Skip to content
OpenAdvisories
Critical RHSA-2024:7987 4 CVEs

Red Hat Security Advisory: Satellite 6.15.4 Security Update

Published Oct 11, 2024 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-cryptography 0:42.0.8-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-cryptography-debugsource 0:42.0.8-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-django 0:4.2.15-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python-gunicorn 0:22.0.0-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-cryptography 0:42.0.8-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-cryptography-debuginfo 0:42.0.8-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-django 0:4.2.15-1.el8pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.15::el8 python3.11-gunicorn 0:22.0.0-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-cryptography 0:42.0.8-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-cryptography-debugsource 0:42.0.8-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-django 0:4.2.15-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python-gunicorn 0:22.0.0-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-cryptography 0:42.0.8-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-cryptography-debuginfo 0:42.0.8-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-django 0:4.2.15-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 python3.11-gunicorn 0:22.0.0-1.el8pc
Red Hat · Satellite 6 satellite:6.15::el8 rubygem-foreman_theme_satellite 0:13.3.0-0.1.el8sat
Red Hat · Satellite 6 satellite:6.15::el8 yggdrasil-worker-forwarder 0:0.0.3-2.el8sat

Vulnerabilities 4

  • Critical 9.8
    CVE-2024-24790

    Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

    The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

    Go standard library net/netip golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  • High 7.5
    CVE-2024-1135

    HTTP Request Smuggling in benoitc/gunicorn

    Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints…

    benoitc benoitc/gunicorn reflex gunicorn Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2024-26130

    cryptography NULL pointer deference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior to version 42.0.4, if `pkcs12.serialize_key_and_certificates` is called with both a certificate whose public key did n…

    pyca cryptography py3-cassandra-medusa kubeflow-pipelines Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2024-41991

    Django vulnerable to denial-of-service attack

    An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unico…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2269617
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2275280
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2292787
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2302435
  • article
    https://issues.redhat.com/browse/SAT-25848
  • article
    https://issues.redhat.com/browse/SAT-27294
  • article
    https://issues.redhat.com/browse/SAT-27295
  • article
    https://issues.redhat.com/browse/SAT-27296
  • article
    https://issues.redhat.com/browse/SAT-27299
  • article
    https://issues.redhat.com/browse/SAT-27950
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7987.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-1135
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-1135
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-1135
  • advisory
    https://github.com/advisories/GHSA-w3h3-4rj7-4ph4
  • article
    https://github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d
  • article
    https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1
  • report
    https://access.redhat.com/security/cve/CVE-2024-24790
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-24790
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-24790
  • report
    https://access.redhat.com/security/cve/CVE-2024-26130
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-26130
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-26130
  • report
    https://access.redhat.com/security/cve/CVE-2024-41991
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-41991
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-41991
  • article
    https://www.djangoproject.com/weblog/2024/aug/06/security-releases/