Red Hat Security Advisory: Satellite 6.16.1 Async Update

Fixed packages 16

Vulnerabilities 1

• Medium 6.3
  CVE-2024-52304

  aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions

  aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.10.11, the Python parser parses newlines in chunk extensions incorrectly which can lead to request smuggling vulnerabilities under certain conditions. If a pure…

  aio-libs aiohttp kserve-storage-controller py3-cassandra-medusa Debian Ubuntu Azure Linux Wolfi PyPI
  Nov 18, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_satellite/6.16/html/updating_red_hat_satellite/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2327130
• article
  https://issues.redhat.com/browse/SAT-28560
• article
  https://issues.redhat.com/browse/SAT-28990
• article
  https://issues.redhat.com/browse/SAT-29255
• article
  https://issues.redhat.com/browse/SAT-29340
• article
  https://issues.redhat.com/browse/SAT-29427
• article
  https://issues.redhat.com/browse/SAT-29432
• article
  https://issues.redhat.com/browse/SAT-29697
• article
  https://issues.redhat.com/browse/SAT-29698
• article
  https://issues.redhat.com/browse/SAT-29699
• article
  https://issues.redhat.com/browse/SAT-29700
• article
  https://issues.redhat.com/browse/SAT-29701
• article
  https://issues.redhat.com/browse/SAT-29702
• article
  https://issues.redhat.com/browse/SAT-29946
• article
  https://issues.redhat.com/browse/SAT-29947
• article
  https://issues.redhat.com/browse/SAT-29974
• article
  https://issues.redhat.com/browse/SAT-30085
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_11574.json
• report
  https://access.redhat.com/security/cve/CVE-2024-52304
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-52304
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-52304
• article
  https://github.com/aio-libs/aiohttp/commit/259edc369075de63e6f3a4eaade058c62af0df71
• article
  https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8495-4g3g-x7pr