RHSA-2022:1708

csafUSredhat_csaf

Red Hat Security Advisory: Satellite 6.10.5 Async Bug Fix Update

Advisory ansehen veröffentlicht 2022-05-04

Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2021-27025USmedium6.5—
A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.
CVE-2021-27023UScritical9.8—
A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host. This is similar to CVE-2018…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (60)

  • Behobenpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite Capsule 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite Capsule 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Behobenpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts

    https://access.redhat.com/errata/RHSA-2022:1708
  • Workaroundforeman-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-0:2.5.2.21-1.el7sat.src as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-0:2.5.2.21-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-cli-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-debug-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-debug-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-dynflow-sidekiq-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-ec2-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-gce-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-installer-1:2.5.2.14-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-installer-1:2.5.2.14-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-installer-1:2.5.2.14-1.el7sat.src as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-installer-1:2.5.2.14-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-installer-katello-1:2.5.2.14-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-installer-katello-1:2.5.2.14-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-journald-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-libvirt-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-openstack-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-ovirt-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-postgresql-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-service-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-telemetry-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundforeman-vmware-0:2.5.2.21-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpuppet-agent-0:6.26.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpuppet-agent-0:6.26.0-1.el7sat.x86_64 as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpuppetserver-0:6.18.0-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundpuppetserver-0:6.18.0-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-0:6.10.5-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-0:6.10.5-1.el7sat.src as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-0:6.10.5-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-capsule-0:6.10.5-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-cli-0:6.10.5-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-common-0:6.10.5-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundsatellite-common-0:6.10.5-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-katello-0:4.1.1.55-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-katello-0:4.1.1.55-1.el7sat.src as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-smart_proxy_openscap-0:0.9.2-1.el7sat.noarch as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-smart_proxy_openscap-0:0.9.2-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-smart_proxy_openscap-0:0.9.2-1.el7sat.src as a component of Red Hat Satellite 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

  • Workaroundtfm-rubygem-smart_proxy_openscap-0:0.9.2-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10

    Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan