Skip to content
OpenAdvisories
Medium RHBA-2024:4589 1 CVE

Red Hat Bug Fix Advisory: Satellite 6.15.2 Async Update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 51

ReleasePackageFixed in
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 foreman 0:3.9.1.8-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 foreman-debug 0:3.9.1.8-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 foreman-installer 1:3.9.3.2-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 foreman-installer-katello 1:3.9.3.2-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-pulp-container 0:2.16.9-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-pulpcore 0:3.39.15-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-pulp-container 0:2.16.9-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-pulpcore 0:3.39.15-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 rubygem-dynflow 0:1.8.3-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 rubygem-smart_proxy_container_gateway 0:3.0.0-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 rubygem-smart_proxy_remote_execution_ssh 0:0.10.6-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 satellite 0:6.15.2-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 satellite-capsule 0:6.15.2-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 satellite-common 0:6.15.2-1.el8sat
Red Hat · Satellite Utils 6 satellite_utils:6.15::el8 foreman 0:3.9.1.8-1.el8sat
Red Hat · Satellite Utils 6 satellite_utils:6.15::el8 foreman-cli 0:3.9.1.8-1.el8sat
Red Hat · Satellite Utils 6 satellite_utils:6.15::el8 satellite 0:6.15.2-1.el8sat
Red Hat · Satellite Utils 6 satellite_utils:6.15::el8 satellite-cli 0:6.15.2-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 candlepin 0:4.3.14-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 candlepin-selinux 0:4.3.14-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-cli 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-debug 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-dynflow-sidekiq 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-ec2 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-installer 1:3.9.3.2-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-installer-katello 1:3.9.3.2-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-journald 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-libvirt 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-openstack 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-ovirt 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-pcp 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-postgresql 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-redis 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-service 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-telemetry 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-vmware 0:3.9.1.8-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 python-pulp-container 0:2.16.9-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-pulpcore 0:3.39.15-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-pulp-container 0:2.16.9-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-pulpcore 0:3.39.15-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-dynflow 0:1.8.3-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-foreman_ansible 0:13.0.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-foreman_remote_execution 0:12.0.7-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-foreman_remote_execution-cockpit 0:12.0.7-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-katello 0:4.11.0.15-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-smart_proxy_container_gateway 0:3.0.0-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-smart_proxy_remote_execution_ssh 0:0.10.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 satellite 0:6.15.2-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 satellite-cli 0:6.15.2-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 satellite-common 0:6.15.2-1.el8sat

Vulnerabilities 1

  • Medium 6.8
    CVE-2024-4871

    Foreman: host ssh key not being checked in remote execution

    A vulnerability was found in Satellite. When running a remote execution job on a host, the host's SSH key is not being checked. When the key changes, the Satellite still connects it because it uses "-o StrictHostKeyChecking=no". This flaw can lead to a man-in…

    Red Hat Red Hat Satellite 6.15 for RHEL 8

References

  • article
    https://issues.redhat.com/browse/SAT-22031
  • article
    https://issues.redhat.com/browse/SAT-25748
  • article
    https://issues.redhat.com/browse/SAT-25750
  • article
    https://issues.redhat.com/browse/SAT-25751
  • article
    https://issues.redhat.com/browse/SAT-25752
  • article
    https://issues.redhat.com/browse/SAT-25756
  • article
    https://issues.redhat.com/browse/SAT-25757
  • article
    https://issues.redhat.com/browse/SAT-25758
  • article
    https://issues.redhat.com/browse/SAT-25759
  • article
    https://issues.redhat.com/browse/SAT-25760
  • article
    https://issues.redhat.com/browse/SAT-25761
  • article
    https://issues.redhat.com/browse/SAT-25762
  • article
    https://issues.redhat.com/browse/SAT-25763
  • article
    https://issues.redhat.com/browse/SAT-25901
  • article
    https://issues.redhat.com/browse/SAT-26170
  • article
    https://issues.redhat.com/browse/SAT-26219
  • article
    https://issues.redhat.com/browse/SAT-26277
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhba-2024_4589.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-4871
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2278627
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-4871
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-4871