Red Hat Security Advisory

RHSA-2023:7851

Satellite 6.14.1 Async Security Update

Released 2023-12-14 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Satellite 6.14 for RHEL 8 createrepo_c-1.0.2-2.el8pc, createrepo_c-libs-1.0.2-2.el8pc, foreman-3.7.0.10-1.el8sat +47

TI-2023-21666 CVE-2023-41040 · GHSA-cwvm-v4w8-q58c

MEDIUM 62

GitPython is a python library used to interact with Git repositories.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01093 Published 2023-08-30 Partial fix · 3.1.37 CWE-22

TI-2023-23495 CVE-2023-43804 · GHSA-v845-jxx5-vc9f

LOW 38

urllib3 is a user-friendly HTTP client library for Python.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0136 Published 2023-10-04 Partial fix · 2.0.6, 1.26.17 CWE-200

TI-2023-04498 CVE-2023-4886 · GHSA-r2mj-49jv-4jq7

LOW 31

A sensitive information exposure vulnerability was found in foreman.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00288 Published 2023-10-03 Fixed in 3.5.1.24-1.el8sat, 3.7.0.10-1.el8sat +1 CWE-200

TI-2023-24565 CVE-2023-45803 · GHSA-g4mx-q9vg-27p4

LOW 20

urllib3 is a user-friendly HTTP client library for Python.

CVSS 3.1MEDIUM 4.2 Adjacent network High privileges No interaction EPSS 0.00593 Published 2023-10-17 Partial fix · 2.0.7, 1.26.18 CWE-200

TI-2023-12909 CVE-2023-28362 · GHSA-4g8v-vg43-wpgf

LOW 19

The redirect_to method in Rails allows provided values to contain characters which are not legal in an HTTP header value.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00333 Published 2025-01-09 Partial fix · 7.0.5.1, 6.1.7.4 CWE-116