RHSA-2023:7851
- Source
- https://access.redhat.com/errata/RHSA-2023:7851
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2023:7851.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2023:7851
- Related
- Published
- 2024-09-18T05:14:53Z
- Modified
- 2024-10-09T20:57:34Z
- Severity
-
- 6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: Satellite 6.14.1 Async Security Update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2023:7851
- https://access.redhat.com/security/updates/classification/#moderate
- https://access.redhat.com/documentation/en-us/red_hat_satellite/6.14/html/upgrading_red_hat_satellite_to_6.14/index
- https://bugzilla.redhat.com/show_bug.cgi?id=2217785
- https://bugzilla.redhat.com/show_bug.cgi?id=2230135
- https://bugzilla.redhat.com/show_bug.cgi?id=2246840
- https://bugzilla.redhat.com/show_bug.cgi?id=2247040
- https://bugzilla.redhat.com/show_bug.cgi?id=2250342
- https://bugzilla.redhat.com/show_bug.cgi?id=2250343
- https://bugzilla.redhat.com/show_bug.cgi?id=2250344
- https://bugzilla.redhat.com/show_bug.cgi?id=2250345
- https://bugzilla.redhat.com/show_bug.cgi?id=2250349
- https://bugzilla.redhat.com/show_bug.cgi?id=2250350
- https://bugzilla.redhat.com/show_bug.cgi?id=2250351
- https://bugzilla.redhat.com/show_bug.cgi?id=2250352
- https://bugzilla.redhat.com/show_bug.cgi?id=2251799
- https://bugzilla.redhat.com/show_bug.cgi?id=2254080
- https://bugzilla.redhat.com/show_bug.cgi?id=2254085
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7851.json
- https://access.redhat.com/security/cve/CVE-2023-4886
- https://www.cve.org/CVERecord?id=CVE-2023-4886
- https://nvd.nist.gov/vuln/detail/CVE-2023-4886
- https://access.redhat.com/security/cve/CVE-2023-28362
- https://www.cve.org/CVERecord?id=CVE-2023-28362
- https://nvd.nist.gov/vuln/detail/CVE-2023-28362
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2023-28362.yml
- https://access.redhat.com/security/cve/CVE-2023-41040
- https://www.cve.org/CVERecord?id=CVE-2023-41040
- https://nvd.nist.gov/vuln/detail/CVE-2023-41040
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-cwvm-v4w8-q58c
- https://access.redhat.com/security/cve/CVE-2023-43804
- https://bugzilla.redhat.com/show_bug.cgi?id=2242493
- https://www.cve.org/CVERecord?id=CVE-2023-43804
- https://nvd.nist.gov/vuln/detail/CVE-2023-43804
- https://access.redhat.com/security/cve/CVE-2023-45803
- https://www.cve.org/CVERecord?id=CVE-2023-45803
- https://nvd.nist.gov/vuln/detail/CVE-2023-45803
- https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9
- https://github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4
- https://www.rfc-editor.org/rfc/rfc9110.html#name-get
Affected packages
Red Hat:satellite_capsule:6.14::el8 / foreman
Package
- Name
- foreman
- Purl
- pkg:rpm/redhat/foreman
Red Hat:satellite_capsule:6.14::el8 / foreman-cli
Package
- Name
- foreman-cli
- Purl
- pkg:rpm/redhat/foreman-cli
Red Hat:satellite_capsule:6.14::el8 / foreman-debug
Package
- Name
- foreman-debug
- Purl
- pkg:rpm/redhat/foreman-debug
