Red Hat Security Advisory: Satellite 6.13.3 Async Security Update
Updated Satellite 6.13 packages that fixes important security bugs and several regular bugs are now available for Red Hat Satellite.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-0118US | critical9.1 | — | ||
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system… | ||||
| CVE-2022-40899US | high7.5 | — | ||
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server. | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/documentation/en-us/red_hat_satellite/6.13/html/upgrading_and_updating_red_hat_satellite/indexexternal
- https://access.redhat.com/errata/RHSA-2023:4466self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 2159291external
- 2165866external
- 2211954external
- 2218653external
- 2218656external
remediations (4)
- Fixedpython-future-0:0.18.3-1.el8pc.src as a component of Red Hat Satellite 6.13 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:4466 - Fixedpython39-future-0:0.18.3-1.el8pc.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:4466 - Fixedrubygem-safemode-0:1.3.8-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:4466 - Fixedrubygem-safemode-0:1.3.8-1.el8sat.src as a component of Red Hat Satellite 6.13 for RHEL 8
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2023:4466
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan