RHSA-2021:4702 - Security Advisory

Topic

An update is now available for Red Hat Satellite 6.10 for RHEL 7.

Description

Red Hat Satellite is a systems management tool for Linux-based
infrastructure. It allows for provisioning, remote management, and
monitoring of multiple Linux deployments with a single centralized tool.

Security Fix(es):

• python-ecdsa: Unexpected and undocumented exceptions during signature decoding (CVE-2019-14853)
• python-ecdsa: DER encoding is not being verified in signatures (CVE-2019-14859)
• rubygem-activerecord-session_store: hijack sessions by using timing attacks targeting the session id (CVE-2019-25025)
• rake: OS Command Injection via egrep in Rake::FileList (CVE-2020-8130)
• candlepin: guava - local information disclosure via temporary directory created with unsafe permissions (CVE-2020-8908)
• PyYAML: incomplete fix for CVE-2020-1747 (CVE-2020-14343)
• tfm-rubygem-nokogiri: XML external entity injection via Nokogiri::XML::Schema (CVE-2020-26247)
• tfm-rubygem-foreman_azure_rm: Azure compute resource secret_key leak to authenticated users (CVE-2021-3413)
• foreman: possible man-in-the-middle in smart_proxy realm_freeipa (CVE-2021-3494)
• foreman: BMC controller credential leak via API (CVE-2021-20256)
• python-aiohttp: Open redirect in aiohttp.web_middlewares.normalize_path_middleware (CVE-2021-21330)
• rubygem-actionpack: Possible Information Disclosure / Unintended Method Execution in Action Pack (CVE-2021-22885)
• tfm-rubygem-actionpack: rails: Possible Denial of Service vulnerability in Action Dispatch (CVE-2021-22902)
• tfm-rubygem-actionpack: Possible DoS Vulnerability in Action Controller Token Authentication (CVE-2021-22904)
• python-django: potential directory-traversal via uploaded files (CVE-2021-28658)
• tfm-rubygem-puma: incomplete fix for CVE-2019-16770 allows Denial of Service (DoS) (CVE-2021-29509)
• python-django: Potential directory-traversal via uploaded files (CVE-2021-31542)
• tfm-rubygem-addressable: ReDoS in templates (CVE-2021-32740)
• python-django: Potential directory traversal via ``admindocs`` (CVE-2021-33203)
• python-urllib3: ReDoS in the parsing of authority part of URL (CVE-2021-33503)
• python-django: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses (CVE-2021-33571)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.

Additional Changes:

• Updated Content Management backend with Pulp 3 for increased performance, scale and reliability. MongoDB is also removed from Satellite
• Adds support for Azure GovCloud
• Provides Satellite 6.10 Server support for Satellite 6.9 Capsules
• Improves support for Satellite Air Gapped and Disconnected environments
• Adds Ansible Collections content type to support disconnected environments
• Foreman_webhooks introduced to replace foreman_hooks
• Introduces UI to manage Personal Access Tokens
• Adds ability to configure Pulp repository synchronization timeouts
• Support for Convert2RHEL
• Provides advanced options when registering a host
• Supports remediation playbook signatures from console.redhat.com
• Red Hat Insights Plugin replaced through new integration within Satellite
• Ability to visually represent systems registered and in sync with Insights
• Ability to verify if required packages are installed as part of pre-upgrade check
• Ability to unset environment variables when installer is running
• Ability to turn backups on and off when cleaning up tasks from database

The items above are not a complete list of changes. This update also fixes
several bugs and adds various enhancements. Documentation for these changes
is available from the Release Notes document linked to in the References
section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Satellite 6.10 x86_64
• Red Hat Satellite Capsule 6.10 x86_64

Fixes

• BZ - 1299602 - [RFE] Add email notification preferences for user for hammer command in satellite 6
• BZ - 1334989 - [RFE] Pulp download timeouts should be configurable
• BZ - 1392063 - Hammer --resolve-dependencies flag not working
• BZ - 1417752 - Satellite Capsule syncs error out when there are more than a certain amount of characters in the content view name
• BZ - 1437586 - Activation Key / Content View information always asking for content view
• BZ - 1548966 - [RFE] provide means to force recheck/redownload of pulp docker repos
• BZ - 1566630 - API in satellite 6.3 to view location parameter does not resolve the location name with location ID as it used to in satellite 6.2
• BZ - 1573241 - Repository selection not working on Activation Key's 'Repository Sets' tab
• BZ - 1583209 - [RFE] [Sat6] Text-Only errata are not included in hammer export causing errata count mismatch between connected and disconnected Satellite
• BZ - 1605147 - [RFE] Add SSH key passphrase support to ansible feature
• BZ - 1611621 - [RFE] Update Insights Plugin to use the new 'disconnected' option in Satellite 6.4
• BZ - 1615015 - [RFE] Do not backup tasks by default when cleaning up tasks from the database
• BZ - 1632961 - Creating an incremental export using hammer export --since command creating an full export.
• BZ - 1636403 - user with view_ansible_roles, import_ansible_roles foles can not import roles: AnsibleRole not found Please try to update your request
• BZ - 1636426 - with "Ansible Roles Manager" and "View hosts" roles, user still needs "Remote Excution User" to run roles on host
• BZ - 1649011 - hammer os list fails with default organization set
• BZ - 1654801 - Syncing down "Red Hat Enterprise Linux 6 Server RPMs x86_64 6.9" fails: Checksum type \"sha1\" is not available for all units in the repository
• BZ - 1655245 - Locks for tasks are created after planning phase, allowing 2 concurrent tasks on a "locked" object
• BZ - 1656127 - Unable to set HostGroup content source to capsule that isn't synced
• BZ - 1663340 - [RFE] allow recreation of content views when importing
• BZ - 1664120 - capsule will pause for 60 seconds if connection to sat is servered, causing 502s
• BZ - 1668374 - [RFE] - Recover space of old container image versions
• BZ - 1685738 - Provide a template for handling yum check-update always exiting with code 100, making the jobs appear as 'failed'
• BZ - 1691490 - [RFE] hammer recurring-logic info lacks info
• BZ - 1701541 - Registration fails when duplicate activation key names given to --activationkey option
• BZ - 1703951 - foreman_scap_client command fails with execution expired (Timeout::Error)
• BZ - 1716314 - foreman cron.log should contain timestamp
• BZ - 1719661 - Remove XenServer (xen) from virt-who config plugin on Satellite Web UI
• BZ - 1720664 - Unable to change NIC configuration - update the host update API documentation
• BZ - 1721320 - [RFE] Improve Tasks - Pulp Task Clean-up - Part 2
• BZ - 1729029 - [RFE] Ability to choose the launch order for Ansible roles
• BZ - 1729843 - Insights Remediation playbook fails with error "Failed to create job. Ensure your systems are registered in Foreman" when system hostname has uppercase characters
• BZ - 1731987 - Make New compliance policy page consistent with rest of satellite UI.