Red Hat:satellite_capsule:6.14::el8 / foreman-dynflow-sidekiq
Package
- Name
- foreman-dynflow-sidekiq
- Purl
- pkg:rpm/redhat/foreman-dynflow-sidekiq
Red Hat:satellite_capsule:6.14::el8 / foreman-ec2
Package
- Name
- foreman-ec2
- Purl
- pkg:rpm/redhat/foreman-ec2
Red Hat:satellite_capsule:6.14::el8 / foreman-installer
Package
- Name
- foreman-installer
- Purl
- pkg:rpm/redhat/foreman-installer
Red Hat:satellite_capsule:6.14::el8 / foreman-installer-katello
Package
- Name
- foreman-installer-katello
- Purl
- pkg:rpm/redhat/foreman-installer-katello
Red Hat:satellite_capsule:6.14::el8 / foreman-journald
Package
- Name
- foreman-journald
- Purl
- pkg:rpm/redhat/foreman-journald
Red Hat:satellite_capsule:6.14::el8 / foreman-libvirt
Package
- Name
- foreman-libvirt
- Purl
- pkg:rpm/redhat/foreman-libvirt
Red Hat:satellite_capsule:6.14::el8 / foreman-openstack
Package
- Name
- foreman-openstack
- Purl
- pkg:rpm/redhat/foreman-openstack
Red Hat:satellite_capsule:6.14::el8 / foreman-ovirt
Package
- Name
- foreman-ovirt
- Purl
- pkg:rpm/redhat/foreman-ovirt
Red Hat:satellite_capsule:6.14::el8 / foreman-postgresql
Package
- Name
- foreman-postgresql
- Purl
- pkg:rpm/redhat/foreman-postgresql
Red Hat:satellite_capsule:6.14::el8 / foreman-redis
Package
- Name
- foreman-redis
- Purl
- pkg:rpm/redhat/foreman-redis
Red Hat:satellite_capsule:6.14::el8 / foreman-service
Package
- Name
- foreman-service
- Purl
- pkg:rpm/redhat/foreman-service
Red Hat:satellite_capsule:6.14::el8 / foreman-telemetry
Package
- Name
- foreman-telemetry
- Purl
- pkg:rpm/redhat/foreman-telemetry
Red Hat:satellite_capsule:6.14::el8 / foreman-vmware
Package
- Name
- foreman-vmware
- Purl
- pkg:rpm/redhat/foreman-vmware
Red Hat:satellite_utils:6.14::el8 / foreman
Package
- Name
- foreman
- Purl
- pkg:rpm/redhat/foreman
Red Hat:satellite_utils:6.14::el8 / foreman-cli
Package
- Name
- foreman-cli
- Purl
- pkg:rpm/redhat/foreman-cli
Red Hat:satellite_utils:6.14::el8 / foreman-debug
Package
- Name
- foreman-debug
- Purl
- pkg:rpm/redhat/foreman-debug
Red Hat:satellite_utils:6.14::el8 / foreman-dynflow-sidekiq
Package
- Name
- foreman-dynflow-sidekiq
- Purl
- pkg:rpm/redhat/foreman-dynflow-sidekiq
Red Hat:satellite_utils:6.14::el8 / foreman-ec2
Package
- Name
- foreman-ec2
- Purl
- pkg:rpm/redhat/foreman-ec2
Red Hat:satellite_utils:6.14::el8 / foreman-journald
Package
- Name
- foreman-journald
- Purl
- pkg:rpm/redhat/foreman-journald
Red Hat:satellite_utils:6.14::el8 / foreman-libvirt
Package
- Name
- foreman-libvirt
- Purl
- pkg:rpm/redhat/foreman-libvirt
Red Hat:satellite_utils:6.14::el8 / foreman-openstack
Package
- Name
- foreman-openstack
- Purl
- pkg:rpm/redhat/foreman-openstack
Red Hat:satellite_utils:6.14::el8 / foreman-ovirt
Package
- Name
- foreman-ovirt
- Purl
- pkg:rpm/redhat/foreman-ovirt
Red Hat:satellite_utils:6.14::el8 / foreman-postgresql
Package
- Name
- foreman-postgresql
- Purl
- pkg:rpm/redhat/foreman-postgresql
Red Hat:satellite_utils:6.14::el8 / foreman-redis
Package
