone (Red Hat package)
rubygem-promise.rb (Red Hat package)
rubygem-algebrick (Red Hat package)
python-schema (Red Hat package)
rubygem-ms_rest (Red Hat package)
rubygem-websocket-driver (Red Hat package)
libsolv (Red Hat package)
rubygem-ruby-libvirt (Red Hat package)
rubygem-validates_lengths_from_database (Red Hat package)
rubygem-colorize (Red Hat package)
python-dataclasses (Red Hat package)
rubygem-gitlab-sidekiq-fetcher (Red Hat package)
rubygem-smart_proxy_dynflow (Red Hat package)
rubygem-google-apis-core (Red Hat package)
python-commonmark (Red Hat package)
rubygem-smart_proxy_openscap (Red Hat package)
rubygem-smart_proxy_shellhooks (Red Hat package)
rubygem-newt (Red Hat package)
rubygem-webpack-rails (Red Hat package)
python-websockify (Red Hat package)
rubygem-rb-inotify (Red Hat package)
python-toml (Red Hat package)
rubygem-smart_proxy_remote_execution_ssh (Red Hat package)
rubygem-netrc (Red Hat package)
rubygem-rubyipmi (Red Hat package)
rubygem-ms_rest_azure (Red Hat package)
rubygem-gapic-common (Red Hat package)
rubygem-fog-libvirt (Red Hat package)
python-lockfile (Red Hat package)
rubygem-rabl (Red Hat package)
rubygem-memoist (Red Hat package)
rubygem-signet (Red Hat package)
python-ruamel-yaml (Red Hat package)
rubygem-net-ldap (Red Hat package)
python-ecdsa (Red Hat package)
python-pyrsistent (Red Hat package)
rubygem-azure_mgmt_resources (Red Hat package)
python-future (Red Hat package)
rubygem-azure_mgmt_subscriptions (Red Hat package)
python-docutils (Red Hat package)
rubygem-pulp_ansible_client (Red Hat package)
python-pulp-ansible (Red Hat package)
python-pulp-glue (Red Hat package)
python-pulp-cli (Red Hat package)
rubygem-azure_mgmt_compute (Red Hat package)
rubygem-azure_mgmt_storage (Red Hat package)
rubygem-azure_mgmt_network (Red Hat package)
python-drf-spectacular (Red Hat package)
rubygem-google-apis-compute_v1 (Red Hat package)
python-drf-nested-routers (Red Hat package)
rubygem-excon (Red Hat package)
rubygem-faraday-em_synchrony (Red Hat package)
rubygem-faraday-em_http (Red Hat package)
rubygem-faraday-rack (Red Hat package)
rubygem-method_source (Red Hat package)
rubygem-faraday-patron (Red Hat package)
python-django-lifecycle (Red Hat package)
foreman-discovery-image-service (Red Hat package)
rubygem-deacon (Red Hat package)
python-djangorestframework-queryfields (Red Hat package)
rubygem-robotex (Red Hat package)
rubygem-hammer_cli_foreman_google (Red Hat package)
rubygem-faraday-httpclient (Red Hat package)
satellite-convert2rhel-toolkit (Red Hat package)
rubygem-faraday-net_http (Red Hat package)
foreman-fapolicyd (Red Hat package)
rubygem-marcel (Red Hat package)
rubygem-openscap_parser (Red Hat package)
createrepo_c (Red Hat package)
python-asyncio-throttle (Red Hat package)
rubygem-faraday-retry (Red Hat package)
rubygem-acts_as_list (Red Hat package)
python-async-lru (Red Hat package)
python-bleach-allowlist (Red Hat package)
rubygem-faraday-multipart (Red Hat package)
rubygem-foreman_google (Red Hat package)
rubygem-http-cookie (Red Hat package)
rubygem-oauth-tty (Red Hat package)
rubygem-smart_proxy_discovery (Red Hat package)
rubygem-crass (Red Hat package)
pulpcore-obsolete-packages (Red Hat package)
python-brotli (Red Hat package)
rubygem-journald-native (Red Hat package)
libsodium (Red Hat package)
rubygem-formatador (Red Hat package)
rubygem-oauth (Red Hat package)
rubygem-faraday-excon (Red Hat package)
rubygem-google-cloud-common (Red Hat package)
rubygem-fog-openstack (Red Hat package)
rubygem-smart_proxy_container_gateway (Red Hat package)
rubygem-angular-rails-templates (Red Hat package)
python-et-xmlfile (Red Hat package)
rubygem-smart_proxy_dns_infoblox (Red Hat package)
rubygem-rack-cors (Red Hat package)
rubygem-foreman_leapp (Red Hat package)
rubygem-jsonpath (Red Hat package)
python-django-readonly-field (Red Hat package)
rubygem-recursive-open-struct (Red Hat package)
rubygem-version_gem (Red Hat package)
rubygem-os (Red Hat package)
rubygem-little-plugger (Red Hat package)
rubygem-mini_mime (Red Hat package)
rubygem-concurrent-ruby (Red Hat package)
rubygem-faraday_middleware (Red Hat package)
rubygem-hammer_cli_foreman_admin (Red Hat package)
rubygem-hammer_cli_foreman_discovery (Red Hat package)
rubygem-faraday-net_http_persistent (Red Hat package)
python-ansible-builder (Red Hat package)
rubygem-fog-json (Red Hat package)
rubygem-globalid (Red Hat package)
rubygem-kafo_parsers (Red Hat package)
rubygem-thor (Red Hat package)
rubygem-apipie-rails (Red Hat package)
python-enrich (Red Hat package)
rubygem-et-orbi (Red Hat package)
python-deprecated (Red Hat package)
rubygem-googleauth (Red Hat package)
rubygem-google-cloud-errors (Red Hat package)
python-drf-access-policy (Red Hat package)
python-xlwt (Red Hat package)
rubygem-gssapi (Red Hat package)
python-aiosignal (Red Hat package)
rubygem-rack-jsonp (Red Hat package)
rubygem-clamp (Red Hat package)
python-frozenlist (Red Hat package)
rubygem-jgrep (Red Hat package)
python-parsley (Red Hat package)
rubygem-fog-kubevirt (Red Hat package)
rubygem-safemode (Red Hat package)
rubygem-googleapis-common-protos (Red Hat package)
rubygem-googleapis-common-protos-types (Red Hat package)
rubygem-raabro (Red Hat package)
rubygem-hocon (Red Hat package)
rubygem-daemons (Red Hat package)
python-odfpy (Red Hat package)
rubygem-sqlite3 (Red Hat package)
python-pyjwkest (Red Hat package)
python-url-normalize (Red Hat package)
rubygem-foreman_maintain (Red Hat package)
receptor (Red Hat package)
rubygem-stomp (Red Hat package)
rubygem-activerecord-import (Red Hat package)
rubygem-amazing_print (Red Hat package)
rubygem-ansi (Red Hat package)
python-aiohttp-xmlrpc (Red Hat package)
rubygem-request_store (Red Hat package)
rubygem-deface (Red Hat package)
rubygem-pg (Red Hat package)
rubygem-google-cloud-env (Red Hat package)
rubygem-rails-html-sanitizer (Red Hat package)
rubygem-google-cloud-core (Red Hat package)
rubygem-smart_proxy_discovery_image (Red Hat package)
python-jq (Red Hat package)
rubygem-puma-status (Red Hat package)
foreman-obsolete-packages (Red Hat package)
dynflow-utils (Red Hat package)
rubygem-pulp_certguard_client (Red Hat package)
rubygem-http-accept (Red Hat package)
python-distro (Red Hat package)
rubygem-google-cloud-compute-v1 (Red Hat package)
ansiblerole-insights-client (Red Hat package)
python-pulp-certguard (Red Hat package)
rubygem-msgpack (Red Hat package)
katello-client-bootstrap (Red Hat package)
cjson (Red Hat package)
rubygem-fast_gettext (Red Hat package)
rubygem-rchardet (Red Hat package)
rubygem-fugit (Red Hat package)
rubygem-webrick (Red Hat package)
rubygem-dynflow (Red Hat package)
python-yarl (Red Hat package)
rubygem-hammer_cli_katello (Red Hat package)
rubygem-faraday (Red Hat package)
rubygem-gettext_i18n_rails (Red Hat package)
rubygem-erubi (Red Hat package)
rubygem-coffee-script-source (Red Hat package)
rubygem-graphql (Red Hat package)
rubygem-i18n (Red Hat package)
python-wrapt (Red Hat package)
python-markuppy (Red Hat package)
rubygem-multi_json (Red Hat package)
rubygem-pulp_file_client (Red Hat package)
python-pulp-file (Red Hat package)
python-cffi (Red Hat package)
rubygem-nokogiri (Red Hat package)
rubygem-css_parser (Red Hat package)
python-six (Red Hat package)
rubygem-ffi (Red Hat package)
rubygem-git (Red Hat package)
python-opentelemetry_exporter_otlp_proto_common (Red Hat package)
python-opentelemetry_api (Red Hat package)
python-opentelemetry_sdk (Red Hat package)
python-opentelemetry_proto (Red Hat package)
python-opentelemetry_exporter_otlp (Red Hat package)
python-opentelemetry_exporter_otlp_proto_http (Red Hat package)
python-opentelemetry_exporter_otlp_proto_grpc (Red Hat package)
python-rhsm (Red Hat package)
rubygem-parallel (Red Hat package)
python-urllib3 (Red Hat package)
python-productmd (Red Hat package)
python-grpcio (Red Hat package)
rubygem-grpc (Red Hat package)
python-googleapis-common-protos (Red Hat package)
uxplay
rubygem-sshkey (Red Hat package)
rubygem-activerecord-session_store (Red Hat package)
rubygem-snaky_hash (Red Hat package)
pulpcore-selinux (Red Hat package)
rubygem-powerbar (Red Hat package)
python-urlman (Red Hat package)
python-aioredis (Red Hat package)
python-xlrd (Red Hat package)
rubygem-mustermann (Red Hat package)
rubygem-fog-ovirt (Red Hat package)
rubygem-ovirt_provision_plugin (Red Hat package)
rubygem-tzinfo (Red Hat package)
rubygem-net-ping (Red Hat package)
mosquitto (Red Hat package)
ansible-collection-redhat-satellite_operations (Red Hat package)
rubygem-rest-client (Red Hat package)
rubygem-highline (Red Hat package)
rubygem-logging-journald (Red Hat package)
rubygem-rack-test (Red Hat package)
rubygem-http-form_data (Red Hat package)
python-charset-normalizer (Red Hat package)
python-markupsafe (Red Hat package)
rubygem-pulp_ostree_client (Red Hat package)
rubygem-locale (Red Hat package)
python-click-shell (Red Hat package)
rubygem-rails-dom-testing (Red Hat package)
python-bracex (Red Hat package)
python-backoff (Red Hat package)
ansible-runner (Red Hat package)
rubygem-rainbow (Red Hat package)
rubygem-multipart-post (Red Hat package)
rubygem-sinatra (Red Hat package)
rubygem-rack-protection (Red Hat package)
rubygem-rack (Red Hat package)
rubygem-foreman_azure_rm (Red Hat package)
rubygem-tilt (Red Hat package)
rubygem-fog-core (Red Hat package)
rubygem-logging (Red Hat package)
python-daemon (Red Hat package)
python-json-stream (Red Hat package)
rubygem-connection_pool (Red Hat package)
rubygem-coffee-script (Red Hat package)
rubygem-unicode-display_width (Red Hat package)
python-pyflakes (Red Hat package)
rubygem-ruby2ruby (Red Hat package)
python-pyjwt (Red Hat package)
python-pygtrie (Red Hat package)
rubygem-nio4r (Red Hat package)
rubygem-apipie-dsl (Red Hat package)
rubygem-zeitwerk (Red Hat package)
rubygem-jwt (Red Hat package)
rubygem-mail (Red Hat package)
python-dateutil (Red Hat package)
rubygem-httpclient (Red Hat package)
rubygem-addressable (Red Hat package)
katello-certs-tools (Red Hat package)
python-pycodestyle (Red Hat package)
rubygem-execjs (Red Hat package)
rubygem-statsd-instrument (Red Hat package)
python-semantic-version (Red Hat package)
python-bindep (Red Hat package)
python311-time-machine
python311-time-machine-debuginfo
python-time-machine-debugsource
ansible-core (Red Hat package)
rubygem-pulp_container_client (Red Hat package)
python-pulp-container (Red Hat package)
python-pulp-container-client (Red Hat package)
python-pygments (Red Hat package)
ansible-collection-community-crypto (Red Hat package)
python-pycparser (Red Hat package)
rubygem-loofah (Red Hat package)
python-requests (Red Hat package)
rubygem-pulp_deb_client (Red Hat package)
rubygem-infoblox (Red Hat package)
python-pulp_manifest (Red Hat package)
python-aiodns (Red Hat package)
python-pulp-deb (Red Hat package)
rubygem-roadie-rails (Red Hat package)
rubygem-journald-logger (Red Hat package)
rubygem-optimist (Red Hat package)
python-django-import-export (Red Hat package)
python-openpyxl (Red Hat package)
rubygem-responders (Red Hat package)
python-pyparsing (Red Hat package)
rubygem-retriable (Red Hat package)
python-jinja2 (Red Hat package)
python-psycopg (Red Hat package)
python-dynaconf (Red Hat package)
rubygem-bcrypt (Red Hat package)
python-gitpython (Red Hat package)
rubygem-deep_cloneable (Red Hat package)
rubygem-representable (Red Hat package)
rubygem-smart_proxy_pulp (Red Hat package)
rubygem-foreman_webhooks (Red Hat package)
rubygem-builder (Red Hat package)
python-django (Red Hat package)
rubygem-http (Red Hat package)
python-django-guid (Red Hat package)
python-tablib (Red Hat package)
rubygem-will_paginate (Red Hat package)
python-bleach (Red Hat package)
python-types-cryptography (Red Hat package)
python-zipp (Red Hat package)
python-markdown (Red Hat package)
rubygem-diffy (Red Hat package)
rubygem-sprockets-rails (Red Hat package)
satellite-clone (Red Hat package)
rubygem-mime-types (Red Hat package)
rubygem-smart_proxy_ansible (Red Hat package)
python-asgiref (Red Hat package)
rubygem-fog-vsphere (Red Hat package)
rubygem-rbvmomi2 (Red Hat package)
python-aiohttp-debuginfo
python-aiohttp-debugsource
python-aiohttp-help
python3-aiohttp
python-aiohttp
python-aiohttp (Debian package)
rubygem-hammer_cli (Red Hat package)
foreman-selinux (Red Hat package)
foreman-proxy (Red Hat package)
rubygem-hammer_cli_foreman (Red Hat package)
foreman-installer (Red Hat package)
foreman (Red Hat package)
python-aiohttp (Red Hat package)
python3x-aiohttp (Red Hat package)
python311-aiohttp
python311-aiohttp-debuginfo
rubygem-pulp_python_client (Red Hat package)
python-djangorestframework (Red Hat package)
python-pycryptodomex (Red Hat package)
python-pulp-rpm (Red Hat package)
rubygem-ruby_parser (Red Hat package)
rubygem-fog-aws (Red Hat package)
python-pulpcore (Red Hat package)
rubygem-pulp_rpm_client (Red Hat package)
python-pulp-rpm-client (Red Hat package)
rubygem-google-protobuf (Red Hat package)
python3x-pulpcore (Red Hat package)
rubygem-pulpcore_client (Red Hat package)
python-pulpcore-client (Red Hat package)
rubygem-mime-types-data (Red Hat package)
rubygem-net-scp (Red Hat package)
ansible-collection-redhat-satellite (Red Hat package)
rubygem-rbnacl (Red Hat package)
python-async-timeout (Red Hat package)
python-gitdb (Red Hat package)
foreman-discovery-image (Red Hat package)
python-uritemplate (Red Hat package)
python-pycares (Red Hat package)
rubygem-scoped_search (Red Hat package)
rubygem-sprockets (Red Hat package)
rubygem-prometheus-client (Red Hat package)
