Path traversal in aiohttp - CVE-2024-23334

Vulnerability identifier: #VU85886

CSH Severity: High

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-23334

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: The vulnerability is being exploited in the wild

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences in aiohttp.web.static(follow_symlinks=True). A remote attacker can send a specially crafted HTTP request and read arbitrary files on the system.

Request examples:

For windows: /static/../D:\flag.txt Poc

For Linux: /static/../../../../etc/passwd

aiohttp
Debian Linux
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
Fedora
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Python 3 Module
openSUSE Leap
Ubuntu
openEuler
IBM Cloud Pak for Security
Red Hat Satellite
IBM Fusion HCI
Red Hat Update Infrastructure (RHUI)
QRadar Suite
python3-aiohttp (Ubuntu package)
postgresql-evr (Red Hat package)
satellite-maintain (Red Hat package)
rubygem-kafo_wizards (Red Hat package)
yggdrasil-worker-forwarder (Red Hat package)
rubygem-hammer_cli_foreman_webhooks (Red Hat package)
rubygem-ruby2_keywords (Red Hat package)
rubygem-apipie-params (Red Hat package)
rubygem-smart_proxy_dhcp_remote_isc (Red Hat package)
rubygem-faraday-cookie_jar (Red Hat package)
rubygem-hammer_cli_foreman_puppet (Red Hat package)
rubygem-smart_proxy_dhcp_infoblox (Red Hat package)
rubygem-hammer_cli_foreman_tasks (Red Hat package)
rubygem-declarative (Red Hat package)
rubygem-hammer_cli_foreman_virt_who_configure (Red Hat package)
rubygem-uber (Red Hat package)
rubygem-sd_notify (Red Hat package)
rubygem-hammer_cli_foreman_leapp (Red Hat package)
rubygem-trailblazer-option (Red Hat package)
rubygem-server_sent_events (Red Hat package)
rubygem-fog-xml (Red Hat package)
rubygem-hammer_cli_foreman_kubevirt (Red Hat package)
rubygem-websocket-extensions (Red Hat package)
rubygem-rkerberos (Red Hat package)
rubygem-foreman_kubevirt (Red Hat package)
libcomps (Red Hat package)
python-debian (Red Hat package)
rubygem-hammer_cli_foreman_openscap (Red Hat package)
ansiblerole-foreman_scap_client (Red Hat package)
python-requirements-parser (Red Hat package)
rubygem-net_http_unix (Red Hat package)
rubygem-hammer_cli_foreman_remote_execution (Red Hat package)
rubygem-get_process_mem (Red Hat package)
python-ruamel-yaml-clib (Red Hat package)
rubygem-hammer_cli_foreman_templates (Red Hat package)
rubygem-hammer_cli_foreman_azure_rm (Red Hat package)
rubygem-hammer_cli_foreman_bootdisk (Red Hat package)
rubygem-xmlrpc (Red Hat package)
rubygem-polyglot (Red Hat package)
rubygem-timeliness (Red Hat package)
rubygem-foreman_hooks (Red Hat package)
puppet-foreman_scap_client (Red Hat package)
rubygem-net-ssh-krb (Red Hat package)
rubygem-smart_proxy_dynflow_core (Red Hat package)
rubygem-bundler_ext (Red Hat package)
rubygem-rsec (Red Hat package)
python-sqlparse (Red Hat package)
python-colorama (Red Hat package)
rubygem-openscap (Red Hat package)
python-galaxy-importer (Red Hat package)
python-json-stream-rs-tokenizer (Red Hat package)
python-iniparse (Red Hat package)
rubygem-mqtt (Red Hat package)
rubygem-google-cloud-compute (Red Hat package)
python-gnupg (Red Hat package)
python-webencodings (Red Hat package)
python-inflection (Red Hat package)
rubygem-graphql-batch (Red Hat package)
rubygem-redfish_client (Red Hat package)
puppet-agent-oauth (Red Hat package)
rubygem-foreman_virt_who_configure (Red Hat package)
rubygem-ldap_fluff (Red Hat package)
rubygem-hammer_cli_foreman_ansible (Red Hat package)
rubygem-apipie-bindings (Red Hat package)
rubygem-concurrent-ruby-edge (Red Hat package)
rubygem-http_parser.rb (Red Hat package)
rubygem-domain_name (Red Hat package)
python-mccabe (Red Hat package)
rubygem-fx (Red Hat package)
python-ptyprocess (Red Hat package)
python-defusedxml (Red Hat package)
rubygem-anemone (Red Hat package)
rubygem-promise.rb (Red Hat package)
rubygem-algebrick (Red Hat package)
python-schema (Red Hat package)
rubygem-websocket-driver (Red Hat package)
rubygem-ms_rest (Red Hat package)
libsolv (Red Hat package)
rubygem-ruby-libvirt (Red Hat package)
rubygem-validates_lengths_from_database (Red Hat package)
rubygem-colorize (Red Hat package)
python-dataclasses (Red Hat package)
rubygem-gitlab-sidekiq-fetcher (Red Hat package)
rubygem-google-apis-core (Red Hat package)
rubygem-smart_proxy_dynflow (Red Hat package)
python-commonmark (Red Hat package)
rubygem-smart_proxy_openscap (Red Hat package)
rubygem-smart_proxy_shellhooks (Red Hat package)
rubygem-newt (Red Hat package)
rubygem-webpack-rails (Red Hat package)
python-websockify (Red Hat package)
rubygem-rb-inotify (Red Hat package)
python-toml (Red Hat package)
rubygem-smart_proxy_remote_execution_ssh (Red Hat package)
rubygem-netrc (Red Hat package)
rubygem-rubyipmi (Red Hat package)
rubygem-gapic-common (Red Hat package)
rubygem-fog-libvirt (Red Hat package)
rubygem-ms_rest_azure (Red Hat package)
python-lockfile (Red Hat package)
rubygem-rabl (Red Hat package)
rubygem-memoist (Red Hat package)
rubygem-signet (Red Hat package)
python-ruamel-yaml (Red Hat package)
rubygem-net-ldap (Red Hat package)
python-ecdsa (Red Hat package)
python-pyrsistent (Red Hat package)
rubygem-azure_mgmt_resources (Red Hat package)
python-future (Red Hat package)
rubygem-azure_mgmt_subscriptions (Red Hat package)
python-docutils (Red Hat package)
rubygem-pulp_ansible_client (Red Hat package)
python-pulp-ansible (Red Hat package)
python-pulp-glue (Red Hat package)
python-pulp-cli (Red Hat package)
rubygem-azure_mgmt_compute (Red Hat package)
rubygem-azure_mgmt_storage (Red Hat package)
rubygem-azure_mgmt_network (Red Hat package)
python-drf-spectacular (Red Hat package)
rubygem-google-apis-compute_v1 (Red Hat package)
python-drf-nested-routers (Red Hat package)
rubygem-excon (Red Hat package)
rubygem-faraday-em_synchrony (Red Hat package)
rubygem-faraday-patron (Red Hat package)
rubygem-faraday-rack (Red Hat package)
rubygem-method_source (Red Hat package)
rubygem-faraday-em_http (Red Hat package)
python-django-lifecycle (Red Hat package)
foreman-discovery-image-service (Red Hat package)
rubygem-deacon (Red Hat package)
python-djangorestframework-queryfields (Red Hat package)
rubygem-robotex (Red Hat package)
rubygem-faraday-httpclient (Red Hat package)
rubygem-hammer_cli_foreman_google (Red Hat package)
satellite-convert2rhel-toolkit (Red Hat package)
rubygem-faraday-net_http (Red Hat package)
foreman-fapolicyd (Red Hat package)
rubygem-marcel (Red Hat package)
rubygem-openscap_parser (Red Hat package)
createrepo_c (Red Hat package)
python-asyncio-throttle (Red Hat package)
rubygem-faraday-retry (Red Hat package)
rubygem-acts_as_list (Red Hat package)
python-async-lru (Red Hat package)
python-bleach-allowlist (Red Hat package)
rubygem-foreman_google (Red Hat package)
rubygem-faraday-multipart (Red Hat package)
rubygem-oauth-tty (Red Hat package)
rubygem-http-cookie (Red Hat package)
rubygem-smart_proxy_discovery (Red Hat package)
rubygem-crass (Red Hat package)
pulpcore-obsolete-packages (Red Hat package)
python-brotli (Red Hat package)
rubygem-journald-native (Red Hat package)
libsodium (Red Hat package)
rubygem-google-cloud-common (Red Hat package)
rubygem-formatador (Red Hat package)
rubygem-smart_proxy_container_gateway (Red Hat package)
rubygem-fog-openstack (Red Hat package)
rubygem-faraday-excon (Red Hat package)
rubygem-oauth (Red Hat package)
rubygem-angular-rails-templates (Red Hat package)
python-et-xmlfile (Red Hat package)