• BZ - 1732038 - Foreman-maintain creates a new set of world-writable files in /tmp each time it restarts services
• BZ - 1732505 - Unable to add compute resource if configured network is without bridge parameter
• BZ - 1732522 - [RFE] Support for correlation id and syslog in pulp 3
• BZ - 1737536 - [RFE] Add host filter to the applied errata report
• BZ - 1744931 - [RFE] Import Ansible variables automatically while importing the Ansible Roles
• BZ - 1747748 - Remote execution job hangs indefinitely when using unsupported ssh key algorithm
• BZ - 1747751 - [RFE] Ruby net-ssh doesn't support 'ed25519' ssh key type.
• BZ - 1758704 - CVE-2019-14853 python-ecdsa: Unexpected and undocumented exceptions during signature decoding
• BZ - 1759111 - Puppet facts exclude filter star wildcard not working as expected
• BZ - 1760843 - CVE-2019-14859 python-ecdsa: DER encoding is not being verified in signatures
• BZ - 1767455 - Satellite defaults for "Ignore interfaces with matching identifier" and "Exclude pattern for facts stored in satellite" wrong
• BZ - 1771231 - [RFE] Add support for vNIC profiles in RHV compute resource
• BZ - 1775784 - new interface (in edit host menu) is confirmed with enter, but enter confirms host update instead of new interface, this action cause another misbehavior
• BZ - 1777420 - HTTP 500 error while quering /api/compute_resources API
• BZ - 1784552 - [RFE] Disable Users in Satellite
• BZ - 1794753 - ejecting the install media does not work
• BZ - 1796770 - Attach/Remove subscriptions task failed when a "after_commit" foreman hook is triggered.
• BZ - 1798686 - [RFE] As a user, "Limit Sync Tags" supports wildcard characters.
• BZ - 1804161 - [RFE] 'Disabling rule results for individual hosts' feature not available on Red Hat Satellite 6.
• BZ - 1804620 - [RFE] Opening Dynflow console in a new window
• BZ - 1805654 - Ansible Inventory reports, print multiple blank line in the output
• BZ - 1806459 - Incorrect search query is formed while selecting location/organization of the host
• BZ - 1806461 - Documentation link open in the same tab
• BZ - 1806462 - In Audit logs, Filter type = puppetclass do not list any result
• BZ - 1807677 - Ansible facts disappear immediately after role is run
• BZ - 1808368 - Sync task should immediately fail - current behavior seems to be a timeout.
• BZ - 1810600 - [RFE] Ansible Role execution reports are not exactly human readable
• BZ - 1814226 - [Kubevirt-Foreman] Validation of Storage size behaves differently when 'G' unit is provided
• BZ - 1816270 - CVE-2020-8130 rake: OS Command Injection via egrep in Rake::FileList
• BZ - 1817176 - satellite-installer command is not managing the postgresql.conf permissions.
• BZ - 1829107 - Azure Gov Cloud Regions missing from Azure compute resource
• BZ - 1829115 - satellite-change-hostname fails to rename Red Hat Satellite Capsule server 6.7
• BZ - 1829239 - Creating invalid image within compute resource is possible
• BZ - 1830026 - Satellite inventory upload plugin ignores HTTP 500 errors from ingress service
• BZ - 1830247 - Ansible variables not visible to user role containing the filter view_ansible_variables
• BZ - 1836868 - Change of 'auto-attach' preference via subscription-manager doesn't get reflected in Satellite WebUI
• BZ - 1837556 - Unable to set ping_free_ip false settings on Satellite server.
• BZ - 1838800 - Manage Errata from Content Host Page does not provide link to view list of content hosts affected by an Errata.
• BZ - 1844972 - Audit page render very slow when organization is set
• BZ - 1845498 - 50/50 chance to create role filter with non-admin user and enough permissions
• BZ - 1845657 - Openstack Compute Resource openstack_endpoint_type
• BZ - 1848111 - systemctl status -l pulp_workers return "Active: active (exited)"
• BZ - 1848981 - changing "admin" parameter of user-group with non-admin user is accepted but nothing changed
• BZ - 1851415 - hammer hostgroup update does not respect ansible-roles argument
• BZ - 1853710 - Badly aligned arrows of disk size numeric input
• BZ - 1856730 - [RFE] Foreman webhooks integration story
• BZ - 1860466 - CVE-2020-14343 PyYAML: incomplete fix for CVE-2020-1747
• BZ - 1861493 - [RFE] Enabling by default the latest TLS cert version on Satellite Server
• BZ - 1862372 - Some of the warning messages observed on Capsule 'logs' tab
• BZ - 1863597 - Inventory plug-in configuration(--enable-foreman-plugin-inventory-upload) makes DB inconsistent.
• BZ - 1868310 - hammer template update has a option --organization-id that does not update anything.
• BZ - 1868357 - User with "viewer" role cannot see rpm names in 'Include RPM' content view filters
• BZ - 1872534 - Syspurpose role is showing empty in the subscription page and rest api even it has a role
• BZ - 1874587 - Tags values in report are not escaped - can potentially cause JSON to be invalid
• BZ - 1879020 - HTTP 500 returned if trying to download a subnet bootdisk for non-existent subnet id
• BZ - 1882123 - Install Roles from Galaxy' does not honor the location input
• BZ - 1883503 - Unable to set "override-value-order" for ansible variable via hammer CLI in Red Hat Satellite 6
• BZ - 1884212 - Failed to import content view with more than 20 repositories enabled
• BZ - 1885240 - [RFE] Provisioning with interfaces on VMware requires portgroup
• BZ - 1888332 - [RFE] Provide web interface for managing User's Personal Access Tokens
• BZ - 1893617 - Failed to discover docker repositories because 'Content Default HTTP Proxy' is not used to connect to the registry.