python3x-django (Red Hat package)
rubygem-ancestry (Red Hat package)
python-redis (Red Hat package)
candlepin (Red Hat package)
rubygem-ovirt-engine-sdk (Red Hat package)
rubygem-facter (Red Hat package)
rubygem-redis (Red Hat package)
automation-controller (Red Hat package)
python-typing-extensions (Red Hat package)
rhui-tools (Red Hat package)
rhui-installer (Red Hat package)
python-pexpect (Red Hat package)
rubygem-katello (Red Hat package)
python-lxml (Red Hat package)
rubygem-kubeclient (Red Hat package)
python-jsonschema (Red Hat package)
katello (Red Hat package)
rubygem-sexp_processor (Red Hat package)
python-protobuf (Red Hat package)
python-flake8 (Red Hat package)
rubygem-hashie (Red Hat package)
rubygem-coffee-rails (Red Hat package)
python-smmap (Red Hat package)
katello-selinux (Red Hat package)
rubygem-public_suffix (Red Hat package)
rubygem-roadie (Red Hat package)
ansible-lint (Red Hat package)
rubygem-audited (Red Hat package)
rubygem-friendly_id (Red Hat package)
python-pbr (Red Hat package)
rubygem-sequel (Red Hat package)
python-whitenoise (Red Hat package)
python-importlib-metadata (Red Hat package)
python-multidict (Red Hat package)
rubygem-foreman_puppet (Red Hat package)
rubygem-actionmailer (Red Hat package)
rubygem-actioncable (Red Hat package)
rubygem-actionmailbox (Red Hat package)
rubygem-activesupport (Red Hat package)
rubygem-actionpack (Red Hat package)
rubygem-actiontext (Red Hat package)
rubygem-actionview (Red Hat package)
rubygem-activejob (Red Hat package)
rubygem-activemodel (Red Hat package)
rubygem-activerecord (Red Hat package)
rubygem-activestorage (Red Hat package)
rubygem-railties (Red Hat package)
rubygem-rails (Red Hat package)
rubygem-puma (Red Hat package)
rubygem-secure_headers (Red Hat package)
rubygem-sidekiq (Red Hat package)
satellite (Red Hat package)
satellite-installer (Red Hat package)
python-tenacity (Red Hat package)
rubygem-rails-i18n (Red Hat package)
rubygem-foreman_openscap (Red Hat package)
rubygem-net-ssh (Red Hat package)
rubygem-kafo (Red Hat package)
puppetserver (Red Hat package)
puppet-agent (Red Hat package)
python-click (Red Hat package)
python-wcmatch (Red Hat package)
rubygem-foreman-tasks (Red Hat package)
rubygem-foreman_rh_cloud (Red Hat package)
llhttp
rubygem-foreman_templates (Red Hat package)
puppetlabs-stdlib (Red Hat package)
python-pillow (Red Hat package)
rubygem-foreman_theme_satellite (Red Hat package)
rubygem-foreman_remote_execution (Red Hat package)
rubygem-foreman_ansible (Red Hat package)
python-rich (Red Hat package)
python-gunicorn (Red Hat package)
rubygem-foreman_bootdisk (Red Hat package)
python-packaging (Red Hat package)
python-attrs (Red Hat package)
python-contextlib2 (Red Hat package)
python-aiofiles (Red Hat package)
rubygem-foreman_discovery (Red Hat package)
python-django-filter (Red Hat package)
python-pyOpenSSL (Red Hat package)
python-cryptography (Red Hat package)
python-pytz (Red Hat package)
python-certifi (Red Hat package)
python-uuid6 (Red Hat package)
python-diff-match-patch (Red Hat package)
foreman-bootloaders-redhat (Red Hat package)
IBM Cloud Pak for Watson AIOps

How to mitigate CVE-2023-47627

Install updates from vendor's website.

aiohttp - update to 3.8.6
QRadar Suite - update to 1.10.18.0
Red Hat Satellite - addressed in versions 6.14.3, 6.15.0
Splunk Enterprise - addressed in versions 9.0.9, 9.1.4, 9.2.1
Siebel CRM Cloud Applications - update to 24.2
satellite-maintain (Red Hat package) - update to 0.0.2-1.el8sat
postgresql-evr (Red Hat package) - update to 0.0.2-1.el8sat
rubygem-kafo_wizards (Red Hat package) - update to 0.0.2-2.el8sat
yggdrasil-worker-forwarder (Red Hat package) - update to 0.0.3-1.el8sat
rubygem-hammer_cli_foreman_webhooks (Red Hat package) - update to 0.0.4-1.el8sat
rubygem-ruby2_keywords (Red Hat package) - update to 0.0.5-1.el8sat
rubygem-apipie-params (Red Hat package) - update to 0.0.5-5.1.el8sat
rubygem-smart_proxy_dhcp_remote_isc (Red Hat package) - update to 0.0.5-6.el8sat
rubygem-faraday-cookie_jar (Red Hat package) - update to 0.0.6-2.el8sat
rubygem-hammer_cli_foreman_puppet (Red Hat package) - update to 0.0.7-1.el8sat
rubygem-smart_proxy_dhcp_infoblox (Red Hat package) - update to 0.0.17-1.el8sat
rubygem-hammer_cli_foreman_tasks (Red Hat package) - update to 0.0.19-1.el8sat
rubygem-declarative (Red Hat package) - update to 0.0.20-1.el8sat
rubygem-hammer_cli_foreman_virt_who_configure (Red Hat package) - update to 0.1.0-1.el8sat
rubygem-uber (Red Hat package) - update to 0.1.0-3.el8sat
rubygem-sd_notify (Red Hat package) - update to 0.1.1-1.el8sat
rubygem-hammer_cli_foreman_leapp (Red Hat package) - update to 0.1.1-2.el8sat
rubygem-trailblazer-option (Red Hat package) - update to 0.1.2-1.el8sat
rubygem-server_sent_events (Red Hat package) - update to 0.1.3-1.el8sat
rubygem-fog-xml (Red Hat package) - update to 0.1.4-1.el8sat
rubygem-hammer_cli_foreman_kubevirt (Red Hat package) - update to 0.1.5-1.el8sat
rubygem-websocket-extensions (Red Hat package) - update to 0.1.5-2.el8sat
rubygem-rkerberos (Red Hat package) - update to 0.1.5-20.1.el8sat
rubygem-foreman_kubevirt (Red Hat package) - update to 0.1.9-4.el8sat
libcomps (Red Hat package) - addressed in versions 0.1.18-8.el8pc, 0.1.18-8.el8ui
python-debian (Red Hat package) - update to 0.1.44-6.el8pc
rubygem-hammer_cli_foreman_openscap (Red Hat package) - update to 0.2.0-1.el8sat
ansiblerole-foreman_scap_client (Red Hat package) - update to 0.2.0-2.el8sat
python-requirements-parser (Red Hat package) - update to 0.2.0-6.el8pc
rubygem-net_http_unix (Red Hat package) - update to 0.2.2-2.el8sat
rubygem-hammer_cli_foreman_remote_execution (Red Hat package) - update to 0.2.3-1.el8sat
rubygem-get_process_mem (Red Hat package) - update to 0.2.7-2.1.el8sat
python-ruamel-yaml-clib (Red Hat package) - update to 0.2.7-4.el8pc
rubygem-hammer_cli_foreman_azure_rm (Red Hat package) - update to 0.3.0-1.el8sat
rubygem-hammer_cli_foreman_templates (Red Hat package) - update to 0.3.0-1.el8sat
rubygem-hammer_cli_foreman_bootdisk (Red Hat package) - update to 0.3.0-3.el8sat
rubygem-xmlrpc (Red Hat package) - update to 0.3.3-1.el8sat
rubygem-polyglot (Red Hat package) - update to 0.3.5-3.1.el8sat
rubygem-timeliness (Red Hat package) - update to 0.3.10-2.el8sat
rubygem-foreman_hooks (Red Hat package) - update to 0.3.17-3.1.el8sat
puppet-foreman_scap_client (Red Hat package) - update to 0.4.0-1.el8sat
rubygem-net-ssh-krb (Red Hat package) - update to 0.4.0-4.el8sat
rubygem-smart_proxy_dynflow_core (Red Hat package) - update to 0.4.1-1.el8sat
rubygem-bundler_ext (Red Hat package) - update to 0.4.1-6.el8sat
rubygem-rsec (Red Hat package) - update to 0.4.3-5.el8sat
python-sqlparse (Red Hat package) - addressed in versions 0.4.4-3.el8pc, 0.4.4-3.el8ui