rubygem-smart_proxy_dns_infoblox (Red Hat package)
rubygem-rack-cors (Red Hat package)
rubygem-foreman_leapp (Red Hat package)
rubygem-jsonpath (Red Hat package)
python-django-readonly-field (Red Hat package)
rubygem-version_gem (Red Hat package)
rubygem-recursive-open-struct (Red Hat package)
rubygem-os (Red Hat package)
rubygem-little-plugger (Red Hat package)
rubygem-mini_mime (Red Hat package)
rubygem-concurrent-ruby (Red Hat package)
rubygem-faraday-net_http_persistent (Red Hat package)
rubygem-hammer_cli_foreman_discovery (Red Hat package)
rubygem-faraday_middleware (Red Hat package)
rubygem-hammer_cli_foreman_admin (Red Hat package)
python-ansible-builder (Red Hat package)
rubygem-fog-json (Red Hat package)
rubygem-kafo_parsers (Red Hat package)
rubygem-globalid (Red Hat package)
rubygem-thor (Red Hat package)
rubygem-apipie-rails (Red Hat package)
python-enrich (Red Hat package)
rubygem-et-orbi (Red Hat package)
python-deprecated (Red Hat package)
rubygem-googleauth (Red Hat package)
rubygem-google-cloud-errors (Red Hat package)
python-drf-access-policy (Red Hat package)
python-xlwt (Red Hat package)
rubygem-gssapi (Red Hat package)
python-aiosignal (Red Hat package)
rubygem-rack-jsonp (Red Hat package)
rubygem-clamp (Red Hat package)
python-frozenlist (Red Hat package)
rubygem-jgrep (Red Hat package)
python-parsley (Red Hat package)
rubygem-fog-kubevirt (Red Hat package)
rubygem-safemode (Red Hat package)
rubygem-googleapis-common-protos (Red Hat package)
rubygem-googleapis-common-protos-types (Red Hat package)
rubygem-hocon (Red Hat package)
rubygem-raabro (Red Hat package)
rubygem-daemons (Red Hat package)
python-odfpy (Red Hat package)
rubygem-sqlite3 (Red Hat package)
python-pyjwkest (Red Hat package)
python-url-normalize (Red Hat package)
rubygem-foreman_maintain (Red Hat package)
receptor (Red Hat package)
rubygem-stomp (Red Hat package)
rubygem-activerecord-import (Red Hat package)
rubygem-amazing_print (Red Hat package)
rubygem-ansi (Red Hat package)
python-aiohttp-xmlrpc (Red Hat package)
rubygem-request_store (Red Hat package)
rubygem-deface (Red Hat package)
rubygem-pg (Red Hat package)
rubygem-rails-html-sanitizer (Red Hat package)
rubygem-google-cloud-core (Red Hat package)
rubygem-google-cloud-env (Red Hat package)
rubygem-smart_proxy_discovery_image (Red Hat package)
python-jq (Red Hat package)
foreman-obsolete-packages (Red Hat package)
rubygem-puma-status (Red Hat package)
dynflow-utils (Red Hat package)
rubygem-pulp_certguard_client (Red Hat package)
rubygem-http-accept (Red Hat package)
python-distro (Red Hat package)
rubygem-google-cloud-compute-v1 (Red Hat package)
ansiblerole-insights-client (Red Hat package)
python-pulp-certguard (Red Hat package)
rubygem-msgpack (Red Hat package)
katello-client-bootstrap (Red Hat package)
cjson (Red Hat package)
rubygem-rchardet (Red Hat package)
rubygem-fast_gettext (Red Hat package)
rubygem-webrick (Red Hat package)
rubygem-fugit (Red Hat package)
rubygem-dynflow (Red Hat package)
python-yarl (Red Hat package)
rubygem-hammer_cli_katello (Red Hat package)
rubygem-faraday (Red Hat package)
rubygem-gettext_i18n_rails (Red Hat package)
rubygem-erubi (Red Hat package)
rubygem-coffee-script-source (Red Hat package)
rubygem-graphql (Red Hat package)
rubygem-i18n (Red Hat package)
python-wrapt (Red Hat package)
python-markuppy (Red Hat package)
rubygem-multi_json (Red Hat package)
rubygem-pulp_file_client (Red Hat package)
python-pulp-file (Red Hat package)
python-cffi (Red Hat package)
rubygem-nokogiri (Red Hat package)
rubygem-css_parser (Red Hat package)
python-six (Red Hat package)
rubygem-ffi (Red Hat package)
rubygem-git (Red Hat package)
python-opentelemetry_exporter_otlp_proto_common (Red Hat package)
python-opentelemetry_api (Red Hat package)
python-opentelemetry_sdk (Red Hat package)
python-opentelemetry_proto (Red Hat package)
python-opentelemetry_exporter_otlp (Red Hat package)
python-opentelemetry_exporter_otlp_proto_grpc (Red Hat package)
python-opentelemetry_exporter_otlp_proto_http (Red Hat package)
python-rhsm (Red Hat package)
rubygem-parallel (Red Hat package)
python-urllib3 (Red Hat package)
python-productmd (Red Hat package)
python-grpcio (Red Hat package)
rubygem-grpc (Red Hat package)
python-googleapis-common-protos (Red Hat package)
rubygem-sshkey (Red Hat package)
rubygem-activerecord-session_store (Red Hat package)
rubygem-snaky_hash (Red Hat package)
pulpcore-selinux (Red Hat package)
rubygem-powerbar (Red Hat package)
python-urlman (Red Hat package)
python-aioredis (Red Hat package)
python-xlrd (Red Hat package)
rubygem-fog-ovirt (Red Hat package)
rubygem-mustermann (Red Hat package)
rubygem-ovirt_provision_plugin (Red Hat package)
rubygem-tzinfo (Red Hat package)
rubygem-net-ping (Red Hat package)
mosquitto (Red Hat package)
rubygem-logging-journald (Red Hat package)
ansible-collection-redhat-satellite_operations (Red Hat package)
rubygem-rack-test (Red Hat package)
rubygem-highline (Red Hat package)
rubygem-rest-client (Red Hat package)
rubygem-http-form_data (Red Hat package)
python-charset-normalizer (Red Hat package)
python-markupsafe (Red Hat package)
rubygem-pulp_ostree_client (Red Hat package)
rubygem-locale (Red Hat package)
python-click-shell (Red Hat package)
rubygem-rails-dom-testing (Red Hat package)
python-backoff (Red Hat package)
python-bracex (Red Hat package)
ansible-runner (Red Hat package)
rubygem-rainbow (Red Hat package)
rubygem-multipart-post (Red Hat package)
rubygem-rack-protection (Red Hat package)
rubygem-sinatra (Red Hat package)
rubygem-rack (Red Hat package)
rubygem-foreman_azure_rm (Red Hat package)
rubygem-fog-core (Red Hat package)
rubygem-tilt (Red Hat package)
rubygem-logging (Red Hat package)
python-daemon (Red Hat package)
python-json-stream (Red Hat package)
rubygem-connection_pool (Red Hat package)
rubygem-coffee-script (Red Hat package)
rubygem-unicode-display_width (Red Hat package)
python-pyflakes (Red Hat package)
rubygem-ruby2ruby (Red Hat package)
python-pyjwt (Red Hat package)
python-pygtrie (Red Hat package)
rubygem-nio4r (Red Hat package)
rubygem-apipie-dsl (Red Hat package)
rubygem-zeitwerk (Red Hat package)
rubygem-jwt (Red Hat package)
rubygem-mail (Red Hat package)
python-dateutil (Red Hat package)
rubygem-httpclient (Red Hat package)
rubygem-addressable (Red Hat package)
katello-certs-tools (Red Hat package)
python-pycodestyle (Red Hat package)
rubygem-execjs (Red Hat package)
rubygem-statsd-instrument (Red Hat package)
python-semantic-version (Red Hat package)
python-bindep (Red Hat package)
python311-time-machine
python311-time-machine-debuginfo
python-time-machine-debugsource
ansible-core (Red Hat package)
rubygem-pulp_container_client (Red Hat package)
python-pulp-container (Red Hat package)
python-pulp-container-client (Red Hat package)
python-pygments (Red Hat package)
ansible-collection-community-crypto (Red Hat package)
python-pycparser (Red Hat package)
rubygem-loofah (Red Hat package)
python-requests (Red Hat package)
rubygem-pulp_deb_client (Red Hat package)
rubygem-infoblox (Red Hat package)
python-pulp_manifest (Red Hat package)
python-aiodns (Red Hat package)
python-pulp-deb (Red Hat package)
rubygem-journald-logger (Red Hat package)
rubygem-optimist (Red Hat package)
rubygem-roadie-rails (Red Hat package)
python-django-import-export (Red Hat package)
python-openpyxl (Red Hat package)
rubygem-responders (Red Hat package)
python-pyparsing (Red Hat package)
rubygem-retriable (Red Hat package)
python-jinja2 (Red Hat package)
python-psycopg (Red Hat package)
