RHBA-2026:14131 - Bug Fix Advisory

标题

A new release is now available for Red Hat Satellite 6.19 for RHEL 9.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

描述

Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.

Security Fix(es):

Users of Red Hat Satellite are advised to upgrade to these updated
packages, which fix these bugs.

解决方案

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For detailed instructions how to apply this update, refer to:

https://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index

受影响的产品

• Red Hat Satellite 6.19 x86_64
• Red Hat Satellite Capsule 6.19 x86_64
• Red Hat Enterprise Linux for x86_64 9 x86_64

修复

• SAT-20238 - We get "undefined method" error when trying to show non-existent settings via id
• SAT-20584 - The root_password of the deployed systems remains same as the VM template when using Image Based Deployment on VMware via Red Hat Satellite 6
• SAT-20997 - Can't register systems with bond interface named bond-<something> AND a tagged vlan on the same interface
• SAT-23437 - Allow users with EXTERNAL authentication to have blank mail
• SAT-27267 - `cloned_from_id` is not returned for job templates when calling API
• SAT-27268 - For a cloned template `cloned_from_id` is not shown for hammer template info
• SAT-28296 - Managed interfaces without subnet assigned should include options to not initialize them at boot time
• SAT-28731 - Filters are created as completely unlimited, ignoring organizations and locations set at the role level
• SAT-29222 - Remove entitlements-related Hammer commands and fields
• SAT-29224 - Remove SCA-related Dynflow actions
• SAT-29226 - Remove handling of entitlement-mode Candlepin events
• SAT-29975 - Unregistering a system results in a partially build`able host profile
• SAT-30581 - taxonomy autocomplete showing results for both types
• SAT-30754 - /hosts/bulk/applicable_errata API is listing installable hosts
• SAT-31371 - Capsule upgrade fails with a package conflict error despite the required repositories being enabled.
• SAT-31447 - Firmware type always reverts to Automatic for Compute Profiles in Satellite
• SAT-32143 - Executing the 'katello::clean_backend_objects' rake task takes a long time to complete
• SAT-32173 - Option to see tables with no paddings
• SAT-32425 - Lifecycle Environment shows 2 Library options
• SAT-34045 - Wrong HTTP response code on oauth2 request against registry token endpoint
• SAT-34616 - Implement job template cloning in Hammer
• SAT-34620 - Composite content views can update twice due to a single incremental update of a child content view
• SAT-34812 - Under "Compliance Report", when reordering by Passed, Failed, or Other, it's failing
• SAT-35515 - Add an "expand all" option to the host table of job invocation page
• SAT-35640 - redhat.satellite.content_upload requires rpm module for python 3.12
• SAT-35668 - "Manifest matching query does not exist" importing container repo
• SAT-35917 - redhat.satellite.resource_info -> content_view_histories error: 'Failed to show resource: KeyError: "Unknown action ''show''. Supported actions: index"'
• SAT-35978 - Add "scheduled" option to the dropdown filter
• SAT-36173 - Pending errata creates a CVE, but when errata is applied, CVEs are still visible in Vulnerabilities tab
• SAT-36232 - When booting using FDI (Foreman Discovery Image) version 5.0.1-22, it's failing
• SAT-36349 - Settings page is slow to respond to clicks and searches
• SAT-36378 - Add selinux rules to connect to KubeVirt API
• SAT-36434 - Fix deploy-bootc template
• SAT-36460 - Remove unused host_tasks_workers_pool_size setting
• SAT-36462 - 'undefined method `include?' for nil:NilClass' on listing nvme controllers
• SAT-36508 - Incorrect instructions to set up KubeVirt compute resource
• SAT-36546 - Rerun action not working for failed hosts in Job details page
• SAT-36555 - UI warning in edit user page - JwtTokens
• SAT-36556 - Sync all inventory status returns "Cannot read properties of undefined (reading 'sync')" when satellite has iop enabled
• SAT-36584 - Content > Subscriptions stuck in loading state if organization GET ends with 403
• SAT-37087 - [RFE] Extend the Host - Installed Products report to include cloud billing metadata
• SAT-37168 - Admin user Unable to Perform Actions on Advisor Recommendations in Satellite Server
• SAT-37209 - Inconsistent Display of Red Hat LightSpeed Recommendations in Satellite WebUI
• SAT-37218 - Repetitive recalculation of Katello::RepositoryTypeManager.enabled_repository_types makes katello:correct_repositories very slow