python-colorama (Red Hat package) - update to 0.4.4-6.el8pc
rubygem-openscap (Red Hat package) - update to 0.4.9-9.el8sat
python-galaxy-importer (Red Hat package) - addressed in versions 0.4.18-2.el8pc, 0.4.19-2.el8pc
python-json-stream-rs-tokenizer (Red Hat package) - addressed in versions 0.4.25-3.el8pc, 0.4.25-3.el8ui
python-iniparse (Red Hat package) - update to 0.4-39.el8pc
rubygem-mqtt (Red Hat package) - update to 0.5.0-1.el8sat
rubygem-google-cloud-compute (Red Hat package) - update to 0.5.0-1.el8sat
python-gnupg (Red Hat package) - addressed in versions 0.5.0-4.el8pc, 0.5.0-4.el8ui
python-inflection (Red Hat package) - addressed in versions 0.5.1-6.el8pc, 0.5.1-6.el8ui
python-webencodings (Red Hat package) - update to 0.5.1-6.el8pc
rubygem-graphql-batch (Red Hat package) - update to 0.5.3-1.el8sat
rubygem-redfish_client (Red Hat package) - update to 0.5.4-1.el8sat
puppet-agent-oauth (Red Hat package) - update to 0.5.10-1.el8sat
rubygem-foreman_virt_who_configure (Red Hat package) - addressed in versions 0.5.19-1.el8sat, 0.5.20-1.el8sat
rubygem-apipie-bindings (Red Hat package) - update to 0.6.0-1.el8sat
rubygem-hammer_cli_foreman_ansible (Red Hat package) - update to 0.6.0-1.el8sat
rubygem-ldap_fluff (Red Hat package) - update to 0.6.0-1.el8sat
rubygem-concurrent-ruby-edge (Red Hat package) - update to 0.6.0-3.el8sat
rubygem-http_parser.rb (Red Hat package) - update to 0.6.0-3.1.el8sat
rubygem-domain_name (Red Hat package) - update to 0.6.20231109-1.el8sat
python-mccabe (Red Hat package) - addressed in versions 0.7.0-0.1.el8pc, 0.7.0-3.el8pc
rubygem-fx (Red Hat package) - update to 0.7.0-1.el8sat
python-ptyprocess (Red Hat package) - update to 0.7.0-3.el8pc
python-defusedxml (Red Hat package) - addressed in versions 0.7.1-6.el8pc, 0.7.1-6.el8ui
rubygem-anemone (Red Hat package) - update to 0.7.2-23.el8sat
rubygem-promise.rb (Red Hat package) - update to 0.7.4-3.el8sat
rubygem-algebrick (Red Hat package) - update to 0.7.5-1.el8sat
python-schema (Red Hat package) - update to 0.7.5-5.el8pc
rubygem-ms_rest (Red Hat package) - update to 0.7.6-1.el8sat
rubygem-websocket-driver (Red Hat package) - update to 0.7.6-1.el8sat
libsolv (Red Hat package) - addressed in versions 0.7.22-6.el8pc, 0.7.22-6.el8ui
rubygem-ruby-libvirt (Red Hat package) - update to 0.8.0-1.el8sat
rubygem-validates_lengths_from_database (Red Hat package) - update to 0.8.0-1.el8sat
rubygem-colorize (Red Hat package) - update to 0.8.1-2.el8sat
python-dataclasses (Red Hat package) - update to 0.8-6.el8pc
rubygem-gitlab-sidekiq-fetcher (Red Hat package) - update to 0.9.0-2.el8sat
rubygem-smart_proxy_dynflow (Red Hat package) - update to 0.9.1-1.el8sat
rubygem-google-apis-core (Red Hat package) - update to 0.9.1-1.el8sat
python-commonmark (Red Hat package) - update to 0.9.1-8.el8pc
rubygem-smart_proxy_openscap (Red Hat package) - update to 0.9.2-1.el8sat
rubygem-smart_proxy_shellhooks (Red Hat package) - update to 0.9.2-3.el8sat
rubygem-newt (Red Hat package) - update to 0.9.7-3.1.el8sat
rubygem-webpack-rails (Red Hat package) - update to 0.9.11-1.el8sat
python-websockify (Red Hat package) - update to 0.10.0-3.el8sat
rubygem-rb-inotify (Red Hat package) - update to 0.10.1-1.el8sat
python-toml (Red Hat package) - update to 0.10.2-5.el8pc
rubygem-smart_proxy_remote_execution_ssh (Red Hat package) - update to 0.10.3-1.el8sat
rubygem-netrc (Red Hat package) - update to 0.11.0-6.el8sat
rubygem-rubyipmi (Red Hat package) - update to 0.11.1-1.el8sat
rubygem-ms_rest_azure (Red Hat package) - update to 0.12.0-1.el8sat
rubygem-gapic-common (Red Hat package) - update to 0.12.0-1.el8sat
rubygem-fog-libvirt (Red Hat package) - update to 0.12.0-1.el8sat
python-lockfile (Red Hat package) - update to 0.12.2-4.el8pc
rubygem-rabl (Red Hat package) - update to 0.16.1-1.el8sat
rubygem-memoist (Red Hat package) - update to 0.16.2-1.el8sat
rubygem-signet (Red Hat package) - update to 0.17.0-1.el8sat
python-ruamel-yaml (Red Hat package) - update to 0.17.21-5.el8pc
rubygem-net-ldap (Red Hat package) - update to 0.18.0-1.el8sat
python-ecdsa (Red Hat package) - addressed in versions 0.18.0-4.el8pc, 0.18.0-4.el8ui
python-pyrsistent (Red Hat package) - addressed in versions 0.18.1-5.el8pc, 0.18.1-5.el8ui
rubygem-azure_mgmt_resources (Red Hat package) - update to 0.18.2-1.el8sat
python-future (Red Hat package) - addressed in versions 0.18.3-4.el8pc, 0.18.3-4.el8ui
rubygem-azure_mgmt_subscriptions (Red Hat package) - update to 0.18.5-1.el8sat
python-docutils (Red Hat package) - update to 0.20.1-3.el8pc
rubygem-pulp_ansible_client (Red Hat package) - update to 0.20.2-1.el8sat
python-pulp-ansible (Red Hat package) - update to 0.20.2-3.el8pc
python-pulp-glue (Red Hat package) - addressed in versions 0.21.2-3.el8pc, 0.21.2-3.el8ui
python-pulp-cli (Red Hat package) - update to 0.21.2-5.el8pc
rubygem-azure_mgmt_compute (Red Hat package) - update to 0.22.0-1.el8sat
rubygem-azure_mgmt_storage (Red Hat package) - update to 0.23.0-1.el8sat
rubygem-azure_mgmt_network (Red Hat package) - update to 0.26.1-2.el8sat
python-drf-spectacular (Red Hat package) - addressed in versions 0.26.5-4.el8pc, 0.26.5-4.el8ui
rubygem-google-apis-compute_v1 (Red Hat package) - update to 0.54.0-1.el8sat
python-drf-nested-routers (Red Hat package) - addressed in versions 0.93.4-5.el8pc, 0.93.4-5.el8ui
rubygem-excon (Red Hat package) - update to 0.104.0-1.el8sat
rubygem-faraday-em_synchrony (Red Hat package) - update to 1.0.0-1.el8sat
rubygem-faraday-em_http (Red Hat package) - update to 1.0.0-1.el8sat
rubygem-faraday-rack (Red Hat package) - update to 1.0.0-1.el8sat
rubygem-method_source (Red Hat package) - update to 1.0.0-1.el8sat
rubygem-faraday-patron (Red Hat package) - update to 1.0.0-1.el8sat
python-django-lifecycle (Red Hat package) - addressed in versions 1.0.0-3.el8pc, 1.0.0-3.el8ui
foreman-discovery-image-service (Red Hat package) - update to 1.0.0-4.1.el8sat
rubygem-deacon (Red Hat package) - update to 1.0.0-5.el8sat
python-djangorestframework-queryfields (Red Hat package) - addressed in versions 1.0.0-7.el8pc, 1.0.0-7.el8ui
rubygem-robotex (Red Hat package) - update to 1.0.0-22.el8sat
rubygem-hammer_cli_foreman_google (Red Hat package) - update to 1.0.1-1.el8sat
rubygem-faraday-httpclient (Red Hat package) - update to 1.0.1-1.el8sat
satellite-convert2rhel-toolkit (Red Hat package) - update to 1.0.1-1.el8sat
rubygem-faraday-net_http (Red Hat package) - update to 1.0.1-1.el8sat
foreman-fapolicyd (Red Hat package) - update to 1.0.1-2.el8sat
rubygem-marcel (Red Hat package) - update to 1.0.2-1.el8sat
rubygem-openscap_parser (Red Hat package) - update to 1.0.2-2.el8sat
createrepo_c (Red Hat package) - addressed in versions 1.0.2-5.el8pc, 1.0.2-5.el8ui
python-asyncio-throttle (Red Hat package) - addressed in versions 1.0.2-6.el8pc, 1.0.2-6.el8ui