python-dynaconf (Red Hat package)
rubygem-bcrypt (Red Hat package)
python-gitpython (Red Hat package)
rubygem-deep_cloneable (Red Hat package)
rubygem-representable (Red Hat package)
rubygem-smart_proxy_pulp (Red Hat package)
rubygem-foreman_webhooks (Red Hat package)
rubygem-builder (Red Hat package)
python-django (Red Hat package)
rubygem-http (Red Hat package)
python-tablib (Red Hat package)
python-django-guid (Red Hat package)
rubygem-will_paginate (Red Hat package)
python-bleach (Red Hat package)
python-types-cryptography (Red Hat package)
python-zipp (Red Hat package)
python-markdown (Red Hat package)
rubygem-diffy (Red Hat package)
rubygem-sprockets-rails (Red Hat package)
satellite-clone (Red Hat package)
rubygem-mime-types (Red Hat package)
rubygem-smart_proxy_ansible (Red Hat package)
python-asgiref (Red Hat package)
rubygem-fog-vsphere (Red Hat package)
rubygem-rbvmomi2 (Red Hat package)
python-aiohttp
python-aiohttp-debuginfo
python-aiohttp-debugsource
python-aiohttp-help
python3-aiohttp
python-aiohttp-doc (Ubuntu package)
python-aiohttp (Debian package)
rubygem-hammer_cli (Red Hat package)
foreman-proxy (Red Hat package)
foreman-selinux (Red Hat package)
rubygem-hammer_cli_foreman (Red Hat package)
foreman-installer (Red Hat package)
foreman (Red Hat package)
python-aiohttp (Red Hat package)
python3x-aiohttp (Red Hat package)
python311-aiohttp-debuginfo
python311-aiohttp
rubygem-pulp_python_client (Red Hat package)
python-djangorestframework (Red Hat package)
python-pycryptodomex (Red Hat package)
python-pulp-rpm (Red Hat package)
rubygem-ruby_parser (Red Hat package)
rubygem-fog-aws (Red Hat package)
python-pulpcore (Red Hat package)
rubygem-pulp_rpm_client (Red Hat package)
python-pulp-rpm-client (Red Hat package)
rubygem-google-protobuf (Red Hat package)
python3x-pulpcore (Red Hat package)
rubygem-pulpcore_client (Red Hat package)
python-pulpcore-client (Red Hat package)
rubygem-mime-types-data (Red Hat package)
rubygem-net-scp (Red Hat package)
ansible-collection-redhat-satellite (Red Hat package)
rubygem-rbnacl (Red Hat package)
python-async-timeout (Red Hat package)
python-gitdb (Red Hat package)
foreman-discovery-image (Red Hat package)
python-uritemplate (Red Hat package)
python-pycares (Red Hat package)
rubygem-scoped_search (Red Hat package)
rubygem-sprockets (Red Hat package)
rubygem-prometheus-client (Red Hat package)
python3x-django (Red Hat package)
rubygem-ancestry (Red Hat package)
python-redis (Red Hat package)
candlepin (Red Hat package)
rubygem-ovirt-engine-sdk (Red Hat package)
rubygem-facter (Red Hat package)
rubygem-redis (Red Hat package)
automation-controller (Red Hat package)
python-typing-extensions (Red Hat package)
rhui-tools (Red Hat package)
rhui-installer (Red Hat package)
python-pexpect (Red Hat package)
rubygem-katello (Red Hat package)
python-lxml (Red Hat package)
rubygem-kubeclient (Red Hat package)
python-jsonschema (Red Hat package)
katello (Red Hat package)
rubygem-sexp_processor (Red Hat package)
python-protobuf (Red Hat package)
python-flake8 (Red Hat package)
rubygem-hashie (Red Hat package)
rubygem-coffee-rails (Red Hat package)
python-smmap (Red Hat package)
katello-selinux (Red Hat package)
rubygem-public_suffix (Red Hat package)
rubygem-roadie (Red Hat package)
ansible-lint (Red Hat package)
rubygem-audited (Red Hat package)
rubygem-friendly_id (Red Hat package)
python-pbr (Red Hat package)
rubygem-sequel (Red Hat package)
python-whitenoise (Red Hat package)
python-importlib-metadata (Red Hat package)
python-multidict (Red Hat package)
rubygem-foreman_puppet (Red Hat package)
rubygem-activerecord (Red Hat package)
rubygem-actiontext (Red Hat package)
rubygem-railties (Red Hat package)
rubygem-actioncable (Red Hat package)
rubygem-activestorage (Red Hat package)
rubygem-activesupport (Red Hat package)
rubygem-rails (Red Hat package)
rubygem-actionmailbox (Red Hat package)
rubygem-actionmailer (Red Hat package)
rubygem-actionpack (Red Hat package)
rubygem-actionview (Red Hat package)
rubygem-activejob (Red Hat package)
rubygem-activemodel (Red Hat package)
rubygem-puma (Red Hat package)
rubygem-secure_headers (Red Hat package)
rubygem-sidekiq (Red Hat package)
satellite (Red Hat package)
satellite-installer (Red Hat package)
python-tenacity (Red Hat package)
rubygem-rails-i18n (Red Hat package)
rubygem-foreman_openscap (Red Hat package)
rubygem-net-ssh (Red Hat package)
rubygem-kafo (Red Hat package)
puppetserver (Red Hat package)
puppet-agent (Red Hat package)
python-click (Red Hat package)
python-wcmatch (Red Hat package)
rubygem-foreman-tasks (Red Hat package)
rubygem-foreman_rh_cloud (Red Hat package)
rubygem-foreman_templates (Red Hat package)
puppetlabs-stdlib (Red Hat package)
python-pillow (Red Hat package)
rubygem-foreman_theme_satellite (Red Hat package)
rubygem-foreman_remote_execution (Red Hat package)
rubygem-foreman_ansible (Red Hat package)
python-rich (Red Hat package)
python-gunicorn (Red Hat package)
rubygem-foreman_bootdisk (Red Hat package)
python-packaging (Red Hat package)
python-attrs (Red Hat package)
python-contextlib2 (Red Hat package)
python-aiofiles (Red Hat package)
rubygem-foreman_discovery (Red Hat package)
python-django-filter (Red Hat package)
python-pyOpenSSL (Red Hat package)
python-cryptography (Red Hat package)
python-pytz (Red Hat package)
python-certifi (Red Hat package)
python-uuid6 (Red Hat package)
python-gcsfs
python-diff-match-patch (Red Hat package)
foreman-bootloaders-redhat (Red Hat package)
IBM Cloud Pak for Watson AIOps
Maximo Application Suite - IoT Component

Install update from vendor's website.

aiohttp - update to 3.9.2
QRadar Suite - update to 1.10.19.0
Red Hat Satellite - addressed in versions 6.14.3, 6.15.0
python3-aiohttp (Ubuntu package) - addressed in versions Ubuntu Pro, 3.8.1-4ubuntu0.2, 3.9.1-1ubuntu0.1
postgresql-evr (Red Hat package) - update to 0.0.2-1.el8sat
satellite-maintain (Red Hat package) - update to 0.0.2-1.el8sat
rubygem-kafo_wizards (Red Hat package) - update to 0.0.2-2.el8sat
yggdrasil-worker-forwarder (Red Hat package) - update to 0.0.3-1.el8sat
rubygem-hammer_cli_foreman_webhooks (Red Hat package) - update to 0.0.4-1.el8sat
rubygem-ruby2_keywords (Red Hat package) - update to 0.0.5-1.el8sat
rubygem-apipie-params (Red Hat package) - update to 0.0.5-5.1.el8sat
rubygem-smart_proxy_dhcp_remote_isc (Red Hat package) - update to 0.0.5-6.el8sat
rubygem-faraday-cookie_jar (Red Hat package) - update to 0.0.6-2.el8sat
rubygem-hammer_cli_foreman_puppet (Red Hat package) - update to 0.0.7-1.el8sat
rubygem-smart_proxy_dhcp_infoblox (Red Hat package) - update to 0.0.17-1.el8sat
rubygem-hammer_cli_foreman_tasks (Red Hat package) - update to 0.0.19-1.el8sat
rubygem-declarative (Red Hat package) - update to 0.0.20-1.el8sat
rubygem-hammer_cli_foreman_virt_who_configure (Red Hat package) - update to 0.1.0-1.el8sat
rubygem-uber (Red Hat package) - update to 0.1.0-3.el8sat
rubygem-sd_notify (Red Hat package) - update to 0.1.1-1.el8sat
rubygem-hammer_cli_foreman_leapp (Red Hat package) - update to 0.1.1-2.el8sat
rubygem-trailblazer-option (Red Hat package) - update to 0.1.2-1.el8sat
rubygem-server_sent_events (Red Hat package) - update to 0.1.3-1.el8sat
rubygem-fog-xml (Red Hat package) - update to 0.1.4-1.el8sat
rubygem-hammer_cli_foreman_kubevirt (Red Hat package) - update to 0.1.5-1.el8sat
rubygem-websocket-extensions (Red Hat package) - update to 0.1.5-2.el8sat
rubygem-rkerberos (Red Hat package) - update to 0.1.5-20.1.el8sat