- Name
- foreman-redis
- Purl
- pkg:rpm/redhat/foreman-redis
Red Hat:satellite_utils:6.14::el8 / foreman-service
Package
- Name
- foreman-service
- Purl
- pkg:rpm/redhat/foreman-service
Red Hat:satellite_utils:6.14::el8 / foreman-telemetry
Package
- Name
- foreman-telemetry
- Purl
- pkg:rpm/redhat/foreman-telemetry
Red Hat:satellite_utils:6.14::el8 / foreman-vmware
Package
- Name
- foreman-vmware
- Purl
- pkg:rpm/redhat/foreman-vmware
Red Hat:satellite:6.14::el8 / foreman
Package
- Name
- foreman
- Purl
- pkg:rpm/redhat/foreman
Red Hat:satellite:6.14::el8 / foreman-cli
Package
- Name
- foreman-cli
- Purl
- pkg:rpm/redhat/foreman-cli
Red Hat:satellite:6.14::el8 / foreman-debug
Package
- Name
- foreman-debug
- Purl
- pkg:rpm/redhat/foreman-debug
Red Hat:satellite:6.14::el8 / foreman-dynflow-sidekiq
Package
- Name
- foreman-dynflow-sidekiq
- Purl
- pkg:rpm/redhat/foreman-dynflow-sidekiq
Red Hat:satellite:6.14::el8 / foreman-ec2
Package
- Name
- foreman-ec2
- Purl
- pkg:rpm/redhat/foreman-ec2
Red Hat:satellite:6.14::el8 / foreman-installer
Package
- Name
- foreman-installer
- Purl
- pkg:rpm/redhat/foreman-installer
Red Hat:satellite:6.14::el8 / foreman-installer-katello
Package
- Name
- foreman-installer-katello
- Purl
- pkg:rpm/redhat/foreman-installer-katello
Red Hat:satellite:6.14::el8 / foreman-journald
Package
- Name
- foreman-journald
- Purl
- pkg:rpm/redhat/foreman-journald
Red Hat:satellite:6.14::el8 / foreman-libvirt
Package
- Name
- foreman-libvirt
- Purl
- pkg:rpm/redhat/foreman-libvirt
Red Hat:satellite:6.14::el8 / foreman-openstack
Package
- Name
- foreman-openstack
- Purl
- pkg:rpm/redhat/foreman-openstack
Red Hat:satellite:6.14::el8 / foreman-ovirt
Package
- Name
- foreman-ovirt
- Purl
- pkg:rpm/redhat/foreman-ovirt
Red Hat:satellite:6.14::el8 / foreman-postgresql
Package
- Name
- foreman-postgresql
- Purl
- pkg:rpm/redhat/foreman-postgresql
Red Hat:satellite:6.14::el8 / foreman-redis
Package
- Name
- foreman-redis
- Purl
- pkg:rpm/redhat/foreman-redis
Red Hat:satellite:6.14::el8 / foreman-service
Package
- Name
- foreman-service
- Purl
- pkg:rpm/redhat/foreman-service
Red Hat:satellite:6.14::el8 / foreman-telemetry
Package
- Name
- foreman-telemetry
- Purl
- pkg:rpm/redhat/foreman-telemetry
Red Hat:satellite:6.14::el8 / foreman-vmware
Package
- Name
- foreman-vmware
- Purl
- pkg:rpm/redhat/foreman-vmware
Red Hat:satellite:6.14::el8 / rubygem-actionpack
Package
- Name
- rubygem-actionpack
- Purl
- pkg:rpm/redhat/rubygem-actionpack
Red Hat:satellite_capsule:6.14::el8 / python-gitpython
Package
- Name
- python-gitpython
- Purl
- pkg:rpm/redhat/python-gitpython
Red Hat:satellite_capsule:6.14::el8 / python39-gitpython
Package
- Name
- python39-gitpython
- Purl
- pkg:rpm/redhat/python39-gitpython
Red Hat:satellite:6.14::el8 / python-gitpython
Package
- Name
- python-gitpython
- Purl
- pkg:rpm/redhat/python-gitpython
Red Hat:satellite:6.14::el8 / python39-gitpython
Package
- Name
- python39-gitpython
- Purl
- pkg:rpm/redhat/python39-gitpython