rubygem-faraday-retry (Red Hat package) - update to 1.0.3-1.el8sat
rubygem-acts_as_list (Red Hat package) - update to 1.0.3-2.el8sat
python-async-lru (Red Hat package) - update to 1.0.3-4.el8pc
python-bleach-allowlist (Red Hat package) - update to 1.0.3-6.el8pc
rubygem-faraday-multipart (Red Hat package) - update to 1.0.4-1.el8sat
rubygem-foreman_google (Red Hat package) - update to 1.0.4-1.el8sat
rubygem-http-cookie (Red Hat package) - update to 1.0.5-1.el8sat
rubygem-oauth-tty (Red Hat package) - update to 1.0.5-1.el8sat
rubygem-smart_proxy_discovery (Red Hat package) - update to 1.0.5-9.el8sat
rubygem-crass (Red Hat package) - update to 1.0.6-2.el8sat
pulpcore-obsolete-packages (Red Hat package) - update to 1.0-9.el8pc
python-brotli (Red Hat package) - addressed in versions 1.0.9-4.el8pc, 1.0.9-5.el8ui
rubygem-journald-native (Red Hat package) - update to 1.0.12-1.el8sat
libsodium (Red Hat package) - update to 1.0.17-3.el8sat
rubygem-formatador (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-oauth (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-faraday-excon (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-google-cloud-common (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-fog-openstack (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-smart_proxy_container_gateway (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-angular-rails-templates (Red Hat package) - update to 1.1.0-2.el8sat
python-et-xmlfile (Red Hat package) - addressed in versions 1.1.0-5.el8pc, 1.1.0-5.el8ui
rubygem-smart_proxy_dns_infoblox (Red Hat package) - update to 1.1.0-7.el8sat
rubygem-rack-cors (Red Hat package) - update to 1.1.1-1.el8sat
rubygem-foreman_leapp (Red Hat package) - update to 1.1.1-1.el8sat
rubygem-jsonpath (Red Hat package) - update to 1.1.2-1.el8sat
python-django-readonly-field (Red Hat package) - addressed in versions 1.1.2-3.el8pc, 1.1.2-3.el8ui
rubygem-recursive-open-struct (Red Hat package) - update to 1.1.3-1.el8sat
rubygem-version_gem (Red Hat package) - update to 1.1.3-1.el8sat
rubygem-os (Red Hat package) - update to 1.1.4-1.el8sat
rubygem-little-plugger (Red Hat package) - update to 1.1.4-3.el8sat
rubygem-mini_mime (Red Hat package) - update to 1.1.5-1.el8sat
rubygem-concurrent-ruby (Red Hat package) - update to 1.1.10-1.el8sat
rubygem-faraday_middleware (Red Hat package) - update to 1.2.0-1.el8sat
rubygem-hammer_cli_foreman_admin (Red Hat package) - update to 1.2.0-1.el8sat
rubygem-hammer_cli_foreman_discovery (Red Hat package) - update to 1.2.0-1.el8sat
rubygem-faraday-net_http_persistent (Red Hat package) - update to 1.2.0-1.el8sat
python-ansible-builder (Red Hat package) - addressed in versions 1.2.0-1.el8pc, 3.0.0-1.el8pc
rubygem-fog-json (Red Hat package) - update to 1.2.0-4.el8sat
rubygem-globalid (Red Hat package) - update to 1.2.1-1.el8sat
rubygem-kafo_parsers (Red Hat package) - update to 1.2.1-1.el8sat
rubygem-thor (Red Hat package) - update to 1.2.2-1.el8sat
rubygem-apipie-rails (Red Hat package) - update to 1.2.3-1.el8sat
python-enrich (Red Hat package) - update to 1.2.6-7.el8pc
rubygem-et-orbi (Red Hat package) - update to 1.2.7-1.el8sat
python-deprecated (Red Hat package) - addressed in versions 1.2.13-4.el8pc, 1.2.13-4.el8ui
rubygem-googleauth (Red Hat package) - update to 1.3.0-1.el8sat
rubygem-google-cloud-errors (Red Hat package) - update to 1.3.0-1.el8sat
python-drf-access-policy (Red Hat package) - addressed in versions 1.3.0-3.el8pc, 1.3.0-3.el8ui
python-xlwt (Red Hat package) - addressed in versions 1.3.0-6.el8pc, 1.3.0-6.el8ui
rubygem-gssapi (Red Hat package) - update to 1.3.1-1.el8sat
python-aiosignal (Red Hat package) - addressed in versions 1.3.1-4.el8pc, 1.3.1-4.el8ui
rubygem-rack-jsonp (Red Hat package) - update to 1.3.1-10.el8sat
rubygem-clamp (Red Hat package) - update to 1.3.2-1.el8sat
python-frozenlist (Red Hat package) - addressed in versions 1.3.3-4.el8pc, 1.3.3-4.el8ui
rubygem-jgrep (Red Hat package) - update to 1.3.3-11.el8sat
python-parsley (Red Hat package) - update to 1.3-5.el8pc
rubygem-fog-kubevirt (Red Hat package) - update to 1.3.7-1.el8sat
rubygem-safemode (Red Hat package) - update to 1.3.8-1.el8sat
rubygem-googleapis-common-protos (Red Hat package) - update to 1.3.12-1.el8sat
rubygem-googleapis-common-protos-types (Red Hat package) - update to 1.4.0-1.el8sat
rubygem-raabro (Red Hat package) - update to 1.4.0-1.el8sat
rubygem-hocon (Red Hat package) - update to 1.4.0-1.el8sat
rubygem-daemons (Red Hat package) - update to 1.4.1-1.el8sat
python-odfpy (Red Hat package) - addressed in versions 1.4.1-9.el8pc, 1.4.1-9.el8ui
rubygem-sqlite3 (Red Hat package) - update to 1.4.2-1.el8sat
python-pyjwkest (Red Hat package) - addressed in versions 1.4.2-8.el8pc, 1.4.2-8.el8ui
python-url-normalize (Red Hat package) - addressed in versions 1.4.3-6.el8pc, 1.4.3-7.el8ui
rubygem-foreman_maintain (Red Hat package) - update to 1.4.4-1.el8sat
receptor (Red Hat package) - addressed in versions 1.4.5-1.el8ap, 1.4.5-1.el9ap
rubygem-stomp (Red Hat package) - update to 1.4.10-1.el8sat
rubygem-activerecord-import (Red Hat package) - update to 1.5.0-1.el8sat
rubygem-amazing_print (Red Hat package) - update to 1.5.0-1.el8sat
rubygem-ansi (Red Hat package) - update to 1.5.0-3.el8sat
python-aiohttp-xmlrpc (Red Hat package) - addressed in versions 1.5.0-5.el8pc, 1.5.0-5.el8ui
rubygem-request_store (Red Hat package) - update to 1.5.1-1.el8sat
rubygem-deface (Red Hat package) - update to 1.5.3-3.el8sat
rubygem-pg (Red Hat package) - update to 1.5.4-1.el8sat
rubygem-google-cloud-env (Red Hat package) - update to 1.6.0-1.el8sat
rubygem-rails-html-sanitizer (Red Hat package) - update to 1.6.0-1.el8sat
rubygem-google-cloud-core (Red Hat package) - update to 1.6.0-1.el8sat
rubygem-smart_proxy_discovery_image (Red Hat package) - update to 1.6.0-2.el8sat
python-jq (Red Hat package) - addressed in versions 1.6.0-3.el8pc, 1.6.0-3.el8ui
rubygem-puma-status (Red Hat package) - update to 1.6-1.el8sat
foreman-obsolete-packages (Red Hat package) - update to 1.6-1.el8sat
dynflow-utils (Red Hat package) - update to 1.6.3-1.el8sat
rubygem-pulp_certguard_client (Red Hat package) - update to 1.6.4-1.el8sat
rubygem-http-accept (Red Hat package) - update to 1.7.0-1.el8sat
python-distro (Red Hat package) - update to 1.7.0-3.el8pc
rubygem-google-cloud-compute-v1 (Red Hat package) - update to 1.7.1-1.el8sat
ansiblerole-insights-client (Red Hat package) - update to 1.7.1-2.el8sat
python-pulp-certguard (Red Hat package) - update to 1.7.1-2.el8pc
rubygem-msgpack (Red Hat package) - update to 1.7.2-1.el8sat
katello-client-bootstrap (Red Hat package) - update to 1.7.9-1.el8sat
cjson (Red Hat package) - update to 1.7.14-5.el8sat
rubygem-fast_gettext (Red Hat package) - update to 1.8.0-1.el8sat