rubygem-foreman_kubevirt (Red Hat package) - update to 0.1.9-4.el8sat
libcomps (Red Hat package) - addressed in versions 0.1.18-8.el8pc, 0.1.18-8.el8ui
python-debian (Red Hat package) - update to 0.1.44-6.el8pc
rubygem-hammer_cli_foreman_openscap (Red Hat package) - update to 0.2.0-1.el8sat
ansiblerole-foreman_scap_client (Red Hat package) - update to 0.2.0-2.el8sat
python-requirements-parser (Red Hat package) - update to 0.2.0-6.el8pc
rubygem-net_http_unix (Red Hat package) - update to 0.2.2-2.el8sat
rubygem-hammer_cli_foreman_remote_execution (Red Hat package) - update to 0.2.3-1.el8sat
rubygem-get_process_mem (Red Hat package) - update to 0.2.7-2.1.el8sat
python-ruamel-yaml-clib (Red Hat package) - update to 0.2.7-4.el8pc
rubygem-hammer_cli_foreman_templates (Red Hat package) - update to 0.3.0-1.el8sat
rubygem-hammer_cli_foreman_azure_rm (Red Hat package) - update to 0.3.0-1.el8sat
rubygem-hammer_cli_foreman_bootdisk (Red Hat package) - update to 0.3.0-3.el8sat
rubygem-xmlrpc (Red Hat package) - update to 0.3.3-1.el8sat
rubygem-polyglot (Red Hat package) - update to 0.3.5-3.1.el8sat
rubygem-timeliness (Red Hat package) - update to 0.3.10-2.el8sat
rubygem-foreman_hooks (Red Hat package) - update to 0.3.17-3.1.el8sat
puppet-foreman_scap_client (Red Hat package) - update to 0.4.0-1.el8sat
rubygem-net-ssh-krb (Red Hat package) - update to 0.4.0-4.el8sat
rubygem-smart_proxy_dynflow_core (Red Hat package) - update to 0.4.1-1.el8sat
rubygem-bundler_ext (Red Hat package) - update to 0.4.1-6.el8sat
rubygem-rsec (Red Hat package) - update to 0.4.3-5.el8sat
python-sqlparse (Red Hat package) - addressed in versions 0.4.4-3.el8pc, 0.4.4-3.el8ui
python-colorama (Red Hat package) - update to 0.4.4-6.el8pc
rubygem-openscap (Red Hat package) - update to 0.4.9-9.el8sat
python-galaxy-importer (Red Hat package) - addressed in versions 0.4.18-2.el8pc, 0.4.19-2.el8pc
python-json-stream-rs-tokenizer (Red Hat package) - addressed in versions 0.4.25-3.el8pc, 0.4.25-3.el8ui
python-iniparse (Red Hat package) - update to 0.4-39.el8pc
rubygem-mqtt (Red Hat package) - update to 0.5.0-1.el8sat
rubygem-google-cloud-compute (Red Hat package) - update to 0.5.0-1.el8sat
python-gnupg (Red Hat package) - addressed in versions 0.5.0-4.el8pc, 0.5.0-4.el8ui
python-webencodings (Red Hat package) - update to 0.5.1-6.el8pc
python-inflection (Red Hat package) - addressed in versions 0.5.1-6.el8pc, 0.5.1-6.el8ui
rubygem-graphql-batch (Red Hat package) - update to 0.5.3-1.el8sat
rubygem-redfish_client (Red Hat package) - update to 0.5.4-1.el8sat
puppet-agent-oauth (Red Hat package) - update to 0.5.10-1.el8sat
rubygem-foreman_virt_who_configure (Red Hat package) - addressed in versions 0.5.19-1.el8sat, 0.5.20-1.el8sat
rubygem-ldap_fluff (Red Hat package) - update to 0.6.0-1.el8sat
rubygem-hammer_cli_foreman_ansible (Red Hat package) - update to 0.6.0-1.el8sat
rubygem-apipie-bindings (Red Hat package) - update to 0.6.0-1.el8sat
rubygem-concurrent-ruby-edge (Red Hat package) - update to 0.6.0-3.el8sat
rubygem-http_parser.rb (Red Hat package) - update to 0.6.0-3.1.el8sat
rubygem-domain_name (Red Hat package) - update to 0.6.20231109-1.el8sat
python-mccabe (Red Hat package) - addressed in versions 0.7.0-0.1.el8pc, 0.7.0-3.el8pc
rubygem-fx (Red Hat package) - update to 0.7.0-1.el8sat
python-ptyprocess (Red Hat package) - update to 0.7.0-3.el8pc
python-defusedxml (Red Hat package) - addressed in versions 0.7.1-6.el8pc, 0.7.1-6.el8ui
rubygem-anemone (Red Hat package) - update to 0.7.2-23.el8sat
rubygem-promise.rb (Red Hat package) - update to 0.7.4-3.el8sat
rubygem-algebrick (Red Hat package) - update to 0.7.5-1.el8sat
python-schema (Red Hat package) - update to 0.7.5-5.el8pc
rubygem-websocket-driver (Red Hat package) - update to 0.7.6-1.el8sat
rubygem-ms_rest (Red Hat package) - update to 0.7.6-1.el8sat
libsolv (Red Hat package) - addressed in versions 0.7.22-6.el8pc, 0.7.22-6.el8ui
rubygem-ruby-libvirt (Red Hat package) - update to 0.8.0-1.el8sat
rubygem-validates_lengths_from_database (Red Hat package) - update to 0.8.0-1.el8sat
rubygem-colorize (Red Hat package) - update to 0.8.1-2.el8sat
python-dataclasses (Red Hat package) - update to 0.8-6.el8pc
rubygem-gitlab-sidekiq-fetcher (Red Hat package) - update to 0.9.0-2.el8sat
rubygem-google-apis-core (Red Hat package) - update to 0.9.1-1.el8sat
rubygem-smart_proxy_dynflow (Red Hat package) - update to 0.9.1-1.el8sat
python-commonmark (Red Hat package) - update to 0.9.1-8.el8pc
rubygem-smart_proxy_openscap (Red Hat package) - update to 0.9.2-1.el8sat
rubygem-smart_proxy_shellhooks (Red Hat package) - update to 0.9.2-3.el8sat
rubygem-newt (Red Hat package) - update to 0.9.7-3.1.el8sat
rubygem-webpack-rails (Red Hat package) - update to 0.9.11-1.el8sat
python-websockify (Red Hat package) - update to 0.10.0-3.el8sat
rubygem-rb-inotify (Red Hat package) - update to 0.10.1-1.el8sat
python-toml (Red Hat package) - update to 0.10.2-5.el8pc
rubygem-smart_proxy_remote_execution_ssh (Red Hat package) - update to 0.10.3-1.el8sat
rubygem-netrc (Red Hat package) - update to 0.11.0-6.el8sat
rubygem-rubyipmi (Red Hat package) - update to 0.11.1-1.el8sat
rubygem-gapic-common (Red Hat package) - update to 0.12.0-1.el8sat
rubygem-fog-libvirt (Red Hat package) - update to 0.12.0-1.el8sat
rubygem-ms_rest_azure (Red Hat package) - update to 0.12.0-1.el8sat
python-lockfile (Red Hat package) - update to 0.12.2-4.el8pc
rubygem-rabl (Red Hat package) - update to 0.16.1-1.el8sat
rubygem-memoist (Red Hat package) - update to 0.16.2-1.el8sat
rubygem-signet (Red Hat package) - update to 0.17.0-1.el8sat
python-ruamel-yaml (Red Hat package) - update to 0.17.21-5.el8pc
rubygem-net-ldap (Red Hat package) - update to 0.18.0-1.el8sat
python-ecdsa (Red Hat package) - addressed in versions 0.18.0-4.el8pc, 0.18.0-4.el8ui
python-pyrsistent (Red Hat package) - addressed in versions 0.18.1-5.el8pc, 0.18.1-5.el8ui
rubygem-azure_mgmt_resources (Red Hat package) - update to 0.18.2-1.el8sat
python-future (Red Hat package) - addressed in versions 0.18.3-4.el8pc, 0.18.3-4.el8ui
rubygem-azure_mgmt_subscriptions (Red Hat package) - update to 0.18.5-1.el8sat
python-docutils (Red Hat package) - update to 0.20.1-3.el8pc
rubygem-pulp_ansible_client (Red Hat package) - update to 0.20.2-1.el8sat
python-pulp-ansible (Red Hat package) - update to 0.20.2-3.el8pc
python-pulp-glue (Red Hat package) - addressed in versions 0.21.2-3.el8pc, 0.21.2-3.el8ui
python-pulp-cli (Red Hat package) - update to 0.21.2-5.el8pc
rubygem-azure_mgmt_compute (Red Hat package) - update to 0.22.0-1.el8sat
rubygem-azure_mgmt_storage (Red Hat package) - update to 0.23.0-1.el8sat
rubygem-azure_mgmt_network (Red Hat package) - update to 0.26.1-2.el8sat
python-drf-spectacular (Red Hat package) - addressed in versions 0.26.5-4.el8pc, 0.26.5-4.el8ui
rubygem-google-apis-compute_v1 (Red Hat package) - update to 0.54.0-1.el8sat
python-drf-nested-routers (Red Hat package) - addressed in versions 0.93.4-5.el8pc, 0.93.4-5.el8ui
rubygem-excon (Red Hat package) - update to 0.104.0-1.el8sat
rubygem-faraday-em_synchrony (Red Hat package) - update to 1.0.0-1.el8sat
rubygem-faraday-patron (Red Hat package) - update to 1.0.0-1.el8sat
rubygem-faraday-rack (Red Hat package) - update to 1.0.0-1.el8sat
rubygem-method_source (Red Hat package) - update to 1.0.0-1.el8sat
rubygem-faraday-em_http (Red Hat package) - update to 1.0.0-1.el8sat
python-django-lifecycle (Red Hat package) - addressed in versions 1.0.0-3.el8pc, 1.0.0-3.el8ui
foreman-discovery-image-service (Red Hat package) - update to 1.0.0-4.1.el8sat