• BZ - 1899873 - [BUG] dependency conflict between satellite 6.8 and cockpit remote execution plugin
• BZ - 1900664 - [RFE] An ability to re-register a host within global registration
• BZ - 1901504 - [RFE] Add 'snippet_if_exists' to default kickstart template
• BZ - 1904369 - Package dependency is wrong on Satellite UI
• BZ - 1905560 - Security ERRATA installation via Host Collection will always ends up in applying 20 ERRATA's from the list in Satellite 6
• BZ - 1905561 - Satellite Blog link in the About page redirects to the old blog link
• BZ - 1905814 - [RFE] Ability to clone a discovery rule from webui
• BZ - 1906919 - CVE-2020-8908 guava: local information disclosure via temporary directory created with unsafe permissions
• BZ - 1908101 - foreman-rake katello:correct_repositories is failing to create the repositories.
• BZ - 1910314 - "hammer host update --id <id> --owner-id <id>" does not set new owner
• BZ - 1910412 - [RFE] Extend the ssh_args inside /etc/foreman-proxy/ansible.cfg file to have ansible required default values in Satellite 6
• BZ - 1911338 - The "hammer auth-source ldap update" command's "--host" argument does not have an appropriate explanation for it
• BZ - 1911670 - redhat.satellite.host fails to deploy a new VM if image_id is not passed in compute attributes
• BZ - 1912451 - [UI] - UI issue for Documentation Button on the Error Page , need correct alignment
• BZ - 1912487 - CVE-2020-26247 rubygem-nokogiri: XML external entity injection via Nokogiri::XML::Schema
• BZ - 1912589 - python3-pyyaml pulpcore build does not match RHEL provides
• BZ - 1913311 - hammer host list --help shows unusable name for IP field
• BZ - 1914200 - [RFE] support for running foreman_scap_client without Satellite server.
• BZ - 1914902 - hammer cli --start-at not honoring iso8601 timezone
• BZ - 1915705 - katello_events and candlepin_events intermittently showing as not started
• BZ - 1915748 - [RFE] - request for IDs in system purpose bulk action dialog
• BZ - 1917509 - RFE: more granular support for RedHat Enterprise Linux
• BZ - 1918353 - Cloud connector installer playbook relies on jmespath
• BZ - 1919922 - [RFE] Global Registration: Need hammer module to generate commands
• BZ - 1919976 - [RFE] Global Registration does not populate the fields from hostgroup
• BZ - 1920005 - [RFE] Global Registration: wizard should allow to set a organization/location
• BZ - 1920036 - satellite-installer proposes --verbose-log-level but doesn't mention level
• BZ - 1920072 - Puppetserver is overloaded after upgrade from Satellite 6.7 to Satellite 6.8
• BZ - 1920405 - Global Registration: Registration tab has curl with bearer token
• BZ - 1920443 - Global Registration: Registration tab has black background
• BZ - 1921055 - [RFE] Global Registration: Registration should remove older katello-ca-consumer if present
• BZ - 1921095 - Global Registration: Build status gets set to Pending installation when running script from Registration Tab
• BZ - 1921453 - Global Registration: page generate command without Satellite or capsule hostname
• BZ - 1921461 - [RFE] Global Registration: add "Register Host" button under Hosts menu
• BZ - 1921522 - Global Registration: Registration fails when Remote execution interface specified for non-rhel system
• BZ - 1923030 - Drop the puppetrun hammer command
• BZ - 1923320 - Global Registration: of FIPS RHEL8 host fails with Transaction error: no digest
• BZ - 1924255 - [RFE] Global Registration: Add character limit to the Token lifetime (hours) field
• BZ - 1924599 - Synchronizing a repository on demand that was synced recently takes too long
• BZ - 1924821 - Cannot to see All statuses on same Applied Errata Report
• BZ - 1924844 - When simple content access is enabled, entitlement cert might not regenerate correctly after adding and removing repos from a content view due to race conditions
• BZ - 1924867 - [RFE] Global Registration: Add dropdown option to add activation-keys
• BZ - 1925172 - Non admin user with viewer role can perform action on the task
• BZ - 1925429 - Add documentation button for Azure
• BZ - 1926840 - [RFE] Visualize modified field for Ansible Variables & Puppet Smart parameters
• BZ - 1927272 - Remove API v3 from fog-ovirt
• BZ - 1927679 - tuning runs without valid tuning level
• BZ - 1927771 - Remove "" values from nic name field
• BZ - 1927775 - Malformed system fact for ipv6 breaks the system page on HBI
• BZ - 1928479 - Change the display message while re-importing the roles in Satellite, after doing some modification in roles.
• BZ - 1929217 - HTTP proxy has confusing popup note
• BZ - 1929361 - The --verbose-log-level option introduced in Sat6.9 with satellite-installer has "notice" as default log level, also man page does not list all available log levels.
• BZ - 1929694 - [RFE] The Configure section for new satellite-installer output should show progress bar or single line update about completed vs total tasks
• BZ - 1929818 - pulp3: Patch Satellite to continue supporting md5 content in FIPS mode
• BZ - 1930352 - CVE-2021-3413 Satellite: Azure compute resource secret_key leak to authenticated users
• BZ - 1930740 - Remove rhevm provider in virt-who configure plugin
• BZ - 1930926 - CVE-2021-20256 Satellite: BMC controller credential leak via API
• BZ - 1931316 - @grub_pass seems deprecated in the default kickstart template
• BZ - 1931392 - [RFE] Drop old insights plugin
• BZ - 1931996 - pulp3: Attempting to clone a repo with no metadata gives misleading error message
• BZ - 1932369 - Use-ntp parameter does not work when provisioning RHEL 7 or CentOS 7
• BZ - 1932486 - Unable to delete Red Hat repository not in manifest from Satellite
• BZ - 1932700 - REX or Ansible jobs are not getting processed while syncing the Capsule.
