Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2023:6818 32 CVEs

Red Hat Security Advisory: Satellite 6.14 security and bug fix update

Published Oct 2, 2024 · Updated Oct 20, 2026

Ecosystem: Red Hat

Fixed packages 55

ReleasePackageFixed in
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 foreman 0:3.7.0.9-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 foreman-debug 0:3.7.0.9-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 puppet-agent 0:7.26.0-3.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 puppetserver 0:7.11.0-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python-django 0:3.2.21-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python-future 0:0.18.3-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python-gitpython 0:3.1.32-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python-pulp-ansible 1:0.16.0-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python-requests 0:2.31.0-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python-sqlparse 0:0.4.4-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python39-django 0:3.2.21-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python39-future 0:0.18.3-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python39-gitpython 0:3.1.32-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python39-pulp-ansible 1:0.16.0-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python39-requests 0:2.31.0-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 python39-sqlparse 0:0.4.4-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.14::el8 rubygem-rack 0:2.2.7-1.el8sat
Red Hat · Satellite Utils 6 satellite_utils:6.14::el8 foreman 0:3.7.0.9-1.el8sat
Red Hat · Satellite Utils 6 satellite_utils:6.14::el8 foreman-cli 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-cli 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-debug 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-dynflow-sidekiq 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-ec2 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-journald 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-libvirt 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-openstack 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-ovirt 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-postgresql 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-redis 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-service 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-telemetry 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 foreman-vmware 0:3.7.0.9-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 puppet-agent 0:7.26.0-3.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 puppetserver 0:7.11.0-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 python-django 0:3.2.21-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 python-future 0:0.18.3-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 python-gitpython 0:3.1.32-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 python-pulp-ansible 1:0.16.0-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 python-requests 0:2.31.0-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 python-sqlparse 0:0.4.4-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 python39-django 0:3.2.21-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 python39-future 0:0.18.3-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 python39-gitpython 0:3.1.32-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 python39-pulp-ansible 1:0.16.0-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 python39-requests 0:2.31.0-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 python39-sqlparse 0:0.4.4-1.el8pc
Red Hat · Satellite 6 satellite:6.14::el8 rubygem-actionpack 0:6.1.7.3-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 rubygem-activerecord 0:6.1.7.3-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 rubygem-activesupport 0:6.1.7.3-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 rubygem-git 0:1.18.0-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 rubygem-globalid 0:1.1.0-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 rubygem-kubeclient 0:4.10.1-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 rubygem-rack 0:2.2.7-1.el8sat
Red Hat · Satellite 6 satellite:6.14::el8 yggdrasil-worker-forwarder 0:0.0.3-1.el8sat

Vulnerabilities 32

  • High 7.5
    CVE-2023-44487 Exploited Public exploit EPSS 100%

    HTTP/2 Stream Cancellation Attack

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

    nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
    KEV Oct 10, 2023
  • Critical 9.8
    CVE-2022-1292 Public exploit EPSS 83%

    The c_rehash script allows command injection

    The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitra…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2022-2068 EPSS 96%

    The c_rehash script allows command injection

    In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2023-31047

    Django bypasses validation when using one form field to upload multiple files

    In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last u…

    python-django django python-django Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2023-40267

    GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments

    GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24439.

    gitpython python-git python-git Debian Ubuntu PyPI
  • Critical 9.1
    CVE-2023-0118

    Foreman: arbitrary code execution through templates

    An arbitrary code execution flaw was found in Foreman. This flaw allows an admin user to bypass safe mode in templates and execute arbitrary code on the underlying operating system.

    Red Hat Red Hat Satellite 6.14 for RHEL 8 Red Hat Satellite 6.13 for RHEL 8 Red Hat Satellite 6.12 for RHEL 8
  • High 8.8
    CVE-2022-47318

    Code injection in ruby git

    ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-46648.

    ruby-git ruby-git ruby-git git Debian Ubuntu RubyGems
  • High 8.8
    CVE-2023-22794

    SQL Injection Vulnerability via ActiveRecord comments

    A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the `annotate` query method, the `optimizer_hints` query method, or through the QueryLogs interface which auto…

    rails rails activerecord Debian Ubuntu RubyGems
  • High 8.1
    CVE-2022-0759

    Improper Certificate Validation in kubeclient

    A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up acceptin…

    kubeclient ruby-kubeclient ruby-kubeclient Debian Ubuntu RubyGems
  • High 8.0
    CVE-2022-3874

    Os command injection via ct_command and fcct_command

    A command injection flaw was found in foreman. This flaw allows an authenticated user with admin privileges on the foreman instance to transpile commands through CoreOS and Fedora CoreOS configurations in templates, possibly resulting in arbitrary command exe…

    Red Hat Red Hat Satellite 6
  • High 8.0
    CVE-2022-46648

    ruby-git has potential remote code execution vulnerability

    ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.

    ruby-git ruby-git ruby-git ruby-git Debian Ubuntu RubyGems
  • High 7.5
    CVE-2022-40899

    Python Charmers Future denial of service vulnerability

    An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.

    future python-future python-future Debian Ubuntu PyPI
  • High 7.5
    CVE-2022-44566

    Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter

    A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter <7.0.4.1 and <6.1.7.1. When a value outside the range for a 64bit signed integer is provided to the PostgreSQL connection adapter, it will treat the target column type as numeric. …

    rails rails activerecord Debian Ubuntu RubyGems
  • High 7.5
    CVE-2022-44570

    Denial of service via header parsing in Rack

    A denial of service vulnerability in the Range header parsing component of Rack >= 1.5.0. A Carefully crafted input can cause the Range header parsing component in Rack to take an unexpected amount of time, possibly resulting in a denial of service attack vec…

    rack ruby-rack ruby-rack Debian Ubuntu RubyGems
  • High 7.5
    CVE-2023-22792

    ReDoS based DoS vulnerability in Action Dispatch

    A regular expression based DoS vulnerability in Action Dispatch <6.0.6.1,< 6.1.7.1, and <7.0.4.1. Specially crafted cookies, in combination with a specially crafted X_FORWARDED_HOST header can cause the regular expression engine to enter a state of catastroph…

    rails rails actionpack Debian Ubuntu RubyGems
  • High 7.5
    CVE-2023-27530

    Rack has possible DoS Vulnerability in Multipart MIME parsing

    A DoS vulnerability exists in Rack <v3.0.4.2, <v2.2.6.3, <v2.1.4.3 and <v2.0.9.3 within in the Multipart MIME parsing code in which could allow an attacker to craft requests that can be abuse to cause multipart parsing to take longer than expected.

    rack ruby-rack ruby-rack Debian Ubuntu RubyGems
  • High 7.5
    CVE-2023-36053

    Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

    In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.

    python-django django python-django Debian Ubuntu PyPI
  • High 7.5
    CVE-2023-39325 Public exploit

    HTTP/2 rapid reset can cause excessive work in net/http

    A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress requ…

    Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 6.1
    CVE-2023-32681 Public exploit

    Unintended leak of Proxy-Authorization header in requests

    Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header…

    psf requests python-pip requests Debian Ubuntu Azure Linux PyPI
  • Medium 5.5
    CVE-2022-3644

    Plaintext storage of tokens in pulp_ansible

    The collection remote for pulp_ansible stores tokens in plaintext instead of using pulp's encrypted field and exposes them in read/write mode via the API () instead of marking it as write only.

    pulp-ansible PyPI
  • Medium 5.5
    CVE-2023-30608

    Parser contains an inefficient regular expression in sqlparse

    sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service). This issue was introduced by commit `e75e358`. The vulnerability m…

    andialbrecht sqlparse sqlparse sqlparse Debian Ubuntu PyPI
  • Medium 5.4
    CVE-2023-0119

    Foreman: stored cross-site scripting in host tab

    A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result of the attack, an attacker with an existing account on the system can steal another user's session, …

    Red Hat Red Hat Satellite 6.14 for RHEL 8 Red Hat Satellite 6.13 for RHEL 8
  • Medium 5.3
    CVE-2022-41717 Public exploit

    Excessive memory growth in net/http and golang.org/x/net/http2

    An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large…

    Go standard library golang.org/x/net net/http golang.org/x/net/http2 Debian Ubuntu Azure Linux Alpine Wolfi Go
  • Medium 5.3
    CVE-2023-1894

    A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An i…

    Puppet Puppet Enterprise Puppet server puppet Debian Ubuntu
  • Medium 5.3
    CVE-2023-27539

    Possible Denial of Service Vulnerability in Rack's header parsing

    There is a denial of service vulnerability in the header parsing component of Rack.

    rails Rack rack ruby-rack Debian Ubuntu RubyGems
  • Medium 4.5
    CVE-2022-4130

    A blind site-to-site request forgery vulnerability was found in Satellite server. It is possible to trigger an external…

  • Low —
    CVE-2022-44571

    Denial of Service Vulnerability in Rack Content-Disposition parsing

    There is a denial of service vulnerability in the Content-Disposition parsingcomponent of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1, 3.0.0.1. This could allow an attacker to craft an input that can cause Content-Disposition header parsing in Rackto take an unex…

    rack ruby-rack ruby-rack Debian Ubuntu RubyGems
  • Low —
    CVE-2022-44572

    Denial of service via multipart parsing in Rack

    A denial of service vulnerability in the multipart parsing component of Rack fixed in 2.0.9.2, 2.1.4.2, 2.2.4.1 and 3.0.0.1 could allow an attacker tocraft input that can cause RFC2183 multipart boundary parsing in Rack to take an unexpected amount of time, p…

    rack ruby-rack ruby-rack Debian Ubuntu RubyGems
  • Low —
    CVE-2023-22795

    ReDoS based DoS vulnerability in Action Dispatch

    A regular expression based DoS vulnerability in Action Dispatch <6.1.7.1 and <7.0.4.1 related to the If-None-Match header. A specially crafted HTTP If-None-Match header can cause the regular expression engine to enter a state of catastrophic backtracking, whe…

    rails rails actionpack ruby Debian Ubuntu Azure Linux RubyGems
  • Low —
    CVE-2023-22796

    ReDoS based DoS vulnerability in Active Support's underscore

    A regular expression based DoS vulnerability in Active Support <6.1.7.1 and <7.0.4.1. A specially crafted string passed to the underscore method can cause the regular expression engine to enter a state of catastrophic backtracking. This can cause the process …

    rails rails activesupport ruby-activesupport Debian Ubuntu Alpine RubyGems
  • Low —
    CVE-2023-22799

    ReDoS based DoS vulnerability in GlobalID

    A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade …

    ruby-globalid globalid ruby-globalid Debian Ubuntu RubyGems
  • Unscored —
    CVE-2023-29406 Public exploit

    Insufficient sanitization of Host header in net/http

    The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Reque…

    Go standard library net/http katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/security/vulnerabilities/RHSB-2023-003
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1265120
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1726504
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1735722
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1813953
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1859112
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1872414
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1885552
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1904201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1922972
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1925532
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1944710
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1947095
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1949960
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1950836
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1955046
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1967030
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1972308
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1980277
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1992283
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1995783
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2000215
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2002202
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2009069
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2013759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2043089
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2044537
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2053421
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2055790
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2058404
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2060613
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2069324
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2069666
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2073535
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2077081
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2077633
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2080386
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2081494