Fixed packages 19
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · Satellite Capsule 6 satellite_capsule:6.18::el9 | foreman | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite Capsule 6 satellite_capsule:6.18::el9 | foreman-debug | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite Capsule 6 satellite_capsule:6.18::el9 | foreman-pcp | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite Utils 6 satellite_utils:6.18::el9 | foreman | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite Utils 6 satellite_utils:6.18::el9 | foreman-cli | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-cli | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-debug | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-dynflow-sidekiq | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-ec2 | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-journald | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-libvirt | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-openstack | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-pcp | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-postgresql | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-redis | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-service | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-telemetry | 0:3.16.0.4-1.el9sat |
| Red Hat · Satellite 6 satellite:6.18::el9 | foreman-vmware | 0:3.16.0.4-1.el9sat |
Vulnerabilities 1
-
High 8.0
Foreman: os command injection via ct_location and fcct_location parameters
A flaw was found in Red Hat Satellite (Foreman component). This vulnerability allows an authenticated user with edit_settings permissions to achieve arbitrary command execution on the underlying operating system via insufficient server-side validation of comm…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
article
https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/updating_red_hat_satellite/index
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2396020
-
article
https://issues.redhat.com/browse/SAT-11875
-
article
https://issues.redhat.com/browse/SAT-12005
-
article
https://issues.redhat.com/browse/SAT-15137
-
article
https://issues.redhat.com/browse/SAT-15682
-
article
https://issues.redhat.com/browse/SAT-18422
-
article
https://issues.redhat.com/browse/SAT-18815
-
article
https://issues.redhat.com/browse/SAT-20253
-
article
https://issues.redhat.com/browse/SAT-20700
-
article
https://issues.redhat.com/browse/SAT-21126
-
article
https://issues.redhat.com/browse/SAT-21129
-
article
https://issues.redhat.com/browse/SAT-21543
-
article
https://issues.redhat.com/browse/SAT-21841
-
article
https://issues.redhat.com/browse/SAT-22589
-
article
https://issues.redhat.com/browse/SAT-22655
-
article
https://issues.redhat.com/browse/SAT-22998
-
article
https://issues.redhat.com/browse/SAT-23121
-
article
https://issues.redhat.com/browse/SAT-23671
-
article
https://issues.redhat.com/browse/SAT-24007
-
article
https://issues.redhat.com/browse/SAT-24175
-
article
https://issues.redhat.com/browse/SAT-25184
-
article
https://issues.redhat.com/browse/SAT-25333
-
article
https://issues.redhat.com/browse/SAT-25438
-
article
https://issues.redhat.com/browse/SAT-25439
-
article
https://issues.redhat.com/browse/SAT-25805
-
article
https://issues.redhat.com/browse/SAT-25905
-
article
https://issues.redhat.com/browse/SAT-25968
-
article
https://issues.redhat.com/browse/SAT-26013
-
article
https://issues.redhat.com/browse/SAT-26487
-
article
https://issues.redhat.com/browse/SAT-26559
-
article
https://issues.redhat.com/browse/SAT-26877
-
article
https://issues.redhat.com/browse/SAT-26905
-
article
https://issues.redhat.com/browse/SAT-27377
-
article
https://issues.redhat.com/browse/SAT-27474
-
article
https://issues.redhat.com/browse/SAT-27628
-
article
https://issues.redhat.com/browse/SAT-27937
-
article
https://issues.redhat.com/browse/SAT-28085