• SAT-37322 - Errata applicability and Refresh applicability tasks for RHEL 7 hosts runs dnf command.
• SAT-37392 - documentation link on the Jobs page links into a 404?
• SAT-37576 - There is no progress displayed while the Flatpak scan task is running
• SAT-37655 - Executing foreman-rake command in the satellite, prints warning "W, [2025-08-28T14:25:04.030121 #11656] WARN -- : Scoped order is ignored, it's forced to be batch order."
• SAT-37679 - [review] Bulk Errata Wizard should only show installable Errata
• SAT-37795 - Error while synchronizing concurrently RPM content - PG::TRDeadlockDetected: ERROR: deadlock detected
• SAT-37805 - Hammer host info command fields contain abbreviations
• SAT-37871 - BMC power operations 'reboot' and 'reset' implemented incorrectly.
• SAT-38080 - As a user I'd like to specify the target version in leapp upgrades
• SAT-38091 - Accessing new host index page without view hosts permission displays the page with a 403 error
• SAT-38102 - Can't create CV from create CV form since empty environment id is passed for all CV types.
• SAT-38104 - Calls to upstream Candlepin consumer fail when using an apiUrl from manifest
• SAT-38131 - Rolling CV empty environment behavior is inconsistent
• SAT-38149 - locked field missing in hammer job-template info
• SAT-38164 - User's organization and location membership is not propagated to authorization checks
• SAT-38427 - Implement CSV exports on the hosts overview
• SAT-38430 - All hosts- Add action - Change Power State
• SAT-38451 - Non-admin users on Satellite with viewer role, unable to see the hostgroup.
• SAT-38479 - Enhance validation for Hostname Prefix in discovery setting.
• SAT-38571 - New All Hosts - Change Hostgroup modal has bad UX while hostgroups are loading
• SAT-38683 - Both Recommendations and Vulnerabilities apps don't work when location is set to Any
• SAT-38761 - BIOS info is not populated in All hosts page and in Host Details tab
• SAT-38785 - Revoking registry token does not prevent access to registry
• SAT-38788 - [review] Content View Filter Errata: error when searching by date
• SAT-38790 - Flatpak remotes table has inconsistent padding
• SAT-38813 - ERROR: nextval: reached maximum value of sequence "logs_id_seq"
• SAT-38859 - The kickstart default template should not be rendered for custom image-based provisioning
• SAT-38951 - idle timeout setting acting strangely
• SAT-38954 - Untagged manifests remain tagged in Katello
• SAT-38956 - Host backlink is missing in interface object
• SAT-39048 - Use certs for primary identification for hosts on katello registry
• SAT-39079 - Manage columns does not pre-check boxes of displayed columns for users without table preferences
• SAT-39084 - Pulpcore 3.85 breaks n-1 capsule syncing: gpgcheck cannot be nil
• SAT-39087 - Manage Columns modal extends offscreen and hides Save button
• SAT-39088 - IoP detection during app initialization should not rely on possibly stale values
• SAT-39181 - When using Satellite 6.17 to launch a libvirt instance it fails with an error about a cirrus video card with RHEL 10 hypervisors
• SAT-39182 - Transient issue: updating a distribution causes a task timeout for Ansible repos
• SAT-39203 - Change Hostgroup form on new UI needs to show full nested structure, not just names
• SAT-39207 - Satellite 6.19+ should not run pulpcore rpm repair 4073
• SAT-39226 - High memory usage of postgres processes on scaled Capsule
• SAT-39469 - When provisioning rhel9+ via fdi using static network information, localhost.localdomain will be created on Satellite webUI
• SAT-39480 - An error of type Sequel PoolTimeout is occurring while using Capsule to consume containers
• SAT-39758 - Search is cleared when using bottom pagination on All Hosts page
• SAT-39771 - CLI: mirror flatpak: missing product ID arg shows Ruby error
• SAT-39794 - Capsule sync fails with error Unable to update hosts 500 ISE for Capsule https://capsule.example.com:9090/container_gateway/update_hosts
• SAT-39803 - No repositories available through subscriptions on a cloud-instance host after registering it to Red Hat Satellite using global registration method
• SAT-39878 - Unauth container content from different orgs shows up for registered hosts
• SAT-40153 - Satellite upgrade from 6.17.5 to 6.18 failed during Pulpcore database migration due to incompatible versions detected for some of the pulpcore plugins
• SAT-40180 - [RFE] - Include a release version set check step during the upgrade process.