• BZ - 1933364 - CVE-2021-21330 python-aiohttp: Open redirect in aiohttp.web_middlewares.normalize_path_middleware
• BZ - 1934086 - pulp3: Redefine dynflow step statuses "waiting for Pulp to .."
• BZ - 1934110 - Foreman callback is always used
• BZ - 1934115 - Foreman facts callback does not work well when more facts are added from roles
• BZ - 1934427 - cloning a role without supplying name leads to undefined method `id' for nil:NilClass
• BZ - 1934795 - Unsetting repository architecture restriction doesn't reach clients
• BZ - 1935724 - CVE-2019-25025 rubygem-activerecord-session_store: hijack sessions by using timing attacks targeting the session id
• BZ - 1936462 - 'Applied Errata' report fails with error 'no implicit conversion of nil into Array'
• BZ - 1936946 - bootdisks are left in privatetmp of httpd
• BZ - 1937824 - memory leak in goferd / qpid proton 0.33 when dropping outgoing packets
• BZ - 1939450 - ERROR -- /parallel-executor-core: no manager for Dynflow::Director::Event
• BZ - 1940084 - parallel-executor-core: cannot accept event: Dynflow::Director::Event error appears in the satellite-restore for the specific customer database
• BZ - 1940562 - podman search returns 'archived/versioned' repos, but ISE is returned when pulling them
• BZ - 1940798 - Tasks count displayed incorrectly after filter application
• BZ - 1940832 - [RFE] disable all but subnet and full-host bootdisks
• BZ - 1940857 - FDI facter 4.x does not report uninitialized interfaces
• BZ - 1941096 - Report Templates Host - Applied Errata report is empty.
• BZ - 1941443 - Hypervisor task failed with NoMethodError: undefined method `split' for nil:NilClass
• BZ - 1941640 - Extra click should not be needed to see template sync result
• BZ - 1941997 - [External Authentication] External auth login using Kerberos SSO is failing for AD on Satellite 6.9
• BZ - 1944322 - Job rerun using hammer fails when operating system properties are not consistent. Works fine on webUI
• BZ - 1944708 - Hammer host create fails with Error: usergroup not found
• BZ - 1944733 - [RFE] There is no option to do an incremental content view export using 'hammer content-view version export'
• BZ - 1944801 - CVE-2021-28658 django: potential directory-traversal via uploaded files
• BZ - 1945534 - Pulp resource manager stops assigning tasks to the workers
• BZ - 1945601 - attempting to delete a user name and password for "Upstream Authorization" fails
• BZ - 1945661 - Make slice size configurable
• BZ - 1947628 - [BUG] The --docker-tags-whitelist option is not allowing the syncing of whitelisted tags for a docker type repo in Satellite 6
• BZ - 1947867 - Disconnected satellite's subscription page missing the checkbox/select column
• BZ - 1948005 - CVE-2021-3494 foreman: possible man-in-the-middle in smart_proxy realm_freeipa
• BZ - 1948258 - pulp3: RQ invokes OOM while syncing rhel-7-server-rpms causing the sync task to fail with "Katello::Errors::Pulp3Error : None" error every time
• BZ - 1950722 - [RFE] Add remediation ability to rh_cloud plugin
• BZ - 1951102 - Manifest deletion indexes subscriptions for all organizations
• BZ - 1951878 - Introduce a valid solution to fix the error "Katello::Errors::CandlepinError: Environment with id XXXX could not be found" in Satellite 6
• BZ - 1952346 - [BUG] Non-Admin users cannot generate the command for registration while having "Register hosts" role associated in Satellite 6.9
• BZ - 1952962 - Canceling a job for a content host redirects to a new page with "{"statusText":"OK"}"
• BZ - 1953279 - Passenger tuning should be removed from tuning options
• BZ - 1953845 - Adding a hostgroup based search filter for "view_hosts" permission inside a custom role, breaks the Subnets and Domains page of Satellite 6 UI
• BZ - 1954021 - Red Hat Satellite 6.8 minor upgrade fails with error Validation failed: Name has already been taken at db:seed stage
• BZ - 1954043 - Subscriptions and Pools can be associated across organizations
• BZ - 1954294 - CVE-2021-31542 django: Potential directory-traversal via uploaded files
• BZ - 1954996 - [RFE] Satellite Convert2RHEL support
• BZ - 1955861 - Build status is still being posted inside '/mnt/sysimage/root/install.post.log' instead of 'root/install.post.log' for Satellite 6.8 and above
• BZ - 1956124 - Ansible callback doesn't run because the file is not executable
• BZ - 1956158 - Attempt to restart a client using remote execution results in error shutdown: command not found
• BZ - 1956190 - Invalid json created and reported to cloud
• BZ - 1956461 - pulp3: During pull operations Registry handler loses database connection
• BZ - 1956494 - kickstart_kernel_options doesn't handle properly tagged vlan over bond device
• BZ - 1956774 - private_ip expected as String, not Boolean when creating a host via the API
• BZ - 1956951 - user mode templates use root_pass.empty? which doesn't work on NilClass
• BZ - 1957035 - Promotion content view failed with NoMethodError: undefined method `get_status' for nil:NilClass
• BZ - 1957186 - foreman-rake rh_cloud_inventory:sync fails with traceback "The Dynflow world was not initialized yet.".
• BZ - 1957441 - CVE-2021-22885 rubygem-actionpack: Possible Information Disclosure / Unintended Method Execution in Action Pack
• BZ - 1957588 - Duplicate YumMetadata index entries in content view repositories causing unneeded capsule sync
• BZ - 1958415 - On_demand capsule sync (pulp3 to pulp2) for non-sha256 repos fails with a checksum type issue
• BZ - 1959393 - pulp3: On_demand capsule sync (pulp3 to pulp2) for repos with empty groups fails
• BZ - 1959555 - pulp3: RPM include filter includes extra RPMs in the content view version
• BZ - 1961379 - CVE-2021-22904 rails: Possible DoS Vulnerability in Action Controller Token Authentication
• BZ - 1961382 - CVE-2021-22902 rails: Possible Denial of Service vulnerability in Action Dispatch
• BZ - 1961885 - pulp3: RHEL content on a content proxy returns a 403 to clients
• BZ - 1961886 - pulp3: Client receives 403 forbidden when fetching RHEL content when using custom certificates
• BZ - 1962048 - Insights page needs to be refreshed manually after recommendations sync.
