Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Satellite Capsule 6 satellite_capsule:6.13::el8 | python-future | 0:0.18.3-1.el8pc |
| Red Hat · Satellite Capsule 6 satellite_capsule:6.13::el8 | python39-future | 0:0.18.3-1.el8pc |
| Red Hat · Satellite 6 satellite:6.13::el8 | python-future | 0:0.18.3-1.el8pc |
| Red Hat · Satellite 6 satellite:6.13::el8 | python39-future | 0:0.18.3-1.el8pc |
| Red Hat · Satellite 6 satellite:6.13::el8 | rubygem-safemode | 0:1.3.8-1.el8sat |
Vulnerabilities 2
-
Critical 9.1
Foreman: arbitrary code execution through templates
An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.
-
High 7.5
Python Charmers Future denial of service vulnerability
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.13/html/upgrading_and_updating_red_hat_satellite/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2159291
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2165866
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2211954
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218653
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218656
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218657
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218659
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218660
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218661
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218954
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2218979
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2224023
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_4466.json
-
report
https://access.redhat.com/security/cve/CVE-2022-40899
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-40899
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-40899
-
report
https://access.redhat.com/security/cve/CVE-2023-0118
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-0118
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-0118