rubygem-rchardet (Red Hat package) - update to 1.8.0-1.el8sat
rubygem-fugit (Red Hat package) - update to 1.8.1-1.el8sat
rubygem-webrick (Red Hat package) - update to 1.8.1-1.el8sat
rubygem-dynflow (Red Hat package) - update to 1.8.2-1.el8sat
python-yarl (Red Hat package) - addressed in versions 1.8.2-4.el8pc, 1.8.2-4.el8ui
rubygem-hammer_cli_katello (Red Hat package) - addressed in versions 1.9.1.3-1.el8sat, 1.11.1.2-1.el8sat
rubygem-faraday (Red Hat package) - update to 1.10.2-1.el8sat
rubygem-gettext_i18n_rails (Red Hat package) - update to 1.12.0-1.el8sat
rubygem-erubi (Red Hat package) - update to 1.12.0-1.el8sat
rubygem-coffee-script-source (Red Hat package) - update to 1.12.2-5.el8sat
rubygem-graphql (Red Hat package) - update to 1.13.20-1.el8sat
rubygem-i18n (Red Hat package) - update to 1.14.1-1.el8sat
python-wrapt (Red Hat package) - addressed in versions 1.14.1-4.el8pc, 1.14.1-4.el8ui
python-markuppy (Red Hat package) - addressed in versions 1.14-6.el8pc, 1.14-6.el8ui
rubygem-multi_json (Red Hat package) - update to 1.15.0-1.el8sat
rubygem-pulp_file_client (Red Hat package) - update to 1.15.1-1.el8sat
python-pulp-file (Red Hat package) - update to 1.15.1-2.el8pc
python-cffi (Red Hat package) - update to 1.15.1-4.el8pc
rubygem-nokogiri (Red Hat package) - update to 1.15.5-1.el8sat
rubygem-css_parser (Red Hat package) - update to 1.16.0-1.el8sat
python-six (Red Hat package) - update to 1.16.0-5.el8pc
rubygem-ffi (Red Hat package) - update to 1.16.3-1.el8sat
rubygem-git (Red Hat package) - update to 1.18.0-1.el8sat
python-opentelemetry_exporter_otlp_proto_common (Red Hat package) - addressed in versions 1.19.0-3.el8pc, 1.19.0-3.el8ui
python-opentelemetry_api (Red Hat package) - addressed in versions 1.19.0-3.el8pc, 1.19.0-3.el8ui
python-opentelemetry_sdk (Red Hat package) - addressed in versions 1.19.0-4.el8pc, 1.19.0-4.el8ui
python-opentelemetry_proto (Red Hat package) - addressed in versions 1.19.0-4.el8pc, 1.19.0-4.el8ui
python-opentelemetry_exporter_otlp (Red Hat package) - addressed in versions 1.19.0-4.el8pc, 1.19.0-4.el8ui
python-opentelemetry_exporter_otlp_proto_http (Red Hat package) - addressed in versions 1.19.0-5.el8pc, 1.19.0-5.el8ui
python-opentelemetry_exporter_otlp_proto_grpc (Red Hat package) - addressed in versions 1.19.0-5.el8pc, 1.19.0-5.el8ui
python-rhsm (Red Hat package) - update to 1.19.2-6.el8pc
rubygem-parallel (Red Hat package) - update to 1.23.0-1.el8sat
python-urllib3 (Red Hat package) - update to 1.26.18-2.el8pc
python-productmd (Red Hat package) - addressed in versions 1.33-5.el8pc, 1.33-6.el8ui
python-grpcio (Red Hat package) - addressed in versions 1.56.0-4.el8pc, 1.56.0-4.el8ui
rubygem-grpc (Red Hat package) - update to 1.58.0-1.el8sat
python-googleapis-common-protos (Red Hat package) - addressed in versions 1.59.1-4.el8pc, 1.59.1-4.el8ui
uxplay - addressed in versions 1.66-2.fc38, 1.66-2.fc39
rubygem-sshkey (Red Hat package) - update to 2.0.0-1.el8sat
rubygem-activerecord-session_store (Red Hat package) - update to 2.0.0-1.el8sat
rubygem-snaky_hash (Red Hat package) - update to 2.0.1-1.el8sat
pulpcore-selinux (Red Hat package) - addressed in versions 2.0.1-1.el8pc, 2.0.1-1.el8ui
rubygem-powerbar (Red Hat package) - update to 2.0.1-3.el8sat
python-urlman (Red Hat package) - addressed in versions 2.0.1-3.el8pc, 2.0.1-4.el8ui
python-aioredis (Red Hat package) - addressed in versions 2.0.1-5.el8pc, 2.0.1-5.el8ui
python-xlrd (Red Hat package) - addressed in versions 2.0.1-8.el8pc, 2.0.1-8.el8ui
rubygem-mustermann (Red Hat package) - update to 2.0.2-1.el8sat
rubygem-fog-ovirt (Red Hat package) - update to 2.0.2-1.el8sat
rubygem-ovirt_provision_plugin (Red Hat package) - update to 2.0.3-3.el8sat
rubygem-tzinfo (Red Hat package) - update to 2.0.6-1.el8sat
rubygem-net-ping (Red Hat package) - update to 2.0.8-1.el8sat
mosquitto (Red Hat package) - update to 2.0.17-1.el8sat
ansible-collection-redhat-satellite_operations (Red Hat package) - update to 2.1.0-1.el8sat
rubygem-rest-client (Red Hat package) - update to 2.1.0-1.el8sat
rubygem-highline (Red Hat package) - update to 2.1.0-1.el8sat
rubygem-logging-journald (Red Hat package) - update to 2.1.0-1.el8sat
rubygem-rack-test (Red Hat package) - update to 2.1.0-1.el8sat
rubygem-http-form_data (Red Hat package) - update to 2.1.1-2.el8sat
python-charset-normalizer (Red Hat package) - update to 2.1.1-4.el8pc
python-markupsafe (Red Hat package) - addressed in versions 2.1.2-4.el8pc, 2.1.2-4.el8ui
rubygem-pulp_ostree_client (Red Hat package) - update to 2.1.3-1.el8sat
rubygem-locale (Red Hat package) - update to 2.1.3-1.el8sat
python-click-shell (Red Hat package) - update to 2.1-6.el8pc
rubygem-rails-dom-testing (Red Hat package) - update to 2.2.0-1.el8sat
python-bracex (Red Hat package) - update to 2.2.1-4.el8pc
python-backoff (Red Hat package) - addressed in versions 2.2.1-4.el8pc, 2.2.1-4.el8ui
ansible-runner (Red Hat package) - addressed in versions 2.2.1-5.1.el8pc, 2.3.6-1.el8ap, 2.3.6-1.el9ap
rubygem-rainbow (Red Hat package) - update to 2.2.2-1.el8sat
rubygem-multipart-post (Red Hat package) - update to 2.2.3-1.el8sat
rubygem-sinatra (Red Hat package) - update to 2.2.4-1.el8sat
rubygem-rack-protection (Red Hat package) - update to 2.2.4-1.el8sat
rubygem-rack (Red Hat package) - update to 2.2.8-1.el8sat
rubygem-foreman_azure_rm (Red Hat package) - update to 2.2.10-2.el8sat
rubygem-tilt (Red Hat package) - update to 2.3.0-1.el8sat
rubygem-fog-core (Red Hat package) - update to 2.3.0-1.el8sat
rubygem-logging (Red Hat package) - update to 2.3.1-1.el8sat
python-daemon (Red Hat package) - update to 2.3.1-4.3.el8pc
python-json-stream (Red Hat package) - addressed in versions 2.3.2-4.el8pc, 2.3.2-4.el8ui
rubygem-connection_pool (Red Hat package) - update to 2.4.1-1.el8sat
rubygem-coffee-script (Red Hat package) - update to 2.4.1-5.el8sat
rubygem-unicode-display_width (Red Hat package) - update to 2.4.2-1.el8sat
python-pyflakes (Red Hat package) - addressed in versions 2.5.0-0.1.el8pc, 2.5.0-2.el8pc
rubygem-ruby2ruby (Red Hat package) - update to 2.5.0-1.el8sat
python-pyjwt (Red Hat package) - addressed in versions 2.5.0-4.el8pc, 2.5.0-4.el8ui
python-pygtrie (Red Hat package) - addressed in versions 2.5.0-4.el8pc, 2.5.0-4.el8ui
rubygem-nio4r (Red Hat package) - update to 2.5.9-1.el8sat
rubygem-apipie-dsl (Red Hat package) - update to 2.6.1-1.el8sat
rubygem-zeitwerk (Red Hat package) - update to 2.6.12-1.el8sat
rubygem-jwt (Red Hat package) - update to 2.7.1-1.el8sat
rubygem-mail (Red Hat package) - update to 2.8.0.1-1.el8sat
python-dateutil (Red Hat package) - update to 2.8.2-5.el8pc
rubygem-httpclient (Red Hat package) - update to 2.8.3-4.el8sat
rubygem-addressable (Red Hat package) - update to 2.8.5-1.el8sat
katello-certs-tools (Red Hat package) - update to 2.9.0-2.el8sat