rubygem-deacon (Red Hat package) - update to 1.0.0-5.el8sat
python-djangorestframework-queryfields (Red Hat package) - addressed in versions 1.0.0-7.el8pc, 1.0.0-7.el8ui
rubygem-robotex (Red Hat package) - update to 1.0.0-22.el8sat
rubygem-faraday-httpclient (Red Hat package) - update to 1.0.1-1.el8sat
rubygem-hammer_cli_foreman_google (Red Hat package) - update to 1.0.1-1.el8sat
satellite-convert2rhel-toolkit (Red Hat package) - update to 1.0.1-1.el8sat
rubygem-faraday-net_http (Red Hat package) - update to 1.0.1-1.el8sat
foreman-fapolicyd (Red Hat package) - update to 1.0.1-2.el8sat
rubygem-marcel (Red Hat package) - update to 1.0.2-1.el8sat
rubygem-openscap_parser (Red Hat package) - update to 1.0.2-2.el8sat
createrepo_c (Red Hat package) - addressed in versions 1.0.2-5.el8pc, 1.0.2-5.el8ui
python-asyncio-throttle (Red Hat package) - addressed in versions 1.0.2-6.el8pc, 1.0.2-6.el8ui
rubygem-faraday-retry (Red Hat package) - update to 1.0.3-1.el8sat
rubygem-acts_as_list (Red Hat package) - update to 1.0.3-2.el8sat
python-async-lru (Red Hat package) - update to 1.0.3-4.el8pc
python-bleach-allowlist (Red Hat package) - update to 1.0.3-6.el8pc
rubygem-foreman_google (Red Hat package) - update to 1.0.4-1.el8sat
rubygem-faraday-multipart (Red Hat package) - update to 1.0.4-1.el8sat
rubygem-oauth-tty (Red Hat package) - update to 1.0.5-1.el8sat
rubygem-http-cookie (Red Hat package) - update to 1.0.5-1.el8sat
rubygem-smart_proxy_discovery (Red Hat package) - update to 1.0.5-9.el8sat
rubygem-crass (Red Hat package) - update to 1.0.6-2.el8sat
pulpcore-obsolete-packages (Red Hat package) - update to 1.0-9.el8pc
python-brotli (Red Hat package) - addressed in versions 1.0.9-4.el8pc, 1.0.9-5.el8ui
rubygem-journald-native (Red Hat package) - update to 1.0.12-1.el8sat
libsodium (Red Hat package) - update to 1.0.17-3.el8sat
rubygem-google-cloud-common (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-formatador (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-smart_proxy_container_gateway (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-fog-openstack (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-faraday-excon (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-oauth (Red Hat package) - update to 1.1.0-1.el8sat
rubygem-angular-rails-templates (Red Hat package) - update to 1.1.0-2.el8sat
python-et-xmlfile (Red Hat package) - addressed in versions 1.1.0-5.el8pc, 1.1.0-5.el8ui
rubygem-smart_proxy_dns_infoblox (Red Hat package) - update to 1.1.0-7.el8sat
rubygem-rack-cors (Red Hat package) - update to 1.1.1-1.el8sat
rubygem-foreman_leapp (Red Hat package) - update to 1.1.1-1.el8sat
rubygem-jsonpath (Red Hat package) - update to 1.1.2-1.el8sat
python-django-readonly-field (Red Hat package) - addressed in versions 1.1.2-3.el8pc, 1.1.2-3.el8ui
rubygem-version_gem (Red Hat package) - update to 1.1.3-1.el8sat
rubygem-recursive-open-struct (Red Hat package) - update to 1.1.3-1.el8sat
rubygem-os (Red Hat package) - update to 1.1.4-1.el8sat
rubygem-little-plugger (Red Hat package) - update to 1.1.4-3.el8sat
rubygem-mini_mime (Red Hat package) - update to 1.1.5-1.el8sat
rubygem-concurrent-ruby (Red Hat package) - update to 1.1.10-1.el8sat
rubygem-faraday-net_http_persistent (Red Hat package) - update to 1.2.0-1.el8sat
rubygem-hammer_cli_foreman_discovery (Red Hat package) - update to 1.2.0-1.el8sat
rubygem-faraday_middleware (Red Hat package) - update to 1.2.0-1.el8sat
rubygem-hammer_cli_foreman_admin (Red Hat package) - update to 1.2.0-1.el8sat
python-ansible-builder (Red Hat package) - addressed in versions 1.2.0-1.el8pc, 3.0.0-1.el8pc
rubygem-fog-json (Red Hat package) - update to 1.2.0-4.el8sat
rubygem-kafo_parsers (Red Hat package) - update to 1.2.1-1.el8sat
rubygem-globalid (Red Hat package) - update to 1.2.1-1.el8sat
rubygem-thor (Red Hat package) - update to 1.2.2-1.el8sat
rubygem-apipie-rails (Red Hat package) - update to 1.2.3-1.el8sat
python-enrich (Red Hat package) - update to 1.2.6-7.el8pc
rubygem-et-orbi (Red Hat package) - update to 1.2.7-1.el8sat
python-deprecated (Red Hat package) - addressed in versions 1.2.13-4.el8pc, 1.2.13-4.el8ui
rubygem-googleauth (Red Hat package) - update to 1.3.0-1.el8sat
rubygem-google-cloud-errors (Red Hat package) - update to 1.3.0-1.el8sat
python-drf-access-policy (Red Hat package) - addressed in versions 1.3.0-3.el8pc, 1.3.0-3.el8ui
python-xlwt (Red Hat package) - addressed in versions 1.3.0-6.el8pc, 1.3.0-6.el8ui
rubygem-gssapi (Red Hat package) - update to 1.3.1-1.el8sat
python-aiosignal (Red Hat package) - addressed in versions 1.3.1-4.el8pc, 1.3.1-4.el8ui
rubygem-rack-jsonp (Red Hat package) - update to 1.3.1-10.el8sat
rubygem-clamp (Red Hat package) - update to 1.3.2-1.el8sat
python-frozenlist (Red Hat package) - addressed in versions 1.3.3-4.el8pc, 1.3.3-4.el8ui
rubygem-jgrep (Red Hat package) - update to 1.3.3-11.el8sat
python-parsley (Red Hat package) - update to 1.3-5.el8pc
rubygem-fog-kubevirt (Red Hat package) - update to 1.3.7-1.el8sat
rubygem-safemode (Red Hat package) - update to 1.3.8-1.el8sat
rubygem-googleapis-common-protos (Red Hat package) - update to 1.3.12-1.el8sat
rubygem-googleapis-common-protos-types (Red Hat package) - update to 1.4.0-1.el8sat
rubygem-hocon (Red Hat package) - update to 1.4.0-1.el8sat
rubygem-raabro (Red Hat package) - update to 1.4.0-1.el8sat
rubygem-daemons (Red Hat package) - update to 1.4.1-1.el8sat
python-odfpy (Red Hat package) - addressed in versions 1.4.1-9.el8pc, 1.4.1-9.el8ui
rubygem-sqlite3 (Red Hat package) - update to 1.4.2-1.el8sat
python-pyjwkest (Red Hat package) - addressed in versions 1.4.2-8.el8pc, 1.4.2-8.el8ui
python-url-normalize (Red Hat package) - addressed in versions 1.4.3-6.el8pc, 1.4.3-7.el8ui
rubygem-foreman_maintain (Red Hat package) - update to 1.4.4-1.el8sat
receptor (Red Hat package) - addressed in versions 1.4.5-1.el8ap, 1.4.5-1.el9ap
rubygem-stomp (Red Hat package) - update to 1.4.10-1.el8sat
rubygem-activerecord-import (Red Hat package) - update to 1.5.0-1.el8sat
rubygem-amazing_print (Red Hat package) - update to 1.5.0-1.el8sat
rubygem-ansi (Red Hat package) - update to 1.5.0-3.el8sat
python-aiohttp-xmlrpc (Red Hat package) - addressed in versions 1.5.0-5.el8pc, 1.5.0-5.el8ui
rubygem-request_store (Red Hat package) - update to 1.5.1-1.el8sat
rubygem-deface (Red Hat package) - update to 1.5.3-3.el8sat
rubygem-pg (Red Hat package) - update to 1.5.4-1.el8sat
rubygem-rails-html-sanitizer (Red Hat package) - update to 1.6.0-1.el8sat
rubygem-google-cloud-core (Red Hat package) - update to 1.6.0-1.el8sat
rubygem-google-cloud-env (Red Hat package) - update to 1.6.0-1.el8sat
rubygem-smart_proxy_discovery_image (Red Hat package) - update to 1.6.0-2.el8sat
python-jq (Red Hat package) - addressed in versions 1.6.0-3.el8pc, 1.6.0-3.el8ui
foreman-obsolete-packages (Red Hat package) - update to 1.6-1.el8sat
rubygem-puma-status (Red Hat package) - update to 1.6-1.el8sat
dynflow-utils (Red Hat package) - update to 1.6.3-1.el8sat
rubygem-pulp_certguard_client (Red Hat package) - update to 1.6.4-1.el8sat
rubygem-http-accept (Red Hat package) - update to 1.7.0-1.el8sat
python-distro (Red Hat package) - update to 1.7.0-3.el8pc
rubygem-google-cloud-compute-v1 (Red Hat package) - update to 1.7.1-1.el8sat
ansiblerole-insights-client (Red Hat package) - update to 1.7.1-2.el8sat
python-pulp-certguard (Red Hat package) - update to 1.7.1-2.el8pc
rubygem-msgpack (Red Hat package) - update to 1.7.2-1.el8sat
katello-client-bootstrap (Red Hat package) - update to 1.7.9-1.el8sat
