Red Hat Security AdvisoryRHSA-2023:1151
Satellite 6.11.5 Async Security Update
Released 2023-03-07 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Satellite 6.11 for RHEL 7 candlepin-4.1.19-1.el7sat, candlepin-selinux-4.1.19-1.el7sat, foreman-3.1.1.26-1.el7sat +42
- Red Hat Satellite 6.11 for RHEL 8 candlepin-4.1.19-1.el8sat, candlepin-selinux-4.1.19-1.el8sat, foreman-3.1.1.26-1.el8sat +42
Fixes 2 records
Priority HIGH 82
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (vi…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02601 · Published 2022-12-05 · Fixed in 7.0.3.1, 6.1.6.1 +2 CWE-502
Priority LOW 39
In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGL…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03409 · Published 2022-10-02 · Partial fix · 2.12.7.1, 2.13.4.2 CWE-502
