Red Hat Security AdvisoryRHSA-2023:4466
Satellite 6.13.3 Async Security Update
Released 2023-08-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.13 for RHEL 8 python-future-0.18.3-1.el8pc, python39-future-0.18.3-1.el8pc, rubygem-safemode-1.3.8-1.el8sat
Fixes 2 records
Priority HIGH 72
An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01925 · Published 2022-12-22 · Partial fix · 0.18.3 CWE-400
Priority MEDIUM 44
An arbitrary code execution flaw was found in Foreman.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.01382 · Published 2023-09-20 · Fixed in 3.1.1.27-1.el7sat, 3.1.1.27-1.el8sat +2 CWE-78