• SAT-40195 - Incorrect documentation link under Red Hat Lightspeed ? Inventory Upload in Satellite Web UI
• SAT-40206 - REX job details page is broken
• SAT-40227 - Increase Dynflow's resilience to connectivity drops
• SAT-40322 - After update to 6.17 "Login delegation logout URL" fails to redirect to external auth source
• SAT-40415 - repository_errata for CV repositories missing PRNs at run time
• SAT-40447 - satellite-maintain corrupted roles check fails even when there are no corrupted roles
• SAT-40461 - Registration fails if @rhsm_url is http, not https
• SAT-40499 - Capsule container repo complete sync fails with 'find' nil error
• SAT-40520 - AttributeError: 'NoneType' object has no attribute '_artifacts' when running pulpcore-container-handle-image-metadata in the post-upgrade step for Satellite 6.17
• SAT-40631 - Forwarder should error out on read/write action if the user does not have the right perms
• SAT-40641 - Puppet fact parser can't create OS entry blocking Satellite leapp upgrades
• SAT-40651 - Ability to change Log Level for IoP related services through satellite-installer
• SAT-40674 - Allow scoped search on 'persistence' field at `/api/v2/hosts/:id/packages`
• SAT-40676 - The hammer command executes successfully on Satellite 6.17, but it fails on Satellite 6.18.
• SAT-40688 - satellite-maintain update fails when updating IoP containers
• SAT-40692 - [Sat6] Duplicate policy and cronjob occurs if existing policy assigned to the Host is changed to another compliance policy
• SAT-40736 - Red Hat Satellite 6: After RHEL 9 host provisioning, syntax issue found in chrony.conf file when defining multiple NTP servers in "Global parameter"
• SAT-40757 - Page doesn't refresh when navigating back to Container Images via Menu
• SAT-41003 - Unable to list and install flatpaks on RHEL-10 ppc64le host
• SAT-41093 - "Too many open files" error during capsule content consumption (especially Streamed capsules)
• SAT-41158 - IOP-enabled Satellite does not clean up old inventory and client tars in ingress service resulting in disk space growth
• SAT-41161 - `containerfile_install_command` API endpoint does not return all transient packages
• SAT-41180 - N-1/N-2 Capsule sync fails with error Unable to update hosts ([RestClient::NotFound]: 404 Not Found)
• SAT-41188 - Satellite UI Displays Wrong Number of Hosts When Filter By Report Origin (Puppet , Ansible)
• SAT-41261 - Foreman-proxy bmc doesn?t work after upgrade from 3.14 to 3.15 and onward
• SAT-41301 - The top of the notification drawer is covered by the navigation with instance title banner
• SAT-41309 - Fixes #38939 - host_param macro & transient host parameters #10790
• SAT-41354 - Incorrect naming for OCP-V plugin
• SAT-41355 - Under "Compute Resources -> Virtual machines" memory displayed incorrectly
• SAT-41356 - Listing available networks when creating a new host on OCP-V requires too much permissions
• SAT-41359 - When provisioning using image and cloudInit, the userdata definition is too big (> 2K)
• SAT-41361 - Image based provisioning is currently broken, need to use DataSource to specify the base image:
• SAT-41370 - Enable incremental update through MCP
• SAT-41373 - Enable patching using remote execution through MCP
• SAT-41383 - Host Collections are nested under Hosts/Compliance instead of just Hosts
• SAT-41403 - Host could not be created and an error about network appears in the log
• SAT-41462 - Hammer download-report command ignores path option for not uploaded report
• SAT-41483 - IoP: Indicate Vuln Enabled/Disabled in Total CVEs column on the All Hosts Page
• SAT-41484 - Enabled/Disable vulnerabilities via All hosts - Row Kebab
• SAT-41485 - Enable / Disable Vulnerability analysis - Bulk Actions
• SAT-41502 - foreman_kubevirt help button results in 404
• SAT-41508 - Test Connection shows green even before all required details are provided.
• SAT-41511 - The ForemanInventoryUpload::Async::SingleHostReportJob, job always fails on Satellite 6.18.2 when IoP is enabled
• SAT-41513 - SingleHostReportJob fails with undefined method `subtree_ids' for nil:NilClass when host belongs to a hostgroup and value of host_registration_insights_inventory is false
• SAT-41516 - All communication should happen only over https during global registration execution
• SAT-41570 - i18n constants used as object keys for certain SelectableDropdown filters
• SAT-41750 - Ability to change Log Level for IoP core engine through satellite-installer
• SAT-41794 - Hosts index page incorrectly uses array index as React key for table rows