• BZ - 1962119 - Satellite 6.9 changed the way RH operating systems are named after sync
• BZ - 1962132 - Creating ansible collection repo fails with: "Invalid URL Ensure the URL ends '/'" but repo gets created
• BZ - 1962140 - Ansible collection repo fails to sync with Could not find 'available_versions'
• BZ - 1962189 - several issues with ansible collections Requirements.yml
• BZ - 1962624 - [RFE] OVAL / CVE Reporting Support - Tech Preview MVP
• BZ - 1962694 - Stop auto uploads if the total amount of hosts passes 150k
• BZ - 1962695 - Enable automatic status syncs
• BZ - 1962757 - /usr/share/foreman is not writable for satellite-installer
• BZ - 1962820 - puppet 6.14 introduced a regression for puppet apply application from recursively copying a directory from a module using a puppet:// URL.
• BZ - 1962834 - [RFE] Entitlements report should list number of subscriptions consumed by each host
• BZ - 1962835 - Cannot create "HTTP Proxies" in GUI if password includes special component in Satellite 6.7
• BZ - 1962840 - dynflow_executor.output grows extremely large in short period of time.
• BZ - 1962863 - satellite installer does not generate the katello-ca-consumer rpm for version > 1.0-9
• BZ - 1962867 - rhcloud inventory upload is recognizing proxy port 80 to 1080
• BZ - 1962870 - Inherited hostgroup values are not set when creating host
• BZ - 1962873 - Cannot filter hosts by plan_id: 'search_by_plan_id' failed with error: 404 Not Found (ScopedSearch::QueryNotSupported)
• BZ - 1962875 - Content Host Registration page showing version 6.8 for repos instead 6.9
• BZ - 1962925 - [RFE] Satellite Convert2RHEL support
• BZ - 1962928 - [RFE] Host Registration Page UX Improvements
• BZ - 1962930 - [RFE] Insights - Visual representation of systems registerd / in sync with Insights
• BZ - 1962931 - [RFE] default global registration
• BZ - 1962932 - [RFE] Improve Ansible integration to ease a Puppet replacement
• BZ - 1962933 - [RFE] Introduce foreman_webhooks as replacement for foreman_hooks
• BZ - 1962947 - Uploading manifest does not display table of available subscriptions
• BZ - 1962961 - Upgrading satellite from 6.8 to 6.9 failed, as the installer check/query the rpm packages which present in /var/www/html/pub/
• BZ - 1964041 - Traceback "`/usr/share/foreman` is not writable." in terminal window of Red Hat Inventory page.
• BZ - 1964103 - certificate verify failed error comes in in satellite-installer (katello:clean_backend_objects' error (RestClient::SSLCertificateNotVerified))
• BZ - 1964234 - Update foreman_templates for 6.10
• BZ - 1964874 - CVE-2021-29509 rubygem-puma: incomplete fix for CVE-2019-16770 allows Denial of Service (DoS)
• BZ - 1964920 - Add support for satellite 6.9 clone
• BZ - 1965239 - Stop scheduled inventory status updates if auto upload is not configured
• BZ - 1965570 - In satellite upgrade, Package update failed to resolve the dependencies.
• BZ - 1965901 - Unable to sync insights recommendations, task fails with "Unable to authenticate using rh_cloud_token setting".
• BZ - 1965942 - pulp3: invalid depsolving warnings when publishing a CV with filters
• BZ - 1966251 - CVE-2021-33203 django: Potential directory traversal via ``admindocs``
• BZ - 1966253 - CVE-2021-33571 django: Possible indeterminate SSRF, RFI, and LFI attacks since validators accepted leading zeros in IPv4 addresses
• BZ - 1966435 - Unable to configure cloud connector plugin because of package dependency issue.
• BZ - 1966527 - Entering a value in disk size field inserts GB with every keyboard input
• BZ - 1966554 - after upgrade from 6.9.2 to 6.10 (sat and capsule) some ruby 2.5 packages still on the system
• BZ - 1966626 - Cannot build a RHEL 8.3 system via Satellite Discovery kexec
• BZ - 1966868 - Unable to update the repository list ([RestClient::InternalServerError]: 500 Internal Server Error)
• BZ - 1966897 - Cockpit connection fails with error "Inappropriate ioctl for device" when ssh key with passphrase is used
• BZ - 1966942 - After creating new host group or Http proxy, page doesn't redirect to main landing page.
• BZ - 1967066 - [global registration] - default packages are overridden by host package even if not specified registration form
• BZ - 1967138 - Remediation popup window is not visible properly in reduced browser window.
• BZ - 1967593 - RH Cloud Plugins are using upstream version identifiers when connecting to the cloud.
• BZ - 1967604 - Sync of a container image from an authenticated registry fails
• BZ - 1967649 - The redhat.satellite.external_usergroup module will always use the name of satellite usergroup in the backend api call instead of id.
• BZ - 1967856 - Katello ping controller calls /usr/bin/systemctl which cannot be allowed by SELinux
• BZ - 1967904 - Updating a hostgroup using redhat.satellite.hostgroup collection removing the existing parameters and activation key details.
• BZ - 1967939 - [pulp3] kickstarts against on_demand kickstart repos fail with 'Error populating transaction'
• BZ - 1967974 - satellite-change-hostname should handle --no-enable-puppet properly
• BZ - 1968074 - CVE-2021-33503 python-urllib3: ReDoS in the parsing of authority part of URL
• BZ - 1968117 - Pulp3 disk space notification fails "undefined local variable or method `percentage'"
• BZ - 1968344 - Test request: Bootdisk regression testing against Pulp 3
• BZ - 1968608 - katello-change-hostname assumes answers file location
• BZ - 1969263 - Host api request fails when thin=true and per_page=all
• BZ - 1969592 - Find By Product and RPM dropdown options are not working on the Red Hat Repositories page.
• BZ - 1969905 - Host provisioning fails with puppet.conf error "undefined method '#present?'"
