RHSA-2022:5498MediumCVSS 9.4

Red Hat Security Advisory: Satellite 6.11 Release

Published
July 5, 2022
Last Modified
August 24, 2026

🔗 CVE IDs covered (28)

CVE-2021-45116 →CVE-2021-3584 →CVE-2021-33930 →CVE-2021-44568 →CVE-2022-22818 →CVE-2022-23634 →CVE-2022-23833 →CVE-2022-23837 →CVE-2021-33928 →CVE-2021-44420 →CVE-2021-45452 →CVE-2022-23633 →CVE-2022-28347 →CVE-2021-3200 →CVE-2021-21290 →CVE-2021-32839 →CVE-2021-33929 →CVE-2021-33938 →CVE-2021-42550 →CVE-2021-43818 →CVE-2022-28346 →CVE-2021-4142 →CVE-2021-21295 →CVE-2021-21409 →CVE-2021-30151 →CVE-2021-41136 →CVE-2021-43797 →CVE-2021-45115 →

📋 Description

CVE-2021-3200 — libsolv: heap-based buffer overflow in testcase_read() in src/testcase.c CVE-2021-3584 — foreman: Authenticate remote code execution through Sendmail configuration CVE-2021-4142 — Satellite: Allow unintended SCA certificate to authenticate Candlepin CVE-2021-21290 — netty: Information disclosure via the local system temporary directory CVE-2021-21295 — netty: possible request smuggling in HTTP/2 due missing validation CVE-2021-21409 — netty: Request smuggling via content-length header CVE-2021-30151 — sidekiq: XSS via the queue name of the live-poll feature CVE-2021-32839 — python-sqlparse: ReDoS via regular expression in StripComments filter CVE-2021-33928 — libsolv: heap-based buffer overflow in pool_installable() in src/repo.h CVE-2021-33929 — libsolv: heap-based buffer overflow in pool_disabled_solvable() in src/repo.h CVE-2021-33930 — libsolv: heap-based buffer overflow in pool_installable_whatprovides() in src/repo.h CVE-2021-33938 — libsolv: heap-based buffer overflow in prune_to_recommended() in src/policy.c CVE-2021-41136 — rubygem-puma: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma CVE-2021-42550 — logback: remote code execution through JNDI call from within its configuration file CVE-2021-43797 — netty: control chars in header names may lead to HTTP request smuggling CVE-2021-43818 — python-lxml: HTML Cleaner allows crafted and SVG embedded scripts to pass through CVE-2021-44420 — django: potential bypass of an upstream access control based on URL paths CVE-2021-44568 — libsolv: heap-overflows in resolve_dependencies function CVE-2021-45115 — django: Denial-of-service possibility in UserAttributeSimilarityValidator CVE-2021-45116 — django: Potential information disclosure in dictsort template filter CVE-2021-45452 — django: Potential directory-traversal via Storage.save() CVE-2022-22818 — django: Possible XSS via '{% debug %}' template tag CVE-2022-23633 — rubygem-actionpack: information leak between requests CVE-2022-23634 — rubygem-puma: rubygem-rails: information leak between requests CVE-2022-23833 — django: Denial-of-service possibility in file uploads CVE-2022-23837 — sidekiq: WebUI Denial of Service caused by number of days on graph CVE-2022-28346 — Django: SQL injection in QuerySet.annotate(),aggregate() and extra() CVE-2022-28347 — Django: SQL injection via QuerySet.explain(options) on PostgreSQL

🎯 Affected products200

  • Red Hat Satellite 6.11 for RHEL 7
  • Red Hat Satellite 6.11 for RHEL 8
  • ansible-collection-redhat-satellite-0:3.3.0-1.el7sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 7
  • ansible-collection-redhat-satellite-0:3.3.0-1.el7sat.src as a component of Red Hat Satellite 6.11 for RHEL 7
  • ansible-collection-redhat-satellite-0:3.3.0-1.el8sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 8
  • ansible-collection-redhat-satellite-0:3.3.0-1.el8sat.src as a component of Red Hat Satellite 6.11 for RHEL 8
  • ansible-collection-redhat-satellite_operations-0:1.2.3-1.el7sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 7
  • ansible-collection-redhat-satellite_operations-0:1.2.3-1.el7sat.src as a component of Red Hat Satellite 6.11 for RHEL 7
  • ansible-collection-redhat-satellite_operations-0:1.2.3-1.el8sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 8
  • ansible-collection-redhat-satellite_operations-0:1.2.3-1.el8sat.src as a component of Red Hat Satellite 6.11 for RHEL 8
  • ansible-lint-0:5.0.8-3.el8pc.noarch as a component of Red Hat Satellite 6.11 for RHEL 8
  • ansible-lint-0:5.0.8-3.el8pc.src as a component of Red Hat Satellite 6.11 for RHEL 8
  • ansible-runner-0:1.4.7-1.el7ar.noarch as a component of Red Hat Satellite 6.11 for RHEL 7
  • ansible-runner-0:1.4.7-1.el7ar.src as a component of Red Hat Satellite 6.11 for RHEL 7
  • ansible-runner-0:1.4.7-1.el8ar.noarch as a component of Red Hat Satellite 6.11 for RHEL 8
  • ansible-runner-0:1.4.7-1.el8ar.src as a component of Red Hat Satellite 6.11 for RHEL 8
  • ansiblerole-foreman_scap_client-0:0.2.0-2.el7sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 7
  • ansiblerole-foreman_scap_client-0:0.2.0-2.el7sat.src as a component of Red Hat Satellite 6.11 for RHEL 7
  • ansiblerole-foreman_scap_client-0:0.2.0-2.el8sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 8
  • ansiblerole-foreman_scap_client-0:0.2.0-2.el8sat.src as a component of Red Hat Satellite 6.11 for RHEL 8
  • ansiblerole-insights-client-0:1.7.1-2.el7sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 7
  • ansiblerole-insights-client-0:1.7.1-2.el7sat.src as a component of Red Hat Satellite 6.11 for RHEL 7
  • ansiblerole-insights-client-0:1.7.1-2.el8sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 8
  • ansiblerole-insights-client-0:1.7.1-2.el8sat.src as a component of Red Hat Satellite 6.11 for RHEL 8
  • candlepin-0:4.1.13-1.el7sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 7
  • candlepin-0:4.1.13-1.el7sat.src as a component of Red Hat Satellite 6.11 for RHEL 7
  • candlepin-0:4.1.13-1.el8sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 8
  • candlepin-0:4.1.13-1.el8sat.src as a component of Red Hat Satellite 6.11 for RHEL 8
  • candlepin-selinux-0:4.1.13-1.el7sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 7
  • candlepin-selinux-0:4.1.13-1.el8sat.noarch as a component of Red Hat Satellite 6.11 for RHEL 8
  • +170 more not shown

✅ Remediation

For Red Hat Satellite 6.11 see the following documentation for the release. https://access.redhat.com/documentation/en-us/red_hat_satellite/6.11 The important instructions on how to upgrade are available below. https://access.redhat.com/documentation/en-us/red_hat_satellite/6.11/html/upgrading_and_updating_red_hat_satellite Workaround: This vulnerability can be mitigated by setting following two values in `/etc/foreman/settings.yaml` file which will render them read-only from the application: :sendmail_location: '/usr/sbin/sendmail' :sendmail_arguments: '-i' Workaround: Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: As mitigation, don't use the sqlformat.format function with keyword strip_comments=True or the --strip-comments command line flag when using the sqlformat command line tool. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: A workaround for this problem: ~~~ class GuardedExecutor < ActionDispatch::Executor def call(env) ensure_completed! super end private def ensure_completed! @executor.new.complete! if @executor.active? end end # Ensure the guard is inserted before ActionDispatch::Executor Rails.application.configure do config.middleware.swap ActionDispatch::Executor, GuardedExecutor, executor end ~~~

🔗 References (478)