python-pycodestyle (Red Hat package) - addressed in versions 2.9.1-0.1.el8pc, 2.9.1-2.el8pc
rubygem-execjs (Red Hat package) - update to 2.9.1-1.el8sat
rubygem-statsd-instrument (Red Hat package) - update to 2.9.2-1.el8sat
python-semantic-version (Red Hat package) - update to 2.10.0-4.el8pc
python-bindep (Red Hat package) - update to 2.11.0-4.el8pc
python311-time-machine - update to 2.13.0-150400.9.3.1
python311-time-machine-debuginfo - update to 2.13.0-150400.9.3.1
python-time-machine-debugsource - update to 2.13.0-150400.9.3.1
ansible-core (Red Hat package) - addressed in versions 2.15.10-1.el8ap, 2.15.10-1.el9ap
rubygem-pulp_container_client (Red Hat package) - update to 2.16.3-1.el8sat
python-pulp-container (Red Hat package) - addressed in versions 2.16.4-1.el8pc, 2.16.4-1.el8ui
python-pulp-container-client (Red Hat package) - update to 2.16.4-1.0.1.el8ui
python-pygments (Red Hat package) - update to 2.17.0-1.el8pc
ansible-collection-community-crypto (Red Hat package) - update to 2.18.0-1.el8ui
python-pycparser (Red Hat package) - update to 2.21-5.el8pc
rubygem-loofah (Red Hat package) - update to 2.22.0-1.el8sat
python-requests (Red Hat package) - update to 2.31.0-4.el8pc
rubygem-pulp_deb_client (Red Hat package) - update to 3.0.0-1.el8sat
rubygem-infoblox (Red Hat package) - update to 3.0.0-4.el8sat
python-pulp_manifest (Red Hat package) - update to 3.0.0-4.el8pc
python-aiodns (Red Hat package) - addressed in versions 3.0.0-6.el8pc, 3.0.0-6.el8ui
python-pulp-deb (Red Hat package) - update to 3.0.1-1.el8pc
rubygem-roadie-rails (Red Hat package) - update to 3.1.0-1.el8sat
rubygem-journald-logger (Red Hat package) - update to 3.1.0-1.el8sat
rubygem-optimist (Red Hat package) - update to 3.1.0-1.el8sat
python-django-import-export (Red Hat package) - addressed in versions 3.1.0-3.el8pc, 3.1.0-3.el8ui
python-openpyxl (Red Hat package) - addressed in versions 3.1.0-4.el8pc, 3.1.0-4.el8ui
rubygem-responders (Red Hat package) - update to 3.1.1-1.el8sat
python-pyparsing (Red Hat package) - addressed in versions 3.1.1-3.el8pc, 3.1.1-3.el8ui
rubygem-retriable (Red Hat package) - update to 3.1.2-3.el8sat
python-jinja2 (Red Hat package) - addressed in versions 3.1.3-0.1.el8pc, 3.1.3-1.el8pc, 3.1.3-1.el8ui
python-psycopg (Red Hat package) - addressed in versions 3.1.9-3.el8pc, 3.1.9-4.el8ui
python-dynaconf (Red Hat package) - addressed in versions 3.1.12-3.el8pc, 3.1.12-3.el8ui
rubygem-bcrypt (Red Hat package) - update to 3.1.19-1.el8sat
python-gitpython (Red Hat package) - update to 3.1.40-2.el8pc
rubygem-deep_cloneable (Red Hat package) - update to 3.2.0-1.el8sat
rubygem-representable (Red Hat package) - update to 3.2.0-1.el8sat
rubygem-smart_proxy_pulp (Red Hat package) - update to 3.2.0-3.el8sat
rubygem-foreman_webhooks (Red Hat package) - update to 3.2.2-1.el8sat
rubygem-builder (Red Hat package) - update to 3.2.4-2.el8sat
python-django (Red Hat package) - addressed in versions 3.2.22-1.el8pc, 4.2.9-1.el8pc, 4.2.11-1.el9ap, 4.2.11-1.el8ui
rubygem-http (Red Hat package) - update to 3.3.0-2.el8sat
python-django-guid (Red Hat package) - addressed in versions 3.3.0-4.el8pc, 3.3.0-4.el8ui
python-tablib (Red Hat package) - addressed in versions 3.3.0-4.el8pc, 3.3.0-4.el8ui
rubygem-will_paginate (Red Hat package) - update to 3.3.1-1.el8sat
python-bleach (Red Hat package) - update to 3.3.1-5.el8pc
python-types-cryptography (Red Hat package) - addressed in versions 3.3.23.2-3.el8pc, 3.3.23.2-4.el8ui
python-zipp (Red Hat package) - addressed in versions 3.4.0-7.el8pc, 3.4.0-7.el8ui
python-markdown (Red Hat package) - update to 3.4.1-3.el8pc
rubygem-diffy (Red Hat package) - update to 3.4.2-1.el8sat
rubygem-sprockets-rails (Red Hat package) - update to 3.4.2-1.el8sat
satellite-clone (Red Hat package) - update to 3.5.0-1.el8sat
rubygem-mime-types (Red Hat package) - update to 3.5.1-1.el8sat
rubygem-smart_proxy_ansible (Red Hat package) - update to 3.5.5-1.el8sat
python-asgiref (Red Hat package) - addressed in versions 3.6.0-4.el8pc, 3.6.0-4.el8ui
rubygem-fog-vsphere (Red Hat package) - update to 3.6.2-1.el8sat
rubygem-rbvmomi2 (Red Hat package) - update to 3.7.0-1.el8sat
python-aiohttp-debuginfo - addressed in versions 3.7.4-5, 3.7.4-6
python-aiohttp-debugsource - addressed in versions 3.7.4-5, 3.7.4-6
python-aiohttp-help - addressed in versions 3.7.4-5, 3.7.4-6
python3-aiohttp - addressed in versions 3.7.4-5, 3.7.4-6
python-aiohttp - addressed in versions 3.7.4-5, 3.7.4-6
python-aiohttp (Debian package) - update to 3.8.4-1+deb12u1
python-aiohttp - addressed in versions 3.8.6-1.fc38, 3.8.6-1.fc39, 3.9.1-1.el9
rubygem-hammer_cli (Red Hat package) - update to 3.9.0-1.el8sat
foreman-selinux (Red Hat package) - update to 3.9.0-1.el8sat
foreman-proxy (Red Hat package) - update to 3.9.0-1.el8sat
rubygem-hammer_cli_foreman (Red Hat package) - update to 3.9.0.1-1.el8sat
foreman-installer (Red Hat package) - update to 3.9.0-3.el8sat
foreman (Red Hat package) - update to 3.9.1.6-1.el8sat
python-aiohttp (Red Hat package) - addressed in versions 3.9.2-0.1.el8pc, 3.9.2-1.el8pc, 3.9.2-1.el8ui, 3.9.3-1.el9ap
python3x-aiohttp (Red Hat package) - update to 3.9.3-1.el8ap
python311-aiohttp - update to 3.9.3-150400.10.14.1
python-aiohttp-debugsource - update to 3.9.3-150400.10.14.1
python311-aiohttp-debuginfo - update to 3.9.3-150400.10.14.1
rubygem-pulp_python_client (Red Hat package) - update to 3.10.0-1.el8sat
python-djangorestframework (Red Hat package) - addressed in versions 3.14.0-3.el8pc, 3.14.0-3.el8ui
python-pycryptodomex (Red Hat package) - addressed in versions 3.14.1-5.el8ui, 3.20.0-1.el8pc
python-pulp-rpm (Red Hat package) - addressed in versions 3.19.12-1.el8pc, 3.23.0-2.el8ui, 3.23.3-1.el8pc
rubygem-ruby_parser (Red Hat package) - update to 3.20.3-1.el8sat
rubygem-fog-aws (Red Hat package) - update to 3.21.0-1.el8sat
python-pulpcore (Red Hat package) - addressed in versions 3.22.22-2.el8pc, 3.28.24-1.el9ap, 3.39.8-2.el8pc, 3.39.11-1.el8ui
rubygem-pulp_rpm_client (Red Hat package) - update to 3.23.0-1.el8sat
python-pulp-rpm-client (Red Hat package) - update to 3.23.0-2.0.1.el8ui
rubygem-google-protobuf (Red Hat package) - update to 3.24.3-1.el8sat
python3x-pulpcore (Red Hat package) - update to 3.28.24-1.el8ap
rubygem-pulpcore_client (Red Hat package) - update to 3.39.2-1.el8sat
python-pulpcore-client (Red Hat package) - update to 3.39.7-1.0.1.el8ui
rubygem-mime-types-data (Red Hat package) - update to 3.2023.1003-1.el8sat
rubygem-net-scp (Red Hat package) - update to 4.0.0-1.el8sat
ansible-collection-redhat-satellite (Red Hat package) - update to 4.0.0-2.el8sat
rubygem-rbnacl (Red Hat package) - update to 4.0.2-2.el8sat
python-async-timeout (Red Hat package) - addressed in versions 4.0.2-5.el8pc, 4.0.2-5.el8ui, 4.0.3-0.1.el8pc
python-gitdb (Red Hat package) - update to 4.0.10-4.el8pc
