Red Hat Security Advisory

RHSA-2024:8718

Satellite 6.14.4.3 Async Update

Released 2024-10-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.14 for RHEL 8 foreman-3.7.0.14-1.el8sat, foreman-cli-3.7.0.14-1.el8sat, foreman-debug-3.7.0.14-1.el8sat +12

Fixes 2 records

TI-2024-07767 CVE-2024-8376 · GHSA-72qw-2vp3-gvg9

Memory leak in Eclipse Foundation Mosquitto

LOW 33

In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBL…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00749 Published 2024-10-11 Partial fix · 2.0.19 CWE-401

TI-2024-07929 CVE-2024-8553 · GHSA-ffc7-h8x5-mm7h

Foreman: read-only access to entire db from templates

LOW 28

A vulnerability was found in Foreman's loader macros introduced with report templates.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00433 Published 2024-10-31 Fixed in 3.5.1.25-1.el8sat, 3.7.0.14-1.el8sat +3 CWE-200