Red Hat Security Advisory: Satellite 6.13.5 Async Security Update

CVE-2022-1292 — openssl: c_rehash script allows command injection CVE-2022-2068 — openssl: the c_rehash script allows command injection CVE-2022-3874 — foreman: OS command injection via ct_command and fcct_command CVE-2022-24439 — GitPython: improper user input validation leads into a RCE CVE-2022-46648 — ruby-git: code injection vulnerability CVE-2022-47318 — ruby-git: code injection vulnerability CVE-2023-0462 — Satellite/Foreman: Arbitrary code execution through yaml global parameters CVE-2023-3817 — OpenSSL: Excessive time spent checking DH q parameter value CVE-2023-31047 — python-django: Potential bypass of validation when uploading multiple files using one form field CVE-2023-36053 — python-django: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator CVE-2023-39325 — golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) CVE-2023-40267 — GitPython: Insecure non-multi options in clone and clone_from is not blocked CVE-2023-44487 — HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)