Skip to content
OpenAdvisories
Critical RHSA-2021:4702 21 CVEs

Red Hat Security Advisory: Satellite 6.10 Release

Published Sep 18, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 29

ReleasePackageFixed in
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 foreman 0:2.5.2.17-2.el7sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 python-aiohttp 0:3.7.4-1.el7pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 python-ecdsa 0:0.13.3-2.el7pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 python-pyyaml 0:5.4.1-1.el7pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 python-urllib3 0:1.26.5-1.el7pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 python3-django 0:2.2.24-1.el7pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 python3-ecdsa 0:0.13.3-2.el7pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 python3-pyyaml 0:5.4.1-1.el7pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 python3-urllib3 0:1.26.5-1.el7pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 satellite 0:6.10.0-3.el7sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 satellite-capsule 0:6.10.0-3.el7sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.10::el7 tfm-rubygem-nokogiri 0:1.11.3-2.el7sat
Red Hat · Satellite 6 satellite:6.10::el7 candlepin 0:4.0.9-1.el7sat
Red Hat · Satellite 6 satellite:6.10::el7 foreman 0:2.5.2.17-2.el7sat
Red Hat · Satellite 6 satellite:6.10::el7 python-aiohttp 0:3.7.4-1.el7pc
Red Hat · Satellite 6 satellite:6.10::el7 python-ecdsa 0:0.13.3-2.el7pc
Red Hat · Satellite 6 satellite:6.10::el7 python-pyyaml 0:5.4.1-1.el7pc
Red Hat · Satellite 6 satellite:6.10::el7 python-urllib3 0:1.26.5-1.el7pc
Red Hat · Satellite 6 satellite:6.10::el7 python3-django 0:2.2.24-1.el7pc
Red Hat · Satellite 6 satellite:6.10::el7 python3-ecdsa 0:0.13.3-2.el7pc
Red Hat · Satellite 6 satellite:6.10::el7 python3-pyyaml 0:5.4.1-1.el7pc
Red Hat · Satellite 6 satellite:6.10::el7 python3-urllib3 0:1.26.5-1.el7pc
Red Hat · Satellite 6 satellite:6.10::el7 satellite 0:6.10.0-3.el7sat
Red Hat · Satellite 6 satellite:6.10::el7 tfm-rubygem-actionpack 0:6.0.3.7-1.el7sat
Red Hat · Satellite 6 satellite:6.10::el7 tfm-rubygem-activerecord-session_store 0:2.0.0-1.el7sat
Red Hat · Satellite 6 satellite:6.10::el7 tfm-rubygem-addressable 0:2.8.0-1.el7sat
Red Hat · Satellite 6 satellite:6.10::el7 tfm-rubygem-nokogiri 0:1.11.3-2.el7sat
Red Hat · Satellite 6 satellite:6.10::el7 tfm-rubygem-puma 0:5.3.2-1.el7sat
Red Hat · Satellite 6 satellite:6.10::el7 tfm-rubygem-rails 0:6.0.3.7-1.el7sat

Vulnerabilities 21

  • Critical 9.8
    CVE-2020-14343 Public exploit

    Improper Input Validation in PyYAML

    A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the libra…

    pyyaml pyyaml pyyaml PyYAML Debian Ubuntu Azure Linux Alpine PyPI
  • High 7.5
    CVE-2021-22885

    Action Pack contains Information Disclosure / Unintended Method Execution vulnerability

    A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper with untrusted user input.

    rails rails actionpack Debian Ubuntu RubyGems
  • High 7.5
    CVE-2021-22902

    Denial of Service in Action Dispatch

    The actionpack ruby gem (a framework for handling and responding to web requests in Rails) before 6.0.3.7, 6.1.3.2 suffers from a possible denial of service vulnerability in the Mime type parser of Action Dispatch. Carefully crafted Accept headers can cause t…

    rails rails actionpack Debian Ubuntu RubyGems
  • High 7.5
    CVE-2021-22904

    Possible DoS Vulnerability in Action Controller Token Authentication

    The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Controller due to a too permissive regular expression. Impacted code uses `authenticate_or_requ…

    rails rails actionpack Debian Ubuntu RubyGems
  • High 7.5
    CVE-2021-29509

    Keepalive Connections Causing Denial Of Service in puma

    Puma is a concurrent HTTP 1.1 server for Ruby/Rack applications. The fix for CVE-2019-16770 was incomplete. The original fix only protected existing connections that had already been accepted from having their requests starved by greedy persistent-connections…

    puma puma puma puma Debian RubyGems
  • High 7.5
    CVE-2021-31542

    Path Traversal in Django

    In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names.

