SUSE SLES15 / openSUSE 15 Security Update : python-aiohttp (SUSE-SU-2024:4110-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4110-1 advisory. - CVE-2024-52304: Fixed request smuggling due to incorrect parsing of chunk extensions bsc1233447 Tenable has extracted the...

[SECURITY] [DSA 5828-1] python-aiohttp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5828-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 11, 2024 https://www.debian.org/security/faq -...

Debian dsa-5828 : python-aiohttp-doc - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5828 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5828-1 [email protected] https://www.debian.org/securit...

DSA-5828-1 python-aiohttp - security update

Bulletin has no description...

Exploit for Path Traversal in Aiohttp

CVE-2024-23334-PoC This repository is a proof of concept POC...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the SelectorSocketTransport.writelines method not draining its buffers, when Protocols are in use. An attacker can cause this behavior which eventually exhausts available memor...

airflow-tools (>=0.9.0 <=0.9.1) potentially affected by CVE-2024-12254 via aiohttp (=3.11.0rc2)

aiohttp PYPI version =3.11.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on aiohttp and may be impacted: - airflow-tools =0.9.0, =0.9.1 Source cves: CVE-2024-12254 Source advisory: SNYK:PYTHON-AIOHTTP-8492046...

OPENSUSE-SU-2024:14556-1 python310-aiohttp-3.11.9-1.1 on GA media

These are all security issues fixed in the python310-aiohttp-3.11.9-1.1 package on the GA media of openSUSE Tumbleweed...

Mageia: Security Advisory (MGASA-2024-0388)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated python-aiohttp packages fix security vulnerabilities

When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symbolic links outside the static root directory. When 'followsymlinks' is set to True,...

MGASA-2024-0388 Updated python-aiohttp packages fix security vulnerabilities

When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symbolic links outside the static root directory. When 'followsymlinks' is set to True,...

Moderate: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions

A flaw was found in the aiohttp package. The Python parser parses newlines in chunk extensions incorrectly, which can lead to request smuggling vulnerabilities under certain conditions. If a pure Python version of aiohttp is installed, for example, without the usual C extensions, or...

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: CVE-2024-52304: Fixed request smuggling due to incorrect parsing of chunk extensions bsc1233447 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2024:4110-1 Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: - CVE-2024-52304: Fixed request smuggling due to incorrect parsing of chunk extensions bsc1233447...

[SECURITY] Fedora 41 Update: python-aiohttp-3.10.5-3.fc41

Python HTTP client/server for asyncio which supports both the client and the server side of the HTTP protocol, client and server websocket, and webservers with middlewares and pluggable routing...

Fedora: Security Advisory (FEDORA-2024-04ceb82dc7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 41 : python-aiohttp (2024-49df7093ac)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-49df7093ac advisory. Security fix for CVE-2024-52304 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 40 : python-aiohttp (2024-04ceb82dc7)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-04ceb82dc7 advisory. Security fix for CVE-2024-52304 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Security update for python-aiohttp

This update for python-aiohttp fixes the following issues: CVE-2024-52304: Fixed request smuggling due to incorrect parsing of chunk extensions bsc1233447 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...