Skip to content
OpenAdvisories
High RHSA-2024:2010 18 CVEs

Red Hat Security Advisory: Satellite 6.15.0 release

Published Sep 30, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 59

ReleasePackageFixed in
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 foreman 0:3.9.1.6-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 foreman-debug 0:3.9.1.6-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 puppetserver 0:7.14.0-1.el8sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-aiohttp 0:3.9.2-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-aiohttp-debugsource 0:3.9.2-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-django 0:4.2.9-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-galaxy-importer 0:0.4.19-2.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-jinja2 0:3.1.3-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-pycryptodomex 0:3.20.0-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-pycryptodomex-debugsource 0:3.20.0-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-pygments 0:2.17.0-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-aiohttp 0:3.9.2-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-aiohttp-debuginfo 0:3.9.2-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-django 0:4.2.9-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-galaxy-importer 0:0.4.19-2.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-jinja2 0:3.1.3-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-pycryptodomex 0:3.20.0-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-pycryptodomex-debuginfo 0:3.20.0-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-pygments 0:2.17.0-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 rubygem-activesupport 0:6.1.7.6-1.el8sat
Red Hat · Satellite Utils 6 satellite_utils:6.15::el8 foreman 0:3.9.1.6-1.el8sat
Red Hat · Satellite Utils 6 satellite_utils:6.15::el8 foreman-cli 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-cli 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-debug 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-dynflow-sidekiq 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-ec2 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-journald 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-libvirt 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-openstack 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-ovirt 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-pcp 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-postgresql 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-redis 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-service 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-telemetry 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 foreman-vmware 0:3.9.1.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 puppetserver 0:7.14.0-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 python-aiohttp 0:3.9.2-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-aiohttp-debugsource 0:3.9.2-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-django 0:4.2.9-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-galaxy-importer 0:0.4.19-2.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-jinja2 0:3.1.3-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-pycryptodomex 0:3.20.0-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-pycryptodomex-debugsource 0:3.20.0-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-pygments 0:2.17.0-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-aiohttp 0:3.9.2-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-aiohttp-debuginfo 0:3.9.2-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-django 0:4.2.9-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-galaxy-importer 0:0.4.19-2.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-jinja2 0:3.1.3-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-pycryptodomex 0:3.20.0-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-pycryptodomex-debuginfo 0:3.20.0-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-pygments 0:2.17.0-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-activesupport 0:6.1.7.6-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-audited 0:5.4.2-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-puma 0:6.4.2-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-puma-debuginfo 0:6.4.2-1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-puma-debugsource 0:6.4.2-1.el8sat

Vulnerabilities 18

  • High 7.6
    CVE-2023-4320

    Satellite: arithmetic overflow in satellite

    An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's inte…

    Red Hat Red Hat Satellite 6.15 for RHEL 8
  • High 7.2
    CVE-2023-49081

    aiohttp's ClientSession is vulnerable to CRLF injection via version

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP versio…

    aio-libs aiohttp py3-cassandra-medusa aiohttp Debian Ubuntu Wolfi PyPI
  • Medium 6.5
    CVE-2024-23829

    aiohttp's HTTP parser (the python one, not llhttp) still overly lenient about separators

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Security-sensitive parts of the Python HTTP parser retained minor differences in allowable character sets, that must trigger error handling to robustly match frame boundaries of p…

    aio-libs aiohttp py3-cassandra-medusa checkov Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • Medium 6.3
    CVE-2023-5189

    Hub: insecure galaxy-importer tarfile extraction

    A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritt…

    Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8 Red Hat Ansible Automation Platform 2.4 for RHEL 9 Red Hat Satellite 6.15 for RHEL 8 Ubuntu PyPI
  • Medium 5.9
    CVE-2023-43665

    Django Denial-of-service in django.utils.text.Truncator

    In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of service) attack via certain inputs with very long, potential…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 5.9
    CVE-2023-52323

    PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

    PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack.

    jwt-tool pycryptodome pycryptodome pycryptodome Debian Ubuntu Wolfi PyPI
  • Medium 5.9
    CVE-2024-21647