cjson (Red Hat package) - update to 1.7.14-5.el8sat
rubygem-rchardet (Red Hat package) - update to 1.8.0-1.el8sat
rubygem-fast_gettext (Red Hat package) - update to 1.8.0-1.el8sat
rubygem-webrick (Red Hat package) - update to 1.8.1-1.el8sat
rubygem-fugit (Red Hat package) - update to 1.8.1-1.el8sat
rubygem-dynflow (Red Hat package) - update to 1.8.2-1.el8sat
python-yarl (Red Hat package) - addressed in versions 1.8.2-4.el8pc, 1.8.2-4.el8ui
rubygem-hammer_cli_katello (Red Hat package) - addressed in versions 1.9.1.3-1.el8sat, 1.11.1.2-1.el8sat
rubygem-faraday (Red Hat package) - update to 1.10.2-1.el8sat
rubygem-gettext_i18n_rails (Red Hat package) - update to 1.12.0-1.el8sat
rubygem-erubi (Red Hat package) - update to 1.12.0-1.el8sat
rubygem-coffee-script-source (Red Hat package) - update to 1.12.2-5.el8sat
rubygem-graphql (Red Hat package) - update to 1.13.20-1.el8sat
rubygem-i18n (Red Hat package) - update to 1.14.1-1.el8sat
python-wrapt (Red Hat package) - addressed in versions 1.14.1-4.el8pc, 1.14.1-4.el8ui
python-markuppy (Red Hat package) - addressed in versions 1.14-6.el8pc, 1.14-6.el8ui
rubygem-multi_json (Red Hat package) - update to 1.15.0-1.el8sat
rubygem-pulp_file_client (Red Hat package) - update to 1.15.1-1.el8sat
python-pulp-file (Red Hat package) - update to 1.15.1-2.el8pc
python-cffi (Red Hat package) - update to 1.15.1-4.el8pc
rubygem-nokogiri (Red Hat package) - update to 1.15.5-1.el8sat
rubygem-css_parser (Red Hat package) - update to 1.16.0-1.el8sat
python-six (Red Hat package) - update to 1.16.0-5.el8pc
rubygem-ffi (Red Hat package) - update to 1.16.3-1.el8sat
rubygem-git (Red Hat package) - update to 1.18.0-1.el8sat
python-opentelemetry_exporter_otlp_proto_common (Red Hat package) - addressed in versions 1.19.0-3.el8pc, 1.19.0-3.el8ui
python-opentelemetry_api (Red Hat package) - addressed in versions 1.19.0-3.el8pc, 1.19.0-3.el8ui
python-opentelemetry_sdk (Red Hat package) - addressed in versions 1.19.0-4.el8pc, 1.19.0-4.el8ui
python-opentelemetry_proto (Red Hat package) - addressed in versions 1.19.0-4.el8pc, 1.19.0-4.el8ui
python-opentelemetry_exporter_otlp (Red Hat package) - addressed in versions 1.19.0-4.el8pc, 1.19.0-4.el8ui
python-opentelemetry_exporter_otlp_proto_grpc (Red Hat package) - addressed in versions 1.19.0-5.el8pc, 1.19.0-5.el8ui
python-opentelemetry_exporter_otlp_proto_http (Red Hat package) - addressed in versions 1.19.0-5.el8pc, 1.19.0-5.el8ui
python-rhsm (Red Hat package) - update to 1.19.2-6.el8pc
rubygem-parallel (Red Hat package) - update to 1.23.0-1.el8sat
python-urllib3 (Red Hat package) - update to 1.26.18-2.el8pc
python-productmd (Red Hat package) - addressed in versions 1.33-5.el8pc, 1.33-6.el8ui
python-grpcio (Red Hat package) - addressed in versions 1.56.0-4.el8pc, 1.56.0-4.el8ui
rubygem-grpc (Red Hat package) - update to 1.58.0-1.el8sat
python-googleapis-common-protos (Red Hat package) - addressed in versions 1.59.1-4.el8pc, 1.59.1-4.el8ui
rubygem-sshkey (Red Hat package) - update to 2.0.0-1.el8sat
rubygem-activerecord-session_store (Red Hat package) - update to 2.0.0-1.el8sat
rubygem-snaky_hash (Red Hat package) - update to 2.0.1-1.el8sat
pulpcore-selinux (Red Hat package) - addressed in versions 2.0.1-1.el8pc, 2.0.1-1.el8ui
rubygem-powerbar (Red Hat package) - update to 2.0.1-3.el8sat
python-urlman (Red Hat package) - addressed in versions 2.0.1-3.el8pc, 2.0.1-4.el8ui
python-aioredis (Red Hat package) - addressed in versions 2.0.1-5.el8pc, 2.0.1-5.el8ui
python-xlrd (Red Hat package) - addressed in versions 2.0.1-8.el8pc, 2.0.1-8.el8ui
rubygem-fog-ovirt (Red Hat package) - update to 2.0.2-1.el8sat
rubygem-mustermann (Red Hat package) - update to 2.0.2-1.el8sat
rubygem-ovirt_provision_plugin (Red Hat package) - update to 2.0.3-3.el8sat
rubygem-tzinfo (Red Hat package) - update to 2.0.6-1.el8sat
rubygem-net-ping (Red Hat package) - update to 2.0.8-1.el8sat
mosquitto (Red Hat package) - update to 2.0.17-1.el8sat
rubygem-logging-journald (Red Hat package) - update to 2.1.0-1.el8sat
ansible-collection-redhat-satellite_operations (Red Hat package) - update to 2.1.0-1.el8sat
rubygem-rack-test (Red Hat package) - update to 2.1.0-1.el8sat
rubygem-highline (Red Hat package) - update to 2.1.0-1.el8sat
rubygem-rest-client (Red Hat package) - update to 2.1.0-1.el8sat
rubygem-http-form_data (Red Hat package) - update to 2.1.1-2.el8sat
python-charset-normalizer (Red Hat package) - update to 2.1.1-4.el8pc
python-markupsafe (Red Hat package) - addressed in versions 2.1.2-4.el8pc, 2.1.2-4.el8ui
rubygem-pulp_ostree_client (Red Hat package) - update to 2.1.3-1.el8sat
rubygem-locale (Red Hat package) - update to 2.1.3-1.el8sat
python-click-shell (Red Hat package) - update to 2.1-6.el8pc
rubygem-rails-dom-testing (Red Hat package) - update to 2.2.0-1.el8sat
python-backoff (Red Hat package) - addressed in versions 2.2.1-4.el8pc, 2.2.1-4.el8ui
python-bracex (Red Hat package) - update to 2.2.1-4.el8pc
ansible-runner (Red Hat package) - addressed in versions 2.2.1-5.1.el8pc, 2.3.6-1.el8ap, 2.3.6-1.el9ap
rubygem-rainbow (Red Hat package) - update to 2.2.2-1.el8sat
rubygem-multipart-post (Red Hat package) - update to 2.2.3-1.el8sat
rubygem-rack-protection (Red Hat package) - update to 2.2.4-1.el8sat
rubygem-sinatra (Red Hat package) - update to 2.2.4-1.el8sat
rubygem-rack (Red Hat package) - update to 2.2.8-1.el8sat
rubygem-foreman_azure_rm (Red Hat package) - update to 2.2.10-2.el8sat
rubygem-fog-core (Red Hat package) - update to 2.3.0-1.el8sat
rubygem-tilt (Red Hat package) - update to 2.3.0-1.el8sat
rubygem-logging (Red Hat package) - update to 2.3.1-1.el8sat
python-daemon (Red Hat package) - update to 2.3.1-4.3.el8pc
python-json-stream (Red Hat package) - addressed in versions 2.3.2-4.el8pc, 2.3.2-4.el8ui
rubygem-connection_pool (Red Hat package) - update to 2.4.1-1.el8sat
rubygem-coffee-script (Red Hat package) - update to 2.4.1-5.el8sat
rubygem-unicode-display_width (Red Hat package) - update to 2.4.2-1.el8sat
python-pyflakes (Red Hat package) - addressed in versions 2.5.0-0.1.el8pc, 2.5.0-2.el8pc
rubygem-ruby2ruby (Red Hat package) - update to 2.5.0-1.el8sat
python-pyjwt (Red Hat package) - addressed in versions 2.5.0-4.el8pc, 2.5.0-4.el8ui
python-pygtrie (Red Hat package) - addressed in versions 2.5.0-4.el8pc, 2.5.0-4.el8ui
rubygem-nio4r (Red Hat package) - update to 2.5.9-1.el8sat
rubygem-apipie-dsl (Red Hat package) - update to 2.6.1-1.el8sat
rubygem-zeitwerk (Red Hat package) - update to 2.6.12-1.el8sat
rubygem-jwt (Red Hat package) - update to 2.7.1-1.el8sat
IBM Fusion HCI - update to 2.8.0
rubygem-mail (Red Hat package) - update to 2.8.0.1-1.el8sat
python-dateutil (Red Hat package) - update to 2.8.2-5.el8pc
rubygem-httpclient (Red Hat package) - update to 2.8.3-4.el8sat
rubygem-addressable (Red Hat package) - update to 2.8.5-1.el8sat
katello-certs-tools (Red Hat package) - update to 2.9.0-2.el8sat
python-pycodestyle (Red Hat package) - addressed in versions 2.9.1-0.1.el8pc, 2.9.1-2.el8pc
rubygem-execjs (Red Hat package) - update to 2.9.1-1.el8sat
rubygem-statsd-instrument (Red Hat package) - update to 2.9.2-1.el8sat
python-semantic-version (Red Hat package) - update to 2.10.0-4.el8pc
python-bindep (Red Hat package) - update to 2.11.0-4.el8pc
python311-time-machine - update to 2.13.0-150400.9.3.1
python311-time-machine-debuginfo - update to 2.13.0-150400.9.3.1
python-time-machine-debugsource - update to 2.13.0-150400.9.3.1
ansible-core (Red Hat package) - addressed in versions 2.15.10-1.el8ap, 2.15.10-1.el9ap
rubygem-pulp_container_client (Red Hat package) - update to 2.16.3-1.el8sat