    python-django django python-django Debian Ubuntu PyPI
  • High 7.5
    CVE-2021-32740

    Regular Expression Denial of Service in Addressable templates

    Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addr…

    sporkmonger addressable ruby-addressable addressable Debian Ubuntu Alpine RubyGems
  • High 7.5
    CVE-2021-33503

    Catastrophic backtracking in URL authority parser when passed URL containing many @ characters

    An issue was discovered in urllib3 before 1.26.5. When provided with a URL containing many @ characters in the authority component, the authority regular expression exhibits catastrophic backtracking, causing a denial of service if a URL were passed as a para…

    python-pip urllib3 python-urllib3 python-urllib3 Debian Ubuntu Azure Linux PyPI
  • High 7.5
    CVE-2021-33571

    Django Access Control Bypass possibly leading to SSRF, RFI, and LFI attacks

    In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and validate_ipv46_address do not prohibit leading zero characters in octal literals. This may allow a bypass of access control that is based on IP addr…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • High 7.4
    CVE-2019-14859

    Improper Verification of Cryptographic Signature in Pure-Python ECDSA

    A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding. Without this verification, a malformed signature could be accepted, making the signature malleable. Without proper verificatio…

    Red Hat python-ecdsa ecdsa python-ecdsa Debian Ubuntu Alpine PyPI
  • Medium 6.4
    CVE-2020-8130

    OS Command Injection in Rake

    There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`.

    rake rake rake Debian Ubuntu RubyGems
  • Medium 5.3
    CVE-2019-25025

    Activerecord-session_store Vulnerable to Timing Attack

    The activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby on Rails does not use a constant-time approach when delivering information about whether a guessed session ID is valid. Consequently, remote attackers can levera…

    ruby-activerecord-session-store activerecord-session_store Ubuntu RubyGems
  • Medium 5.3
    CVE-2021-28658

    Directory Traversal in Django

    In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 4.9
    CVE-2021-33203

    Path Traversal in Django

    Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contrib.admindocs. Staff members could use the TemplateDetailView view to check the existence of arbitrary files. Additionally, if (and only if) the…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Low 3.7
    CVE-2019-14853

    ecdsa Denial of Service vulnerability in signature verification and signature malleability

    An error-handling flaw was found in python-ecdsa before version 0.13.3. During signature decoding, malformed DER signatures could raise unexpected exceptions (or no exceptions at all), which could lead to a denial of service.

    [UNKNOWN] python-ecdsa python-ecdsa python-ecdsa Debian Ubuntu Alpine PyPI
  • Low 3.3
    CVE-2020-8908

    Temp directory permission issue in Guava

    A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on un…

    Google Guava druid celeborn-0.6 Debian Ubuntu Azure Linux Wolfi Maven
  • Low 3.1
    CVE-2021-21330

    Open redirect vulnerability in aiohttp

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different websit…

    aio-libs aiohttp python-aiohttp aiohttp Debian Ubuntu Azure Linux PyPI
  • Low 2.6
    CVE-2020-26247

    XXE in Nokogiri

    Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri before version 1.11.0.rc4 there is an XXE vulnerability. XML Schemas parsed by Nokogiri::XML::Schema are trusted by default, allowing external …

    sparklemotion nokogiri nokogiri ruby-nokogiri Debian Ubuntu Alpine RubyGems
  • Unscored —
    CVE-2021-20256

    A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local…

  • Unscored —
    CVE-2021-3413

    A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was i…

  • Unscored —
    CVE-2021-3494

    A smart proxy that provides a restful API to various sub-systems of the Foreman is affected by the flaw which can cause…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1299602
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1334989
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1392063
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1417752
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1437586
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1548966
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1566630
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1573241
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1583209
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1605147
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1611621
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1615015
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1632961
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1636403
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1636426
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1649011
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1654801
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1655245
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1656127
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1663340
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1664120
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1668374
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1685738
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1691490
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1701541
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1703951
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1716314
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1719661
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1720664
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1721320
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1729029
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1729843
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1731987
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732038
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732505
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1732522
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1737536
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1744931