RHSA-2023:4466HighCVSS 9.1

Red Hat Security Advisory: Satellite 6.13.3 Async Security Update

Published
August 3, 2023
Last Modified
November 7, 2026

🔗 CVE IDs covered (2)

CVE-2023-0118 →CVE-2022-40899 →

📋 Description

CVE-2022-40899 — python-future: remote attackers can cause denial of service via crafted Set-Cookie header from malicious web server CVE-2023-0118 — Foreman: Arbitrary code execution through templates

🎯 Affected products38

  • Red Hat Satellite 6.13 for RHEL 8
  • foreman-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-0:3.5.1.19-1.el8sat.src as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-cli-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-debug-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-dynflow-sidekiq-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-ec2-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-journald-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-libvirt-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-openstack-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-ovirt-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-postgresql-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-service-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-telemetry-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • foreman-vmware-0:3.5.1.19-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • python-future-0:0.18.3-1.el8pc.src as a component of Red Hat Satellite 6.13 for RHEL 8
  • python-pulp-rpm-0:3.18.17-1.el8pc.src as a component of Red Hat Satellite 6.13 for RHEL 8
  • python-pulpcore-0:3.21.9-1.el8pc.src as a component of Red Hat Satellite 6.13 for RHEL 8
  • python39-future-0:0.18.3-1.el8pc.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • python39-pulp-rpm-0:3.18.17-1.el8pc.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • python39-pulpcore-0:3.21.9-1.el8pc.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • rubygem-fog-vsphere-0:3.6.2-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • rubygem-fog-vsphere-0:3.6.2-1.el8sat.src as a component of Red Hat Satellite 6.13 for RHEL 8
  • rubygem-foreman_ansible-0:10.4.3-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • rubygem-foreman_ansible-0:10.4.3-1.el8sat.src as a component of Red Hat Satellite 6.13 for RHEL 8
  • rubygem-foreman_maintain-1:1.2.11-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • rubygem-foreman_maintain-1:1.2.11-1.el8sat.src as a component of Red Hat Satellite 6.13 for RHEL 8
  • rubygem-hammer_cli_foreman_ansible-0:0.5.0-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • rubygem-hammer_cli_foreman_ansible-0:0.5.0-1.el8sat.src as a component of Red Hat Satellite 6.13 for RHEL 8
  • rubygem-katello-0:4.7.0.31-1.el8sat.noarch as a component of Red Hat Satellite 6.13 for RHEL 8
  • +8 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (16)