    HTTP Request/Response Smuggling in puma

    Puma is a web server for Ruby/Rack applications built for parallelism. Prior to version 6.4.2, puma exhibited incorrect behavior when parsing chunked transfer encoding bodies in a way that allowed HTTP request smuggling. Fixed versions limits the size of chun…

    puma puma puma puma Debian Ubuntu Wolfi RubyGems
  • Medium 5.9
    CVE-2024-23334 Public exploit Scanner template EPSS 77%

    aiohttp.web.static(follow_symlinks=True) is vulnerable to directory traversal

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'follow_symlinks' can be used…

    aio-libs aiohttp py3-cassandra-medusa checkov Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • Medium 5.5
    CVE-2022-40896

    Pygments vulnerable to ReDoS

    A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.

    pygments pygments pygments python-pygments Debian Ubuntu Azure Linux PyPI
  • Medium 5.5
    CVE-2023-38037

    Active Support Possibly Discloses Locally Encrypted Files

    ActiveSupport::EncryptedFile writes contents that will be encrypted to a temporary file. The temporary file's permissions are defaulted to the user's current `umask` settings, meaning that it's possible for other users on the same system to read the contents …

    rails activesupport rails kube-fluentd-operator Debian Ubuntu Wolfi RubyGems
  • Medium 5.4
    CVE-2024-22195

    Jinja vulnerable to Cross-Site Scripting (XSS)

    Jinja is an extensible templating engine. Special placeholders in the template allow writing code similar to Python syntax. It is possible to inject arbitrary HTML attributes into the rendered HTML template, potentially leading to Cross-Site Scripting (XSS). …

    pallets jinja nodejs kubeflow-pipelines-visualization-server Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • Medium 5.3
    CVE-2023-37276

    aiohttp vulnerable to HTTP request smuggling

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. aiohttp v3.8.4 and earlier are bundled with llhttp v6.0.6. Vulnerable code is used by aiohttp for its HTTP request parser when available which is the default case when installing …

    aio-libs aiohttp aiohttp python-aiohttp Debian Ubuntu PyPI
  • Medium 5.3
    CVE-2023-40167 Public exploit

    Jetty accepts "+" prefixed value in Content-Length

    Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and othe…

    Eclipse Foundation jetty.project druid cassandra-reaper Debian Ubuntu Wolfi Maven
  • Medium 5.3
    CVE-2023-41164

    Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

    In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 5.3
    CVE-2023-47627

    Request smuggling in aiohttp

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. The HTTP parser in AIOHTTP has numerous problems with header parsing, which could lead to request smuggling. This parser is only used when AIOHTTP_NO_EXTENSIONS is enabled (or not…

    aio-libs aiohttp py3-cassandra-medusa aiohttp Debian Ubuntu Azure Linux Wolfi PyPI
  • Medium 5.3
    CVE-2023-49082

    aiohttp's ClientSession is vulnerable to CRLF injection via method

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation makes it possible for an attacker to modify the HTTP request (e.g. insert a new header) or even create a new HTTP request if the attacker controls the HTTP met…

    aio-libs aiohttp py3-cassandra-medusa aiohttp Debian Ubuntu Wolfi PyPI
  • Low 3.5
    CVE-2023-36479

    Jetty vulnerable to errant command quoting in CGI Servlet

    Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for…

    Eclipse Foundation jetty.project cassandra-reaper jetty9 Debian Ubuntu Wolfi Maven
  • Low 3.1
    CVE-2024-22047

    Audited Log Integrity Errors Due to Race Condition

    A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.

    audited RubyGems

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2251014
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2251019
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2251200
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2251643
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2252064
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2252235
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2252248
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2252450
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2252945
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2252968
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2253191
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2253212
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2253381
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2253519
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2253618
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2253621
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2253673
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254074
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254178
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254230
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254383
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254408
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254491
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254492
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254612
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254690
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254694
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2254827
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255026
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255329
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255344
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255346
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255385
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255421
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255424
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255426
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255546
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2255658