• BZ - 1970074 - Remote execution fails enabling a module stream
• BZ - 1970095 - Syncing a large repo from CDN with Download Policy set to "Immediate" fails
• BZ - 1970391 - GET katello/api/v2/subscriptions always fails with error: Organization Information not provided
• BZ - 1970547 - [global registration] - Documentation link is navigating to Foreman Doc
• BZ - 1970963 - Deleting Ansible Collection repository shows success toast notification but repositories remain on the page
• BZ - 1970964 - Unable to access Configure > Insights page
• BZ - 1970965 - Notification of "Sync Inventory status" is not showing correct synced/disconnected host count.
• BZ - 1971015 - In upgrade, satellite-installer failed with "Failed to call refresh: 'pulpcore-manager migrate --noinput'"
• BZ - 1971072 - Find feature for provisioning template editing missing in Red Hat Satellite 6.7+
• BZ - 1971076 - Changing "Sync Connection Timeout" in settings does not immediate take effect
• BZ - 1971395 - even though a successfully playbook run, the job result is still marked as failed
• BZ - 1972066 - Syncing repo with ignorable content gives "Error: popitem() takes no keyword arguments"
• BZ - 1972319 - [RFE] include the insights-id of each content host as part of the information to be send to c.rh.c
• BZ - 1972360 - incorrect pulp version number after upgrade to pulp 3
• BZ - 1972381 - Repos are published at localhost not FQDN
• BZ - 1972447 - [Regression] foreman-installer has puppet-candlepin-11.0.0, should be 11.1.0
• BZ - 1972596 - filter out bios_uuid field if the value is not in a UUID form
• BZ - 1972760 - Hosts with host_registration_insights parameter are not uploaded to inventory
• BZ - 1972770 - Insights not working after upgrade to satellite 6.9 (HTTP Status Code: 500)
• BZ - 1972771 - foreman-rake rh_cloud_inventory:report:generate fails with Permission denied
• BZ - 1972773 - The full screen option for the terminal on the inventory upload page is not showing up properly.
• BZ - 1972995 - In satellite upgrade, yum update failed to resolve dependencies
• BZ - 1973285 - insights-client --test-connection fails when using general "HTTP(S) proxy" setting of satellite.
• BZ - 1973342 - Remove "Must specify either portal_user or organization_id" message from rh_cloud_inventory:report:generate rake command.
• BZ - 1973365 - Can not delete a host when the capsule it's registered to is down
• BZ - 1973546 - Insights recommendations are not listed for old hosts after upgrading satellite to 6.9.3 snap 3.
• BZ - 1974314 - content view auto cleanup doesn't clean the unused content view version if we keep the unused cv count 0
• BZ - 1974410 - Repos with missing upstream URL
• BZ - 1974685 - Non-admin user can not revoke user access token, attempt ends with 404
• BZ - 1974687 - Wrong link for documentation in discovered hosts
• BZ - 1974733 - The webhooks module is missing in hammer
• BZ - 1975095 - [global registration] - RHEL8 re-registration error shows the information about foreman rather satellite
• BZ - 1975105 - [global registration] - Global Registration is not working w.r.t. Life Cycle Environment
• BZ - 1975276 - Enabling a RH repo is not reflected in the list of enabled repos
• BZ - 1975501 - Importing 20 repos with intersecting content caused deadlock error
• BZ - 1975801 - pulp3 remote smart proxies do not show download policy
• BZ - 1975933 - smart_proxy_dynflow_core throws message 'paranoid is deprecated' in /var/log/messages
• BZ - 1976047 - Failed to sync custom repository on Satellite6.10
• BZ - 1976051 - potential memory leak in puma
• BZ - 1976116 - In satellite upgrade, yum update failed to resolve the "tfm-rubygem-passenger" package dependencies.
• BZ - 1976226 - Add "to remediations" button on host details page
• BZ - 1976227 - Add link about security concerns to cloud connector setup button
• BZ - 1976231 - Add API support for inventory controller
• BZ - 1976754 - "ERROR: Could not download dynamic configuration" while trying to register satellite host with insights.
• BZ - 1976783 - AVC denials on new instance of 6.10 snap 6
• BZ - 1976853 - Unregistering satellite host from insights doesn't change insights status for that host to "Not reporting" on Satellite UI.
• BZ - 1976872 - Remove Red Hat cloud remediation feature from experimental feature list.
• BZ - 1976930 - [RFE] Request to add a button to perform network connectivity check for new Insights Plugin
• BZ - 1977282 - Page breaks with "No template mapped to feature Run Puppet Once" error while trying to run puppet on host from Satellite.
• BZ - 1977693 - It is not easy to increase the log level of the Pulp 3 backend
• BZ - 1977745 - Unable to sync repository with global default http proxy set.
• BZ - 1977788 - Changes to Ansible role order on host groups do not persist in the webUI
• BZ - 1977840 - Error while displaying a webhook template preview
• BZ - 1978023 - Move to Ruby 2.7
• BZ - 1978026 - [RFE] Provide an operations focused Ansible Collection for Satellite in Automation Hub and as an RPM
• BZ - 1978182 - Satellite host hits are not synchronized
• BZ - 1978265 - Enabling Satellite 6.9 tools repository rhel-7-server-eus-satellite-tools-6.9-rpms for RHEL 7.7 EUS fails with error 'does not seem to be a valid repository’
• BZ - 1978380 - FDI 3.7.7-1 iso fails to boot - kernel_require.rb - cannot load such file - discovery/menu (LoadError)
• BZ - 1978457 - Error when trying to restart Traces: TypeError in Katello::RemoteExecutionController#create no implicit conversion of nil into String
• BZ - 1978571 - Capsule sync failed after upgrade with missing repository type error.
• BZ - 1978697 - [global registration] [hammer] - hammer --setup-insights false | no|0 is not working
• BZ - 1978709 - Content host registration using command generated from global registration form fails if activation key name contains ' (single quote) in it.