foreman-discovery-image (Red Hat package) - update to 4.1.0-31.el8sat
python-uritemplate (Red Hat package) - addressed in versions 4.1.1-4.el8pc, 4.1.1-5.el8ui
python-pycares (Red Hat package) - addressed in versions 4.1.2-4.el8pc, 4.1.2-5.el8ui
rubygem-scoped_search (Red Hat package) - update to 4.1.12-1.el8sat
rubygem-sprockets (Red Hat package) - update to 4.2.1-1.el8sat
rubygem-prometheus-client (Red Hat package) - update to 4.2.2-1.el8sat
python3x-django (Red Hat package) - update to 4.2.11-1.el8ap
rubygem-ancestry (Red Hat package) - update to 4.3.3-1.el8sat
python-redis (Red Hat package) - addressed in versions 4.3.4-4.el8pc, 4.3.4-4.el8ui
candlepin (Red Hat package) - update to 4.3.12-1.el8sat
IBM Cloud Pak for Watson AIOps - update to 4.4.0
rubygem-ovirt-engine-sdk (Red Hat package) - update to 4.4.1-1.el8sat
rubygem-facter (Red Hat package) - update to 4.5.0-1.el8sat
rubygem-redis (Red Hat package) - update to 4.5.1-1.el8sat
automation-controller (Red Hat package) - addressed in versions 4.5.5-2.el8ap, 4.5.5-2.el9ap
python-typing-extensions (Red Hat package) - addressed in versions 4.7.1-4.el8pc, 4.7.1-4.el8ui
Red Hat Update Infrastructure (RHUI) - update to 4.8.0
rhui-tools (Red Hat package) - update to 4.8.0.1-1.el8ui
rhui-installer (Red Hat package) - update to 4.8.0.2-1.el8ui
python-pexpect (Red Hat package) - update to 4.8.0-5.el8pc
rubygem-katello (Red Hat package) - addressed in versions 4.9.0.23-1.el8sat, 4.11.0.9-1.el8sat
python-lxml (Red Hat package) - update to 4.9.2-4.el8pc
rubygem-kubeclient (Red Hat package) - update to 4.10.1-1.el8sat
python-jsonschema (Red Hat package) - addressed in versions 4.10.3-3.el8pc, 4.10.3-3.el8ui
katello (Red Hat package) - update to 4.11.0-1.el8sat
rubygem-sexp_processor (Red Hat package) - update to 4.17.0-1.el8sat
python-protobuf (Red Hat package) - addressed in versions 4.21.6-4.el8pc, 4.21.6-4.el8ui
python-flake8 (Red Hat package) - addressed in versions 5.0.0-0.1.el8pc, 5.0.0-2.el8pc
rubygem-hashie (Red Hat package) - update to 5.0.0-1.el8sat
rubygem-coffee-rails (Red Hat package) - update to 5.0.0-2.el8sat
python-smmap (Red Hat package) - update to 5.0.0-5.el8pc
katello-selinux (Red Hat package) - update to 5.0.2-1.el8sat
rubygem-public_suffix (Red Hat package) - update to 5.0.3-1.el8sat
rubygem-roadie (Red Hat package) - update to 5.1.0-1.el8sat
ansible-lint (Red Hat package) - update to 5.4.0-1.el8pc
rubygem-audited (Red Hat package) - update to 5.4.2-1.el8sat
rubygem-friendly_id (Red Hat package) - update to 5.5.1-1.el8sat
python-pbr (Red Hat package) - update to 5.8.0-6.el8pc
rubygem-sequel (Red Hat package) - update to 5.74.0-1.el8sat
python-whitenoise (Red Hat package) - addressed in versions 6.0.0-4.el8pc, 6.0.0-4.el8ui
python-importlib-metadata (Red Hat package) - addressed in versions 6.0.1-3.el8pc, 6.0.1-4.el8ui
python-multidict (Red Hat package) - addressed in versions 6.0.4-4.el8pc, 6.0.4-4.el8ui
rubygem-foreman_puppet (Red Hat package) - update to 6.1.1-1.el8sat
rubygem-actionmailer (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-actioncable (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-actionmailbox (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-activesupport (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-actionpack (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-actiontext (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-actionview (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-activejob (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-activemodel (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-activerecord (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-activestorage (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-railties (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-rails (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-puma (Red Hat package) - update to 6.4.2-1.el8sat
rubygem-secure_headers (Red Hat package) - update to 6.5.0-1.el8sat
rubygem-sidekiq (Red Hat package) - update to 6.5.12-1.el8sat
satellite (Red Hat package) - addressed in versions 6.14.3-1.el8sat, 6.15.0-2.el8sat
satellite-installer (Red Hat package) - update to 6.15.0.2-1.el8sat
python-tenacity (Red Hat package) - update to 7.0.0-5.el8pc
rubygem-rails-i18n (Red Hat package) - update to 7.0.8-1.el8sat
rubygem-foreman_openscap (Red Hat package) - update to 7.1.1-1.el8sat
rubygem-net-ssh (Red Hat package) - update to 7.2.0-1.el8sat
rubygem-kafo (Red Hat package) - update to 7.3.0-1.el8sat
puppetserver (Red Hat package) - update to 7.14.0-1.el8sat
puppet-agent (Red Hat package) - update to 7.28.0-1.el8sat
python-click (Red Hat package) - addressed in versions 8.1.3-4.el8pc, 8.1.3-4.el8ui
python-wcmatch (Red Hat package) - update to 8.3-5.el8pc
rubygem-foreman-tasks (Red Hat package) - update to 9.0.4-1.el8sat
rubygem-foreman_rh_cloud (Red Hat package) - update to 9.0.55-1.el8sat
llhttp - addressed in versions 9.1.3-1.el9, 9.1.3-1.fc38, 9.1.3-1.fc39
rubygem-foreman_templates (Red Hat package) - update to 9.4.0-1.el8sat
puppetlabs-stdlib (Red Hat package) - update to 9.4.1-1.el8sat
python-pillow (Red Hat package) - update to 9.5.0-4.el8pc
rubygem-foreman_theme_satellite (Red Hat package) - addressed in versions 12.0.0.8-1.el8sat, 13.2.3-1.el8sat
rubygem-foreman_remote_execution (Red Hat package) - update to 12.0.5-1.el8sat
rubygem-foreman_ansible (Red Hat package) - update to 13.0.3-1.el8sat
python-rich (Red Hat package) - update to 13.3.1-7.el8pc
python-gunicorn (Red Hat package) - addressed in versions 20.1.0-7.el8pc, 20.1.0-7.1.2.el8ui
rubygem-foreman_bootdisk (Red Hat package) - update to 21.2.1-1.el8sat
python-packaging (Red Hat package) - addressed in versions 21.3-5.el8pc, 21.3-5.el8ui
python-attrs (Red Hat package) - addressed in versions 21.4.0-5.el8pc, 21.4.0-5.el8ui
python-contextlib2 (Red Hat package) - update to 21.6.0-6.el8pc
python-aiofiles (Red Hat package) - addressed in versions 22.1.0-4.el8pc, 22.1.0-4.el8ui
rubygem-foreman_discovery (Red Hat package) - update to 23.0.1-1.1.el8sat
python-django-filter (Red Hat package) - addressed in versions 23.2-3.el8pc, 23.2-3.el8ui
python-pyOpenSSL (Red Hat package) - update to 23.3.0-1.el8pc
python-cryptography (Red Hat package) - addressed in versions 41.0.6-1.el8pc, 41.0.6-1.el8ui
python-pytz (Red Hat package) - addressed in versions 2022.2.1-5.el8pc, 2022.2.1-5.el8ui
python-certifi (Red Hat package) - update to 2022.12.7-3.el8pc
python-uuid6 (Red Hat package) - addressed in versions 2023.5.2-4.el8pc, 2023.5.2-4.el8ui
python-diff-match-patch (Red Hat package) - addressed in versions 20200713-6.el8pc, 20200713-6.el8ui
foreman-bootloaders-redhat (Red Hat package) - update to 202102220000-1.el8sat

External References

Related Security Bulletins