Red Hat:satellite_capsule:6.14::el8 / createrepo_c
Package
- Name
- createrepo_c
- Purl
- pkg:rpm/redhat/createrepo_c
Red Hat:satellite_capsule:6.14::el8 / createrepo_c-debuginfo
Package
- Name
- createrepo_c-debuginfo
- Purl
- pkg:rpm/redhat/createrepo_c-debuginfo
Red Hat:satellite_capsule:6.14::el8 / createrepo_c-debugsource
Package
- Name
- createrepo_c-debugsource
- Purl
- pkg:rpm/redhat/createrepo_c-debugsource
Red Hat:satellite_capsule:6.14::el8 / createrepo_c-libs
Package
- Name
- createrepo_c-libs
- Purl
- pkg:rpm/redhat/createrepo_c-libs
Red Hat:satellite_capsule:6.14::el8 / createrepo_c-libs-debuginfo
Package
- Name
- createrepo_c-libs-debuginfo
- Purl
- pkg:rpm/redhat/createrepo_c-libs-debuginfo
Red Hat:satellite_capsule:6.14::el8 / pulpcore-selinux
Package
- Name
- pulpcore-selinux
- Purl
- pkg:rpm/redhat/pulpcore-selinux
Red Hat:satellite_capsule:6.14::el8 / python-django-import-export
Package
- Name
- python-django-import-export
- Purl
- pkg:rpm/redhat/python-django-import-export
Red Hat:satellite_capsule:6.14::el8 / python-pulp-rpm
Package
- Name
- python-pulp-rpm
- Purl
- pkg:rpm/redhat/python-pulp-rpm
Red Hat:satellite_capsule:6.14::el8 / python-pulpcore
Package
- Name
- python-pulpcore
- Purl
- pkg:rpm/redhat/python-pulpcore
Red Hat:satellite_capsule:6.14::el8 / python-urllib3
Package
- Name
- python-urllib3
- Purl
- pkg:rpm/redhat/python-urllib3
Red Hat:satellite_capsule:6.14::el8 / python3-createrepo_c
Package
- Name
- python3-createrepo_c
- Purl
- pkg:rpm/redhat/python3-createrepo_c
Red Hat:satellite_capsule:6.14::el8 / python3-createrepo_c-debuginfo
Package
- Name
- python3-createrepo_c-debuginfo
- Purl
- pkg:rpm/redhat/python3-createrepo_c-debuginfo
Red Hat:satellite_capsule:6.14::el8 / python39-createrepo_c
Package
- Name
- python39-createrepo_c
- Purl
- pkg:rpm/redhat/python39-createrepo_c
Red Hat:satellite_capsule:6.14::el8 / python39-createrepo_c-debuginfo
Package
- Name
- python39-createrepo_c-debuginfo
- Purl
- pkg:rpm/redhat/python39-createrepo_c-debuginfo
Red Hat:satellite_capsule:6.14::el8 / python39-django-import-export
Package
- Name
- python39-django-import-export
- Purl
- pkg:rpm/redhat/python39-django-import-export
Red Hat:satellite_capsule:6.14::el8 / python39-pulp-rpm
Package
- Name
- python39-pulp-rpm
- Purl
- pkg:rpm/redhat/python39-pulp-rpm
Red Hat:satellite_capsule:6.14::el8 / python39-pulpcore
Package
- Name
- python39-pulpcore
- Purl
- pkg:rpm/redhat/python39-pulpcore
Red Hat:satellite_capsule:6.14::el8 / python39-urllib3
Package
- Name
- python39-urllib3
- Purl
- pkg:rpm/redhat/python39-urllib3
Red Hat:satellite_capsule:6.14::el8 / rubygem-smart_proxy_remote_execution_ssh
Package
- Name
- rubygem-smart_proxy_remote_execution_ssh
- Purl
- pkg:rpm/redhat/rubygem-smart_proxy_remote_execution_ssh
Red Hat:satellite_capsule:6.14::el8 / satellite
Package
- Name
- satellite
- Purl
- pkg:rpm/redhat/satellite
Red Hat:satellite_capsule:6.14::el8 / satellite-capsule
Package
- Name
- satellite-capsule
- Purl
- pkg:rpm/redhat/satellite-capsule