• BZ - 1978789 - Repo metadata not generated during incremental update with Pulp 3
• BZ - 1979210 - hammer host package upgrade-all doesn't update all packages
• BZ - 1979215 - After upgrade, katello-agent is disabled by default for flag --foreman-proxy-content-enable-katello-agent
• BZ - 1979239 - Warnings should be improved for hammer host errata apply, when not passing errata_ids
• BZ - 1979292 - Do not attempt to authenticate using rh_cloud_token when token is not set
• BZ - 1979314 - via Katello-agent option is not clickable on content host errata page
• BZ - 1979319 - No option via Katello-agent in errata installation of host-collections in UI only
• BZ - 1979681 - hammer repository --help still shows export subcommand
• BZ - 1979702 - CVE-2021-32740 rubygem-addressable: ReDoS in templates
• BZ - 1979810 - All Hosts page fails to show with error "comparison of NilClass with String failed"
• BZ - 1979929 - Multiple warnings added on the Parameters page while creating a new HostGroup on Satellite 6.10
• BZ - 1980274 - content_view_version_cleanup deletes wrong CV versions
• BZ - 1980418 - Incorrect applicablity in katello 4
• BZ - 1980509 - Upgrade Pulpcore version to 3.14 in katello
• BZ - 1980709 - Oval report report generation fails with 'OVAL content is missing and download failed with error: 403 "Forbidden"' error.
• BZ - 1980754 - '"\"\\x98\" from ASCII-8BIT to UTF-8"' error while trying to delete oval content.
• BZ - 1980791 - Can"t import "paid" content in disconnected mode
• BZ - 1980798 - In satellite upgrade, yum update failed to resolve pulp-server dependency
• BZ - 1981225 - Unable to sync docker images
• BZ - 1981248 - Slow loading of host list in job invocation page when login as non-admin user
• BZ - 1981401 - [pulp3] CV with filter by id with empty rules fails with undefined method `start_date' for nil:NilClass
• BZ - 1981434 - After upgrade puppet content repository count still visible in products details page.
• BZ - 1981517 - [pulp3] When refreshing the Satellite Features via WebUI apache logs show an error dua to 'No such file or directory'.
• BZ - 1981619 - Backporting of module changes into ansiblerole-foreman_scap_client bundled for Satellite 6.x
• BZ - 1981869 - Invalid inventory report is created if "Include parameters in insights-client reports" setting is enabled.
• BZ - 1982343 - Katello 4.1 journal: warning: URI.escape is obsolete
• BZ - 1982344 - Capsule syncing is not triggered by CV promotion
• BZ - 1982695 - md5 missing in ALLOWED_CONTENT_CHECKSUMS
• BZ - 1982753 - Ansible variables are not imported from roles provided by a collection that is installed to /usr/share/ansible/collections
• BZ - 1982759 - Navigating to Admin, Organization, and selecting an organization gives 404
• BZ - 1983043 - undefined method `prune_known_hosts!` when executing a remote job
• BZ - 1983143 - Katello saves publication as a repo's version_href at sync time if Pulp auto-creates publications
• BZ - 1983195 - Roles imported from a collection installed to /etc/ansible/collections are not found when run on hosts
• BZ - 1983575 - Insights recommendations sync task fails for first time on fresh satellite installation with "RestClient::BadRequest: 400 Bad Request".
• BZ - 1983760 - Hammer ansible command gives "Error: undefined method"
• BZ - 1983768 - Unable to view content on Satellite under http://satellite.com/pulp/content/
• BZ - 1984025 - Bring latest job wizard preview for 6.10
• BZ - 1984125 - Newly synced content doesn't have filelists and changelogs which can lead to dependency issues
• BZ - 1984890 - Ansible collection repo validate both auth url and token are supplied
• BZ - 1984896 - Show rhel-6-server-els-rpms under recommended repositories instead of rhel-6-server-rpms
• BZ - 1984899 - Do not display Red Hat Enterprise Linux 5 Server - Extended Life Cycle Support (RPMs) repository under recommended repositories
• BZ - 1984965 - Puppet environment help, shows at the top of the page Lifecycle environments instead of Environments
• BZ - 1985122 - pulp3: sync of a file repo to an external capsule fails
• BZ - 1985286 - unable to set SSL certs when creating Ansible Collection repository
• BZ - 1985287 - insights-client not installed with receptor
• BZ - 1985291 - Playbook signature verification fails: 'Popen' object has no attribute 'comunicate'
• BZ - 1985303 - Not all files are uploaded to a repository, no error is shown
• BZ - 1985344 - Traceback in production.log while registering Satellite content host with insights.
• BZ - 1985893 - Incorrect documentation link for registering hosts
• BZ - 1985910 - Use downstream version in branch_info instead of an upstream one
• BZ - 1985958 - [pulp3] Sync fails for repositories with duplicated content by checksum or by path
• BZ - 1986002 - Unable to interact with appstream actions in content host > host > appstream, leads to an oops
• BZ - 1986292 - Adapt insights page UI to PF4
• BZ - 1986356 - pulp3: independent CV publishes with same source repos content copy not concurrent
• BZ - 1986903 - [RFE] Registration Form - Update packages field
• BZ - 1986948 - hammer `host create --puppet-classes` generates incorrect API query
• BZ - 1986996 - sync of file:// repos tries to move files from /var/lib/pulp/sync_imports/
• BZ - 1987205 - Running ansible jobs does not give live output
• BZ - 1988299 - foreman-maintain failed to cancel or resume the task after the satellite upgrade.
• BZ - 1988460 - When applying an applicable errata on a host that is using a CV it does not generate a incremental CV version with REX turned on
• BZ - 1989078 - ansible collection file upload fails with Error during upload: undefined method `label' for nil:NilClass
• BZ - 1989182 - Capsule sync completes with "duplicate key value violates unique constraint "rpm_variant_variant_id_" error.
• BZ - 1989721 - Puppet ENC deprecation message should be improved
• BZ - 1990004 - Add apidoc for RH Cloud - Inventory APIs.
• BZ - 1990828 - RH Cloud Inventory report doesn't use overridden global parameter value of a host.