• SAT-41851 - Fix start/stop for VMs using runStrategy instead of deprecated running
• SAT-41977 - Custom yum repo sync over authed proxy fails
• SAT-41983 - Dynamic links for RH Cloud
• SAT-42011 - Remove deprecated field from docker repo authentication tokens
• SAT-42060 - Under "Compute Resources -> Virtual machines" power displayed incorrectly
• SAT-42085 - When editing activation key description, webui freezes
• SAT-42087 - Provisioning hosts do not use the host parameter in templates that are deployed
• SAT-42166 - Missing gce.json template results in errors
• SAT-42188 - hammer containerfile-install-command returns nothing and 0 exit code when no transient packages found
• SAT-42216 - Satellite manifest consumer profile cert and key found in satellite client rhsm cache
• SAT-42251 - Hammer compute-resource create fails with --ca-crt argument
• SAT-42330 - bootc information is nullified after Ansible facts upload
• SAT-42367 - Non-existent foreman discovery documentation url
• SAT-42501 - Vulnerabilities Not Displayed for Host Registered to IOP-Enabled Satellite with more than 20 repositories synced
• SAT-42582 - The VM IDs are missing when we check via the hammer command for OCP-V.
• SAT-42705 - user with admin rights inherited from user group cannot create new organizations or locations
• SAT-42724 - Satellite 6.19: Enabling IOP Displays Warning Status Under Infrastructure ? Capsules ? iop-gateway
• SAT-42730 - Kubevirt creates duplicate disks when using compute profiles
• SAT-42731 - Kubevirt does not save memory configuration in compute profiles
• SAT-42732 - MultiCV will get reset after editing a host
• SAT-42738 - Vulnerability Details Page Fails to Load (Error: Cannot Read Properties of Undefined 'synopsis')
• SAT-42743 - Red Hat Lightspeed JSON export generates invalid JSON
• SAT-42744 - Red Hat Lightspeed CSV export only includes first page of CVEs
• SAT-42765 - Host links from Packages Details page open Legacy UI instead of New UI.
• SAT-42776 - PG::SequenceGeneratorLimitExceeded: ERROR: nextval: reached maximum value of sequence "katello_rpms_id_seq" during repo sync
• SAT-42827 - hammer capsule list fails when a capsule is unreachable
• SAT-42830 - Disabled recommendation not listing correctly
• SAT-42831 - Caching issue with recommendations on All hosts page
• SAT-42839 - Manage Errata ? Job Category Not Resolving as "Katello" When Applying Errata to a Specific Host via Customized Remote Execution
• SAT-42943 - Bugs introduced by PF5 migration
• SAT-43069 - Ansible tab in host details does not refresh when roles are added or removed
• SAT-43072 - Repository sync tasks fail with 429 Too Many Requests because IoP vmaas reposcan syncs are requested when one is already in progress
• SAT-43110 - Fixes #39125 - Always print VM data, even if the provider is absent by evgeni ? Pull Request #649 ? theforeman/hammer-cli-foreman ? GitHub
• SAT-43111 - Fixes #39126 - provide empty provider_vm_specific_fields in CR::Base by evgeni ? Pull Request #650 ? theforeman/hammer-cli-foreman ? GitHub
• SAT-43242 - virt-who status not updating automatically after configured interval on Satellite server
• SAT-43307 - Remediation fails for hosts re-registered to Insights after enabling IoP
• SAT-43423 - undefined method `name' for nil:NilClass when downloading arf reports
• SAT-43654 - Installable updates column has no space between icon and number of updates
• SAT-43917 - Documentation to validate external DB connection fails with "pg_isready: unrecognized option '--clean'"
• SAT-43961 - Impossible to generate registration command via REST API in isolated networks managed by external capsules
• SAT-44141 - IoP Vulnerability JSON/CSV export file is empty when there are < 51 CVEs
• SAT-44380 - [regression] Unable to access Compute Resource in Satellite6
• SAT-23851 - Rewrite Container Content UI in React
• SAT-26055 - Multi-CV for Hosts & AKs in Web UI [Multi-CV part 3]
• SAT-30134 - Index Pulp Resource Names (PRNs) in Katello
• SAT-30671 - Track transient package installs on image mode hosts
• SAT-31650 - OpenVox Installer Changes
• SAT-31701 - Configurable documentation links to custom RHOKP instances
• SAT-35458 - Flatpak M3 - Nice to Have UX improvements
• SAT-35463 - [Part 4] - New All Hosts page - Complete the top actions and eliminate some AngularJS pages
• SAT-40266 - Support running Libvirt compute resource on RHEL10 hypervisors
• SAT-41368 - Resolve bugs affecting OCP-V prior to Satellite 6.19.0

CVE

(none)

参考

(none)