Red Hat:satellite_capsule:6.14::el8 / satellite-cli
Package
- Name
- satellite-cli
- Purl
- pkg:rpm/redhat/satellite-cli
Red Hat:satellite_capsule:6.14::el8 / satellite-common
Package
- Name
- satellite-common
- Purl
- pkg:rpm/redhat/satellite-common
Red Hat:satellite_utils:6.14::el8 / satellite
Package
- Name
- satellite
- Purl
- pkg:rpm/redhat/satellite
Red Hat:satellite_utils:6.14::el8 / satellite-capsule
Package
- Name
- satellite-capsule
- Purl
- pkg:rpm/redhat/satellite-capsule
Red Hat:satellite_utils:6.14::el8 / satellite-cli
Package
- Name
- satellite-cli
- Purl
- pkg:rpm/redhat/satellite-cli
Red Hat:satellite_utils:6.14::el8 / satellite-common
Package
- Name
- satellite-common
- Purl
- pkg:rpm/redhat/satellite-common
Red Hat:satellite:6.14::el8 / createrepo_c
Package
- Name
- createrepo_c
- Purl
- pkg:rpm/redhat/createrepo_c
Red Hat:satellite:6.14::el8 / createrepo_c-debuginfo
Package
- Name
- createrepo_c-debuginfo
- Purl
- pkg:rpm/redhat/createrepo_c-debuginfo
Red Hat:satellite:6.14::el8 / createrepo_c-debugsource
Package
- Name
- createrepo_c-debugsource
- Purl
- pkg:rpm/redhat/createrepo_c-debugsource
Red Hat:satellite:6.14::el8 / createrepo_c-libs
Package
- Name
- createrepo_c-libs
- Purl
- pkg:rpm/redhat/createrepo_c-libs
Red Hat:satellite:6.14::el8 / createrepo_c-libs-debuginfo
Package
- Name
- createrepo_c-libs-debuginfo
- Purl
- pkg:rpm/redhat/createrepo_c-libs-debuginfo
Red Hat:satellite:6.14::el8 / pulpcore-selinux
Package
- Name
- pulpcore-selinux
- Purl
- pkg:rpm/redhat/pulpcore-selinux
Red Hat:satellite:6.14::el8 / python-django-import-export
Package
- Name
- python-django-import-export
- Purl
- pkg:rpm/redhat/python-django-import-export
Red Hat:satellite:6.14::el8 / python-pulp-rpm
Package
- Name
- python-pulp-rpm
- Purl
- pkg:rpm/redhat/python-pulp-rpm
Red Hat:satellite:6.14::el8 / python-pulpcore
Package
- Name
- python-pulpcore
- Purl
- pkg:rpm/redhat/python-pulpcore
Red Hat:satellite:6.14::el8 / python-urllib3
Package
- Name
- python-urllib3
- Purl
- pkg:rpm/redhat/python-urllib3
Red Hat:satellite:6.14::el8 / python3-createrepo_c
Package
- Name
- python3-createrepo_c
- Purl
- pkg:rpm/redhat/python3-createrepo_c
Red Hat:satellite:6.14::el8 / python3-createrepo_c-debuginfo
Package
- Name
- python3-createrepo_c-debuginfo
- Purl
- pkg:rpm/redhat/python3-createrepo_c-debuginfo
Red Hat:satellite:6.14::el8 / python39-createrepo_c
Package
- Name
- python39-createrepo_c
- Purl
- pkg:rpm/redhat/python39-createrepo_c
Red Hat:satellite:6.14::el8 / python39-createrepo_c-debuginfo
Package
- Name
- python39-createrepo_c-debuginfo
- Purl
- pkg:rpm/redhat/python39-createrepo_c-debuginfo
Red Hat:satellite:6.14::el8 / python39-django-import-export
Package
- Name
- python39-django-import-export
- Purl
- pkg:rpm/redhat/python39-django-import-export
Red Hat:satellite:6.14::el8 / python39-pulp-rpm
Package
- Name
- python39-pulp-rpm
- Purl
- pkg:rpm/redhat/python39-pulp-rpm
Red Hat:satellite:6.14::el8 / python39-pulpcore
Package
- Name
