Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
202
security advisorymoderateissue resolutionopenSUSE Tumbleweed: 2025:14998-1 moderate severity: aiohttp fix
An update that solves one vulnerability can now be installed.. # python311-aiohttp-3.11.16-1.1 on GA media Announcement ID: openSUSE-SU-2025:14998-1 Rating: moderate Cross-References: * CVE-2024-12254 CVSS scores: * CVE-2024-12254 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-12254 ( SUSE ): 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Affected Products: * openSUSE Tumbleweed An update that solves one vulnerability can now be installed. ## Description: These are all security issues fixed in the python311-aiohttp-3.11.16-1.1 package on the GA media of openSUSE Tumbleweed. ## Package List: * openSUSE Tumbleweed: * python311-aiohttp 3.11.16-1.1 * python312-aiohttp 3.11.16-1.1 * python313-aiohttp 3.11.16-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-12254.html . Stay informed about vulnerabilities in python311-aiohttp affecting openSUSE Tumbleweed. Learn how to secure your applications effectively and mitigate risks.. openSUSE Tumbleweed, python311-aiohttp security, moderate security update. . LinuxSecurity.com Team
Apr 16, 2025
OpenSUSE
91
security advisorygentoomultiple threatsGentoo: GLSA 202408-11 Normal: Aiohttp Threats Explained
Multiple vulnerabilities have been discovered in aiohttp, the worst of which could lead to service compromise.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202408-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: aiohttp: Multiple Vulnerabilities Date: August 07, 2024 Bugs: #918541, #918968, #931097 ID: 202408-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Multiple vulnerabilities have been discovered in aiohttp, the worst of which could lead to service compromise. Background ========== aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected packages ================= Package Vulnerable Unaffected ------------------ ------------ ------------ dev-python/aiohttp < 3.9.4 > = 3.9.4 Description =========== Multiple vulnerabilities have been discovered in aiohttp. Please review the CVE identifiers referenced below for details. Impact ====== Please review the referenced CVE identifiers for details. Workaround ========== There is no known workaround at this time. Resolution ========== All aiohttp users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-python/aiohttp-3.9.4" References ========== [ 1 ] CVE-2023-47641 https://nvd.nist.gov/vuln/detail/CVE-2023-47641 [ 2 ] CVE-2023-49082 https://nvd.nist.gov/vuln/detail/CVE-2023-49082 [ 3 ] CVE-2024-30251 https://nvd.nist.gov/vuln/detail/CVE-2024-30251 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202408-11 Concerns? ========= Security is a primary focus of Gentoo Linux andensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Aug 07, 2024
Gentoo
203
security advisoryupdatexssMageia: 2024-0235 Moderate: Aiohttp XSS Security Advisory Update
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulnerability is fixed in 3.9.4. We have always recommended using a reverse proxy server (e.g. nginx) for serving static files. Users following the recommendation are unaffected. Other users . MGASA-2024-0235 - Updated python-aiohttp packages fix security vulnerability Publication date: 24 Jun 2024 URL: https://advisories.mageia.org/MGASA-2024-0235.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-27306 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This vulnerability is fixed in 3.9.4. We have always recommended using a reverse proxy server (e.g. nginx) for serving static files. Users following the recommendation are unaffected. Other users can disable `show_index` if unable to upgrade. References: - https://bugs.mageia.org/show_bug.cgi?id=33174 - https://lists.fedoraproject.org/archives/list/
Jun 24, 2024
Mageia
91
security advisorygentoothreatGentoo GLSA-202208-19 Low: Aiohttp Open Redirect Vulnerability
An open redirect vulnerability has been discovered in aiohttp.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202208-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Low Title: aiohttp: Open redirect vulnerability Date: August 10, 2022 Bugs: #772932 ID: 202208-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= An open redirect vulnerability has been discovered in aiohttp. Background ========= aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 dev-python/aiohttp < 3.7.4 > = 3.7.4 Description ========== A bug in aiohttp.web_middlewares.normalize_path_middleware creates an open redirect vulnerability. Impact ===== An attacker use this vulnerability to craft a link that, while appearing to be a link to an aiohttp-based website, redirects users to an arbitrary attacker-controlled URL. Workaround ========= There is no known workaround at this time. Resolution ========= All aiohttp users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =dev-python/aiohttp-3.7.4" References ========= [ 1 ] CVE-2021-21330 https://nvd.nist.gov/vuln/detail/CVE-2021-21330 [ 2 ] GHSA-v6wp-4m6f-gcjg Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202208-19 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuringthe confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Aug 10, 2022
•Low
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Is continuous patching actually viable?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!