python-pulp-container (Red Hat package) - addressed in versions 2.16.4-1.el8pc, 2.16.4-1.el8ui
python-pulp-container-client (Red Hat package) - update to 2.16.4-1.0.1.el8ui
python-pygments (Red Hat package) - update to 2.17.0-1.el8pc
ansible-collection-community-crypto (Red Hat package) - update to 2.18.0-1.el8ui
python-pycparser (Red Hat package) - update to 2.21-5.el8pc
rubygem-loofah (Red Hat package) - update to 2.22.0-1.el8sat
python-requests (Red Hat package) - update to 2.31.0-4.el8pc
rubygem-pulp_deb_client (Red Hat package) - update to 3.0.0-1.el8sat
rubygem-infoblox (Red Hat package) - update to 3.0.0-4.el8sat
python-pulp_manifest (Red Hat package) - update to 3.0.0-4.el8pc
python-aiodns (Red Hat package) - addressed in versions 3.0.0-6.el8pc, 3.0.0-6.el8ui
python-pulp-deb (Red Hat package) - update to 3.0.1-1.el8pc
rubygem-journald-logger (Red Hat package) - update to 3.1.0-1.el8sat
rubygem-optimist (Red Hat package) - update to 3.1.0-1.el8sat
rubygem-roadie-rails (Red Hat package) - update to 3.1.0-1.el8sat
python-django-import-export (Red Hat package) - addressed in versions 3.1.0-3.el8pc, 3.1.0-3.el8ui
python-openpyxl (Red Hat package) - addressed in versions 3.1.0-4.el8pc, 3.1.0-4.el8ui
rubygem-responders (Red Hat package) - update to 3.1.1-1.el8sat
python-pyparsing (Red Hat package) - addressed in versions 3.1.1-3.el8pc, 3.1.1-3.el8ui
rubygem-retriable (Red Hat package) - update to 3.1.2-3.el8sat
python-jinja2 (Red Hat package) - addressed in versions 3.1.3-0.1.el8pc, 3.1.3-1.el8pc, 3.1.3-1.el8ui
python-psycopg (Red Hat package) - addressed in versions 3.1.9-3.el8pc, 3.1.9-4.el8ui
python-dynaconf (Red Hat package) - addressed in versions 3.1.12-3.el8pc, 3.1.12-3.el8ui
rubygem-bcrypt (Red Hat package) - update to 3.1.19-1.el8sat
python-gitpython (Red Hat package) - update to 3.1.40-2.el8pc
rubygem-deep_cloneable (Red Hat package) - update to 3.2.0-1.el8sat
rubygem-representable (Red Hat package) - update to 3.2.0-1.el8sat
rubygem-smart_proxy_pulp (Red Hat package) - update to 3.2.0-3.el8sat
rubygem-foreman_webhooks (Red Hat package) - update to 3.2.2-1.el8sat
rubygem-builder (Red Hat package) - update to 3.2.4-2.el8sat
python-django (Red Hat package) - addressed in versions 3.2.22-1.el8pc, 4.2.9-1.el8pc, 4.2.11-1.el9ap, 4.2.11-1.el8ui
rubygem-http (Red Hat package) - update to 3.3.0-2.el8sat
python-tablib (Red Hat package) - addressed in versions 3.3.0-4.el8pc, 3.3.0-4.el8ui
python-django-guid (Red Hat package) - addressed in versions 3.3.0-4.el8pc, 3.3.0-4.el8ui
rubygem-will_paginate (Red Hat package) - update to 3.3.1-1.el8sat
python-bleach (Red Hat package) - update to 3.3.1-5.el8pc
python-types-cryptography (Red Hat package) - addressed in versions 3.3.23.2-3.el8pc, 3.3.23.2-4.el8ui
python-zipp (Red Hat package) - addressed in versions 3.4.0-7.el8pc, 3.4.0-7.el8ui
python-markdown (Red Hat package) - update to 3.4.1-3.el8pc
rubygem-diffy (Red Hat package) - update to 3.4.2-1.el8sat
rubygem-sprockets-rails (Red Hat package) - update to 3.4.2-1.el8sat
satellite-clone (Red Hat package) - update to 3.5.0-1.el8sat
rubygem-mime-types (Red Hat package) - update to 3.5.1-1.el8sat
rubygem-smart_proxy_ansible (Red Hat package) - update to 3.5.5-1.el8sat
python-asgiref (Red Hat package) - addressed in versions 3.6.0-4.el8pc, 3.6.0-4.el8ui
rubygem-fog-vsphere (Red Hat package) - update to 3.6.2-1.el8sat
rubygem-rbvmomi2 (Red Hat package) - update to 3.7.0-1.el8sat
python-aiohttp - addressed in versions 3.7.4-2.el8, 3.7.4-7.el8, 3.9.3-1.el9, 3.9.3-1.fc38, 3.9.3-1.fc39
python-aiohttp - addressed in versions 3.7.4-5, 3.7.4-6
python-aiohttp-debuginfo - addressed in versions 3.7.4-5, 3.7.4-6
python-aiohttp-debugsource - addressed in versions 3.7.4-5, 3.7.4-6
python-aiohttp-help - addressed in versions 3.7.4-5, 3.7.4-6
python3-aiohttp - addressed in versions 3.7.4-5, 3.7.4-6
python-aiohttp-doc (Ubuntu package) - addressed in versions 3.8.1-4ubuntu0.2, 3.9.1-1ubuntu0.1
python-aiohttp (Debian package) - update to 3.8.4-1+deb12u1
rubygem-hammer_cli (Red Hat package) - update to 3.9.0-1.el8sat
foreman-proxy (Red Hat package) - update to 3.9.0-1.el8sat
foreman-selinux (Red Hat package) - update to 3.9.0-1.el8sat
rubygem-hammer_cli_foreman (Red Hat package) - update to 3.9.0.1-1.el8sat
foreman-installer (Red Hat package) - update to 3.9.0-3.el8sat
foreman (Red Hat package) - update to 3.9.1.6-1.el8sat
python-aiohttp (Red Hat package) - addressed in versions 3.9.2-0.1.el8pc, 3.9.2-1.el8pc, 3.9.2-1.el8ui, 3.9.3-1.el9ap
python3x-aiohttp (Red Hat package) - update to 3.9.3-1.el8ap
python311-aiohttp-debuginfo - update to 3.9.3-150400.10.14.1
python-aiohttp-debugsource - update to 3.9.3-150400.10.14.1
python311-aiohttp - update to 3.9.3-150400.10.14.1
rubygem-pulp_python_client (Red Hat package) - update to 3.10.0-1.el8sat
python-djangorestframework (Red Hat package) - addressed in versions 3.14.0-3.el8pc, 3.14.0-3.el8ui
python-pycryptodomex (Red Hat package) - addressed in versions 3.14.1-5.el8ui, 3.20.0-1.el8pc
python-pulp-rpm (Red Hat package) - addressed in versions 3.19.12-1.el8pc, 3.23.0-2.el8ui, 3.23.3-1.el8pc
rubygem-ruby_parser (Red Hat package) - update to 3.20.3-1.el8sat
rubygem-fog-aws (Red Hat package) - update to 3.21.0-1.el8sat
python-pulpcore (Red Hat package) - addressed in versions 3.22.22-2.el8pc, 3.28.24-1.el9ap, 3.39.8-2.el8pc, 3.39.11-1.el8ui
rubygem-pulp_rpm_client (Red Hat package) - update to 3.23.0-1.el8sat
python-pulp-rpm-client (Red Hat package) - update to 3.23.0-2.0.1.el8ui
rubygem-google-protobuf (Red Hat package) - update to 3.24.3-1.el8sat
python3x-pulpcore (Red Hat package) - update to 3.28.24-1.el8ap
rubygem-pulpcore_client (Red Hat package) - update to 3.39.2-1.el8sat
python-pulpcore-client (Red Hat package) - update to 3.39.7-1.0.1.el8ui
rubygem-mime-types-data (Red Hat package) - update to 3.2023.1003-1.el8sat
rubygem-net-scp (Red Hat package) - update to 4.0.0-1.el8sat
ansible-collection-redhat-satellite (Red Hat package) - update to 4.0.0-2.el8sat
rubygem-rbnacl (Red Hat package) - update to 4.0.2-2.el8sat
python-async-timeout (Red Hat package) - addressed in versions 4.0.2-5.el8pc, 4.0.2-5.el8ui, 4.0.3-0.1.el8pc
python-gitdb (Red Hat package) - update to 4.0.10-4.el8pc
foreman-discovery-image (Red Hat package) - update to 4.1.0-31.el8sat
python-uritemplate (Red Hat package) - addressed in versions 4.1.1-4.el8pc, 4.1.1-5.el8ui
python-pycares (Red Hat package) - addressed in versions 4.1.2-4.el8pc, 4.1.2-5.el8ui
rubygem-scoped_search (Red Hat package) - update to 4.1.12-1.el8sat
rubygem-sprockets (Red Hat package) - update to 4.2.1-1.el8sat
rubygem-prometheus-client (Red Hat package) - update to 4.2.2-1.el8sat
python3x-django (Red Hat package) - update to 4.2.11-1.el8ap
rubygem-ancestry (Red Hat package) - update to 4.3.3-1.el8sat
python-redis (Red Hat package) - addressed in versions 4.3.4-4.el8pc, 4.3.4-4.el8ui
candlepin (Red Hat package) - update to 4.3.12-1.el8sat
IBM Cloud Pak for Watson AIOps - update to 4.4.1
rubygem-ovirt-engine-sdk (Red Hat package) - update to 4.4.1-1.el8sat
rubygem-facter (Red Hat package) - update to 4.5.0-1.el8sat
rubygem-redis (Red Hat package) - update to 4.5.1-1.el8sat
automation-controller (Red Hat package) - addressed in versions 4.5.5-2.el8ap, 4.5.5-2.el9ap
python-typing-extensions (Red Hat package) - addressed in versions 4.7.1-4.el8pc, 4.7.1-4.el8ui
Red Hat Update Infrastructure (RHUI) - update to 4.8.0
rhui-tools (Red Hat package) - update to 4.8.0.1-1.el8ui
rhui-installer (Red Hat package) - update to 4.8.0.2-1.el8ui
