Red Hat Security Advisory: Satellite 6.10.5 Async Bug Fix Update
Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27025US | medium6.5 | — | ||
A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'. | ||||
| CVE-2021-27023US | critical9.8 | — | ||
A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2022:1708self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 2023853external
- 2023859external
- 2070984external
- 2070985external
- 2070991external
- 2070994external
remediations (60)
- Fixedpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite Capsule 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite Capsule 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Fixedpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10
Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHSA-2022:1708 - Workaroundforeman-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-0:2.5.2.21-1.el7sat.src as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-0:2.5.2.21-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-cli-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-debug-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-debug-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-dynflow-sidekiq-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-ec2-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-gce-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-installer-1:2.5.2.14-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-installer-1:2.5.2.14-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-installer-1:2.5.2.14-1.el7sat.src as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-installer-1:2.5.2.14-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-installer-katello-1:2.5.2.14-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-installer-katello-1:2.5.2.14-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-journald-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-libvirt-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-openstack-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-ovirt-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-postgresql-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-service-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-telemetry-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundforeman-vmware-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-0:6.10.5-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-0:6.10.5-1.el7sat.src as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-0:6.10.5-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-capsule-0:6.10.5-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-cli-0:6.10.5-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-common-0:6.10.5-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundsatellite-common-0:6.10.5-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-katello-0:4.1.1.55-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-katello-0:4.1.1.55-1.el7sat.src as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-smart_proxy_openscap-0:0.9.2-1.el7sat.noarch as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-smart_proxy_openscap-0:0.9.2-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-smart_proxy_openscap-0:0.9.2-1.el7sat.src as a component of Red Hat Satellite 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
- Workaroundtfm-rubygem-smart_proxy_openscap-0:0.9.2-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan