RHSA-2024:10806MediumCVSS 7.4
Red Hat Security Advisory: Satellite 6.15.5 Async Update
🔗 CVE IDs covered (5)
📋 Description
CVE-2024-23342 — python-ecdsa: vulnerable to the Minerva attack CVE-2024-25126 — rubygem-rack: Denial of Service Vulnerability in Rack Content-Type Parsing CVE-2024-26141 — rubygem-rack: Possible DoS Vulnerability with Range Header in Rack CVE-2024-26144 — rubygem-activestorage: Possible Sensitive Session Information Leak in Active Storage CVE-2024-26146 — rubygem-rack: Possible Denial of Service Vulnerability in Rack Header Parsing
🔗 References (18)
- selfhttps://access.redhat.com/errata/RHSA-2024:10806
- externalhttps://access.redhat.com/security/updates/classification/#moderate
- externalhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2259780
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2265593
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2265594
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2265595
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2266063
- externalhttps://issues.redhat.com/browse/SAT-28466
- externalhttps://issues.redhat.com/browse/SAT-28665
- externalhttps://issues.redhat.com/browse/SAT-28689
- externalhttps://issues.redhat.com/browse/SAT-28690
- externalhttps://issues.redhat.com/browse/SAT-28691
- externalhttps://issues.redhat.com/browse/SAT-28693
- externalhttps://issues.redhat.com/browse/SAT-28695
- externalhttps://issues.redhat.com/browse/SAT-28696
- externalhttps://issues.redhat.com/browse/SAT-28697
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10806.json