python-pexpect (Red Hat package) - update to 4.8.0-5.el8pc
rubygem-katello (Red Hat package) - addressed in versions 4.9.0.23-1.el8sat, 4.11.0.9-1.el8sat
python-lxml (Red Hat package) - update to 4.9.2-4.el8pc
rubygem-kubeclient (Red Hat package) - update to 4.10.1-1.el8sat
python-jsonschema (Red Hat package) - addressed in versions 4.10.3-3.el8pc, 4.10.3-3.el8ui
katello (Red Hat package) - update to 4.11.0-1.el8sat
rubygem-sexp_processor (Red Hat package) - update to 4.17.0-1.el8sat
python-protobuf (Red Hat package) - addressed in versions 4.21.6-4.el8pc, 4.21.6-4.el8ui
python-flake8 (Red Hat package) - addressed in versions 5.0.0-0.1.el8pc, 5.0.0-2.el8pc
rubygem-hashie (Red Hat package) - update to 5.0.0-1.el8sat
rubygem-coffee-rails (Red Hat package) - update to 5.0.0-2.el8sat
python-smmap (Red Hat package) - update to 5.0.0-5.el8pc
katello-selinux (Red Hat package) - update to 5.0.2-1.el8sat
rubygem-public_suffix (Red Hat package) - update to 5.0.3-1.el8sat
rubygem-roadie (Red Hat package) - update to 5.1.0-1.el8sat
ansible-lint (Red Hat package) - update to 5.4.0-1.el8pc
rubygem-audited (Red Hat package) - update to 5.4.2-1.el8sat
rubygem-friendly_id (Red Hat package) - update to 5.5.1-1.el8sat
python-pbr (Red Hat package) - update to 5.8.0-6.el8pc
rubygem-sequel (Red Hat package) - update to 5.74.0-1.el8sat
python-whitenoise (Red Hat package) - addressed in versions 6.0.0-4.el8pc, 6.0.0-4.el8ui
python-importlib-metadata (Red Hat package) - addressed in versions 6.0.1-3.el8pc, 6.0.1-4.el8ui
python-multidict (Red Hat package) - addressed in versions 6.0.4-4.el8pc, 6.0.4-4.el8ui
rubygem-foreman_puppet (Red Hat package) - update to 6.1.1-1.el8sat
rubygem-activerecord (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-actiontext (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-railties (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-actioncable (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-activestorage (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-activesupport (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-rails (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-actionmailbox (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-actionmailer (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-actionpack (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-actionview (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-activejob (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-activemodel (Red Hat package) - update to 6.1.7.6-1.el8sat
rubygem-puma (Red Hat package) - update to 6.4.2-1.el8sat
rubygem-secure_headers (Red Hat package) - update to 6.5.0-1.el8sat
rubygem-sidekiq (Red Hat package) - update to 6.5.12-1.el8sat
satellite (Red Hat package) - addressed in versions 6.14.3-1.el8sat, 6.15.0-2.el8sat
satellite-installer (Red Hat package) - update to 6.15.0.2-1.el8sat
python-tenacity (Red Hat package) - update to 7.0.0-5.el8pc
rubygem-rails-i18n (Red Hat package) - update to 7.0.8-1.el8sat
rubygem-foreman_openscap (Red Hat package) - update to 7.1.1-1.el8sat
rubygem-net-ssh (Red Hat package) - update to 7.2.0-1.el8sat
rubygem-kafo (Red Hat package) - update to 7.3.0-1.el8sat
puppetserver (Red Hat package) - update to 7.14.0-1.el8sat
puppet-agent (Red Hat package) - update to 7.28.0-1.el8sat
python-click (Red Hat package) - addressed in versions 8.1.3-4.el8pc, 8.1.3-4.el8ui
python-wcmatch (Red Hat package) - update to 8.3-5.el8pc
Maximo Application Suite - IoT Component - addressed in versions 8.7.11, 8.8.7
rubygem-foreman-tasks (Red Hat package) - update to 9.0.4-1.el8sat
rubygem-foreman_rh_cloud (Red Hat package) - update to 9.0.55-1.el8sat
rubygem-foreman_templates (Red Hat package) - update to 9.4.0-1.el8sat
puppetlabs-stdlib (Red Hat package) - update to 9.4.1-1.el8sat
python-pillow (Red Hat package) - update to 9.5.0-4.el8pc
rubygem-foreman_theme_satellite (Red Hat package) - addressed in versions 12.0.0.8-1.el8sat, 13.2.3-1.el8sat
rubygem-foreman_remote_execution (Red Hat package) - update to 12.0.5-1.el8sat
rubygem-foreman_ansible (Red Hat package) - update to 13.0.3-1.el8sat
python-rich (Red Hat package) - update to 13.3.1-7.el8pc
python-gunicorn (Red Hat package) - addressed in versions 20.1.0-7.el8pc, 20.1.0-7.1.2.el8ui
rubygem-foreman_bootdisk (Red Hat package) - update to 21.2.1-1.el8sat
python-packaging (Red Hat package) - addressed in versions 21.3-5.el8pc, 21.3-5.el8ui
python-attrs (Red Hat package) - addressed in versions 21.4.0-5.el8pc, 21.4.0-5.el8ui
python-contextlib2 (Red Hat package) - update to 21.6.0-6.el8pc
python-aiofiles (Red Hat package) - addressed in versions 22.1.0-4.el8pc, 22.1.0-4.el8ui
rubygem-foreman_discovery (Red Hat package) - update to 23.0.1-1.1.el8sat
python-django-filter (Red Hat package) - addressed in versions 23.2-3.el8pc, 23.2-3.el8ui
python-pyOpenSSL (Red Hat package) - update to 23.3.0-1.el8pc
python-cryptography (Red Hat package) - addressed in versions 41.0.6-1.el8pc, 41.0.6-1.el8ui
python-pytz (Red Hat package) - addressed in versions 2022.2.1-5.el8pc, 2022.2.1-5.el8ui
python-certifi (Red Hat package) - update to 2022.12.7-3.el8pc
python-uuid6 (Red Hat package) - addressed in versions 2023.5.2-4.el8pc, 2023.5.2-4.el8ui
python-gcsfs - update to 2024.9.0-1.fc41
python-diff-match-patch (Red Hat package) - addressed in versions 20200713-6.el8pc, 20200713-6.el8ui
foreman-bootloaders-redhat (Red Hat package) - update to 202102220000-1.el8sat

• Exploit #10915 - CVE-2024-23334 (November 29, 2024)
• Exploit #10870 - LFI-aiohttp-CVE-2024-23334-PoC (Bash script to automate Local File Inclusion (LFI) attacks on aiohttp server version 3.9.1.) (November 15, 2024)
• Exploit #10635 - CVE-2024-23334-PoC (October 22, 2024)
• Exploit #10634 - CVE-2024-23334 (October 22, 2024)
• Exploit #10095 - CVE-2024-23334 (June 21, 2024)
• Exploit #10093 - CVE-2024-23334-PoC (June 21, 2024)
• Exploit #9796 - CVE-2024-23334 (May 13, 2024)
• Exploit #9793 - poc-cve-2024-23334 (This repository contains a proof of concept about the exploitation of the aiohttp library for the reported vulnerability CVE-2024-23334.) (May 13, 2024)
• Exploit #9675 - aiohttp-exploit-CVE-2024-23334-certstream (April 5, 2024)
• Exploit #9620 - CVE-2024-23334 (March 22, 2024)

• https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5h86-8mv2-jq9f
• https://github.com/aio-libs/aiohttp/pull/8079
• https://github.com/aio-libs/aiohttp/commit/1c335944d6a8b1298baf179b7c0b3069f10c514b

• Multiple vulnerabilities in aiohttp
• Fedora 39 update for python-aiohttp
• Fedora 38 update for python-aiohttp
• Fedora EPEL 9 update for python-aiohttp
• Fedora EPEL 8 update for python-aiohttp
• SUSE update for python-aiohttp, python-time-machine
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Multiple vulnerabilities in IBM QRadar Suite Software
• Multiple vulnerabilities in Red Hat Satellite 6.14
• Multiple vulnerabilities in Red Hat Ansible Automation Platform 2.4 for RHEL 9
• Multiple vulnerabilities in Red Hat Update Infrastructure (RHUI)
• Multiple vulnerabilities in Red Hat Satellite 6.15
• Multiple vulnerabilities in IBM Storage Fusion HCI
• Multiple vulnerabilities in IBM Maximo Application Suite - IoT Component
• Ubuntu update for python-aiohttp
• Fedora 41 update for python-gcsfs
• Fedora EPEL 8 update for python-aiohttp
• Debian update for python-aiohttp
• openEuler 20.03 LTS SP4 update for python-aiohttp
• openEuler 22.03 LTS SP4 update for python-aiohttp
• openEuler 22.03 LTS SP3 update for python-aiohttp