Red Hat Security Advisory

RHSA-2019:1223

Red Hat Satellite Tools security update

Released 2019-05-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Virtualization 4 Management Agent for RHEL 7 Hosts gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat, katello-host-tools-3.5.0-2.el7sat +7
Red Hat Virtualization 4.2 Management Agent for RHEL 7.6 EUS Hosts gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat, katello-host-tools-3.5.0-2.el7sat +10
Satellite Tools 6.5 (v. 5.9.AUS Server) gofer-2.11.9-1.el5, katello-agent-3.5.0-2.el5, katello-host-tools-3.5.0-2.el5 +20
Satellite Tools 6.5 (v. 5.9.ELS Server) gofer-2.11.9-1.el5, katello-agent-3.5.0-2.el5, katello-host-tools-3.5.0-2.el5 +20
Satellite Tools 6.5 (v. 6 Client) gofer-2.11.9-1.el6sat, katello-agent-3.5.0-2.el6sat, katello-host-tools-3.5.0-2.el6sat +16
Satellite Tools 6.5 (v. 6 ComputeNode) gofer-2.11.9-1.el6sat, katello-agent-3.5.0-2.el6sat, katello-host-tools-3.5.0-2.el6sat +16
Satellite Tools 6.5 (v. 6 Server) gofer-2.11.9-1.el6sat, katello-agent-3.5.0-2.el6sat, katello-host-tools-3.5.0-2.el6sat +16
Satellite Tools 6.5 (v. 6 Workstation) gofer-2.11.9-1.el6sat, katello-agent-3.5.0-2.el6sat, katello-host-tools-3.5.0-2.el6sat +16
Satellite Tools 6.5 (v. 6.4.AUS Server) katello-host-tools-3.5.0-2.el6sat, katello-host-tools-fact-plugin-3.5.0-2.el6sat, openscap-1.2.4-2.el6 +5
Satellite Tools 6.5 (v. 6.5.AUS Server) katello-host-tools-3.5.0-2.el6sat, katello-host-tools-fact-plugin-3.5.0-2.el6sat, openscap-1.2.4-2.el6 +5
Satellite Tools 6.5 (v. 6.6.AUS Server) katello-host-tools-3.5.0-2.el6sat, katello-host-tools-fact-plugin-3.5.0-2.el6sat, openscap-1.2.4-2.el6 +5
Satellite Tools 6.5 (v. 7 Client) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +20
Satellite Tools 6.5 (v. 7 ComputeNode) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +20
Satellite Tools 6.5 (v. 7 Server) foreman-1.20.1.34-1.el7sat, foreman-cli-1.20.1.34-1.el7sat, future-0.16.0-11.el7sat +47
Satellite Tools 6.5 (v. 7 Workstation) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +20
Satellite Tools 6.5 (v. 7.2.AUS Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 7.2.E4S Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 7.2.TUS Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 7.3.AUS Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 7.3.E4S Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 7.3.TUS Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 7.4.AUS Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 7.4.E4S Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 7.4.EUS ComputeNode) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +20
Satellite Tools 6.5 (v. 7.4.EUS Server) foreman-1.20.1.34-1.el7sat, foreman-cli-1.20.1.34-1.el7sat, future-0.16.0-11.el7sat +47
Satellite Tools 6.5 (v. 7.4.TUS Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 7.5.EUS ComputeNode) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +20
Satellite Tools 6.5 (v. 7.5.EUS Server) foreman-1.20.1.34-1.el7sat, foreman-cli-1.20.1.34-1.el7sat, future-0.16.0-11.el7sat +47
Satellite Tools 6.5 (v. 7.6.AUS Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 7.6.E4S Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 7.6.EUS Compute Node) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +20
Satellite Tools 6.5 (v. 7.6.EUS Server) foreman-1.20.1.34-1.el7sat, foreman-cli-1.20.1.34-1.el7sat, future-0.16.0-11.el7sat +47
Satellite Tools 6.5 (v. 7.6.TUS Server) future-0.16.0-11.el7sat, gofer-2.12.5-3.el7sat, katello-agent-3.5.0-2.el7sat +26
Satellite Tools 6.5 (v. 8) future-0.16.0-11.el8sat, gofer-2.12.5-3.el8sat, katello-agent-3.5.0-2.el8sat +17
Satellite Tools 6.5 (v. RHEL-ALT 7.6 Server) gofer-2.12.5-3.el7sat, python-gofer-2.12.5-3.el7sat, python-gofer-proton-2.12.5-3.el7sat +3

Fixes 1 record

TI-2019-02857 CVE-2019-3845 · GHSA-rcf7-8mg9-v2ww

Improper access control in Red Hat qpid-dispatch-router

LOW 36

A lack of access control was found in the message queues maintained by Satellite's QPID broker and used by katello-agent in versions before Satellite 6.2, Satellite 6.1 optional and Satellite Capsule 6.1.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00679 Published 2019-04-11 Fixed CWE-284