Skip to content
OpenAdvisories
Critical RHSA-2022:8532 1 CVE

Red Hat Security Advisory: Satellite 6.9.10 Async Security Update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Satellite 6 satellite:6.9::el7 tfm-rubygem-puma 0:4.3.12-1.el7sat
Red Hat · Satellite 6 satellite:6.9::el7 tfm-rubygem-puma-debuginfo 0:4.3.12-1.el7sat

Vulnerabilities 1

  • Critical 9.1
    CVE-2022-24790

    HTTP Request Smuggling in puma

    Puma is a simple, fast, multi-threaded, parallel HTTP 1.1 server for Ruby/Rack applications. When using Puma behind a proxy that does not properly validate that the incoming HTTP request matches the RFC7230 standard, Puma and the frontend proxy may disagree o…

    puma puma puma puma Debian Ubuntu RubyGems

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2038995
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2071616
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2074099
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2081560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2091438
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2093829
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2098221
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2141348
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8532.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-24790
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-24790
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-24790