Red Hat Security Advisory

RHSA-2022:4866

Satellite Tools 6.10.5 Async Bug Fix Update

Released 2022-06-01 · Red Hat rating Important · View on Red Hat →

Fixed in

Satellite Tools 6.10 (v. 6.10.ELS Server) puppet-agent-6.26.0-1.el6sat
Satellite Tools 6.10 (v. 7 Client) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7 ComputeNode) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7 Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7 Workstation) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7.2.AUS Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7.3.AUS Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7.4.AUS Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7.4.E4S Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7.4.TUS Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7.6.AUS Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7.6.E4S Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7.6.TUS Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7.7.AUS Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7.7.E4S Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 7.7.TUS Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 (v. 8) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.1.E4S Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.1.EUS Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.2.AUS Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.2.EUS Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.2.TUS Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.4.AUS Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.4.E4S Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.4.EUS Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.4.TUS Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.6.AUS Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.6.E4S Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. 8.6.EUS Server) puppet-agent-6.26.0-1.el8sat
Satellite Tools 6.10 (v. RHEL-ALT 7.6 Server) puppet-agent-6.26.0-1.el7sat
Satellite Tools 6.10 for RHEL 8.2.E4S puppet-agent-6.26.0-1.el8sat

Fixes 2 records

TI-2021-08596 CVE-2021-27023 · GHSA-93j5-g845-9wqp

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP…

MEDIUM 45

A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a different host.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01372 Published 2021-11-18 Fixed in 7.12.1, 6.25.1

TI-2021-08598 CVE-2021-27025 · GHSA-q4g7-jrxv-67r9

A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings…

LOW 31

A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condition prior to the first 'pluginsync'.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01109 Published 2021-11-18 Partial fix · 7.12.1, 6.25.1