- python39-pulpcore
- Purl
- pkg:rpm/redhat/python39-pulpcore
Red Hat:satellite:6.14::el8 / python39-urllib3
Package
- Name
- python39-urllib3
- Purl
- pkg:rpm/redhat/python39-urllib3
Red Hat:satellite:6.14::el8 / rubygem-actioncable
Package
- Name
- rubygem-actioncable
- Purl
- pkg:rpm/redhat/rubygem-actioncable
Red Hat:satellite:6.14::el8 / rubygem-actionmailbox
Package
- Name
- rubygem-actionmailbox
- Purl
- pkg:rpm/redhat/rubygem-actionmailbox
Red Hat:satellite:6.14::el8 / rubygem-actionmailer
Package
- Name
- rubygem-actionmailer
- Purl
- pkg:rpm/redhat/rubygem-actionmailer
Red Hat:satellite:6.14::el8 / rubygem-actiontext
Package
- Name
- rubygem-actiontext
- Purl
- pkg:rpm/redhat/rubygem-actiontext
Red Hat:satellite:6.14::el8 / rubygem-actionview
Package
- Name
- rubygem-actionview
- Purl
- pkg:rpm/redhat/rubygem-actionview
Red Hat:satellite:6.14::el8 / rubygem-activejob
Package
- Name
- rubygem-activejob
- Purl
- pkg:rpm/redhat/rubygem-activejob
Red Hat:satellite:6.14::el8 / rubygem-activemodel
Package
- Name
- rubygem-activemodel
- Purl
- pkg:rpm/redhat/rubygem-activemodel
Red Hat:satellite:6.14::el8 / rubygem-activerecord
Package
- Name
- rubygem-activerecord
- Purl
- pkg:rpm/redhat/rubygem-activerecord
Red Hat:satellite:6.14::el8 / rubygem-activestorage
Package
- Name
- rubygem-activestorage
- Purl
- pkg:rpm/redhat/rubygem-activestorage
Red Hat:satellite:6.14::el8 / rubygem-activesupport
Package
- Name
- rubygem-activesupport
- Purl
- pkg:rpm/redhat/rubygem-activesupport
Red Hat:satellite:6.14::el8 / rubygem-foreman_leapp
Package
- Name
- rubygem-foreman_leapp
- Purl
- pkg:rpm/redhat/rubygem-foreman_leapp
Red Hat:satellite:6.14::el8 / rubygem-foreman_remote_execution
Package
- Name
- rubygem-foreman_remote_execution
- Purl
- pkg:rpm/redhat/rubygem-foreman_remote_execution
Red Hat:satellite:6.14::el8 / rubygem-foreman_remote_execution-cockpit
Package
- Name
- rubygem-foreman_remote_execution-cockpit
- Purl
- pkg:rpm/redhat/rubygem-foreman_remote_execution-cockpit
Red Hat:satellite:6.14::el8 / rubygem-katello
Package
- Name
- rubygem-katello
- Purl
- pkg:rpm/redhat/rubygem-katello
Red Hat:satellite:6.14::el8 / rubygem-rails
Package
- Name
- rubygem-rails
- Purl
- pkg:rpm/redhat/rubygem-rails
Red Hat:satellite:6.14::el8 / rubygem-railties
Package
- Name
- rubygem-railties
- Purl
- pkg:rpm/redhat/rubygem-railties
Red Hat:satellite:6.14::el8 / rubygem-smart_proxy_remote_execution_ssh
Package
- Name
- rubygem-smart_proxy_remote_execution_ssh
- Purl
- pkg:rpm/redhat/rubygem-smart_proxy_remote_execution_ssh
Red Hat:satellite:6.14::el8 / satellite
Package
- Name
- satellite
- Purl
- pkg:rpm/redhat/satellite
Red Hat:satellite:6.14::el8 / satellite-capsule
Package
- Name
- satellite-capsule
- Purl
- pkg:rpm/redhat/satellite-capsule
Red Hat:satellite:6.14::el8 / satellite-cli
Package
- Name
- satellite-cli
- Purl
- pkg:rpm/redhat/satellite-cli
Red Hat:satellite:6.14::el8 / satellite-common
Package
- Name
- satellite-common
- Purl
- pkg:rpm/redhat/satellite-common