• BZ - 1990857 - Insights-client not registered on Satellite after `Configure Cloud Connector`
• BZ - 1990864 - Remediation fails with a syntax error
• BZ - 1990897 - When deploy Satellite6.10, failed by "[ERROR ] [configure] /Stage[main]/Foreman_proxy::Plugin::Ansible::Runner/Package[ansible-runner]/ensure: change from 'purged' to 'present' failed"
• BZ - 1991030 - SELinux alerts
• BZ - 1991347 - remove bootdisk types at help page
• BZ - 1991530 - CV Package count ok, but Errata count (huge) mismatches with pulp2
• BZ - 1991545 - satellite-installer --enable-foreman-proxy-plugin-shellhooks returned 1: Error: Nothing to do
• BZ - 1991992 - Katello with Pulp 3.14 can't sync some repos because of wrong checksum check
• BZ - 1992053 - empty space in header after pf4 header refactor
• BZ - 1992329 - Sync of a kickstart repo to the external capsule fails
• BZ - 1992967 - "NoMethodError: undefined method `id' for nil:NilClass" error while creating a repository.
• BZ - 1993216 - Expose pulpcore WORKER_TTL setting in installer
• BZ - 1993288 - Pulp 3 check fails if only running a single worker
• BZ - 1993679 - Creating a Job via an user with selective permissions will not show "Job template" in the form unless refreshing the result of Search Query
• BZ - 1993773 - Synchronization of "Red Hat Enterprise Linux 7 Server - Extended Update Support RPMs x86_64 7.7" fails with an unhelpful error "Pulp task error"
• BZ - 1993951 - RPM1008: Checksum type "sha256" is not available for all units in the repository
• BZ - 1993982 - Satellite UI shows 0 packages\errata\package_groups after a bad sync followed by a successful sync for the same repo
• BZ - 1994022 - Total steps: 0/0 in sync status
• BZ - 1994036 - Tooltip stays visible after click
• BZ - 1994215 - Multiple errors are seen in message log while syncing repos on satellite 6.10 Beta
• BZ - 1994256 - Publishing CV with depsolving enabled on RHEL8 BaseOS repo and including all except new errata fails on package dependencies
• BZ - 1994275 - The vmlinuz and initrd are always 0 size
• BZ - 1994490 - Not possible to enable remote_isc dhcp
• BZ - 1994669 - Replace "Foreman server" statement with "Satellite server" in the error message printed by satellite-installer on capsule 6.10
• BZ - 1994674 - The "Documentation" button on "Report Templates" page is pointing to "Administering Red Hat Satellite" doc for satellite 6.10
• BZ - 1994896 - Default Organization View showing status as {{ historyText(version) }} when you check through Infrastructure -->capsule --> capsuleServer --> content --> Library --> Default Organization View
• BZ - 1994923 - Internal server error when accessing kickstart repository over http or https (db connection already closed)
• BZ - 1995091 - [Pulp] - Validate Content Sync option still present in Satellite 6.10
• BZ - 1995171 - Bulk generate applicability for hosts task fails with Duplicate Key error
• BZ - 1995175 - repo sync fails with ValueError: _blake2 is not available in FIPS mode
• BZ - 1995228 - Applying errata from an Erratum's Content Host tab fails
• BZ - 1995272 - The "Documentation" button on "Subnets" page is pointing to "Administering Red Hat Satellite" doc for satellite 6.10
• BZ - 1995276 - Artifacts don't get properly linked with Content after a repo is switched from on-demand to immediate
• BZ - 1995279 - The katello-ca-consumer is not being removed when the force option is checked in the 'Advanced' tab under Hosts -> Register Host
• BZ - 1995424 - 'Sync overview' Widget in 'Dashboard' is not showing any data
• BZ - 1995540 - Playbook verification fails on RHEL 7
• BZ - 1995546 - katello:change_download_policy rake still suggest background download_policy as valid option in Satellite 6.10
• BZ - 1995650 - yum update failed to resolve the "rubygem-passenger" package dependencies in satellite upgrade
• BZ - 1995661 - Remote execution status is successful for any ansible based jobs even if the actual job execution has failed on the host in Satellite 6.10
• BZ - 1995729 - Tasks tab in content host profile of a system is always blank
• BZ - 1995827 - [RFE] Enable export and import of file repositories in Satellite
• BZ - 1996048 - Non-admin users can not list their Personal Access Tokens
• BZ - 1996075 - Package python-pulp-manifest missing from Satellite Tool repos
• BZ - 1996077 - Not possible to Nest hostgroup
• BZ - 1996136 - Need to remove "Background" Download policy for Capsule
• BZ - 1996208 - The "Documentation" button on "Hardware Models" page is not pointing to any documentation link for satellite 6.10
• BZ - 1996371 - Bad inheritance of Architecture property is causing Grayed out media selections for child hostgroup in Satellite 6.10
• BZ - 1996490 - Boot disk settings page under Administer -> Settings is blank
• BZ - 1996650 - rh_cloud tasks become paused instead of failed
• BZ - 1996747 - Candlepin.conf refers to incorrect job schedule options
• BZ - 1996952 - The reference of deprecated Background download policy is still present in global settings of Red Hat Satellite 6.10
• BZ - 1997005 - Capsule content page shows content views as empty when they aren't
• BZ - 1997065 - During provisioning anaconda postinstall is running on the background instead of showing logs
• BZ - 1997070 - on satellite with append domain names set to no configure cloud connector fails on 404 not found
• BZ - 1997225 - Noticed "event_queue_error: type=delete_host_agent_queue, object_id=XX" error logging during concurrent host build/rebuild/re-registration/deletion in Satellite 6.10
• BZ - 1997425 - Task Count message is still displayed after deselecting few tasks
• BZ - 1997623 - Capsule sync fails with duplicate key and deadlock
• BZ - 1997724 - Updating a hostgroup with AK via parameters fails if AK alredy exists
• BZ - 1997921 - Old Registration URL doesn't redirect to the new Registration steps in the Satellite GUI
• BZ - 1998167 - create button in puppet environment help page navigates to non-existing path
• BZ - 1998199 - Request to fix CVE-2021-34552 for RHEL 7
• BZ - 1998250 - Remove OSTree filter from Red Hat Repositories drop down list
• BZ - 1998290 - Remove Trends API resources from Satellite API documentation
• BZ - 1998291 - Change Puma defaults to match recommendations from Puma documentation
• BZ - 1998404 - Satellite setting has wrong description for a couple of parameters under Content Tab on the Satellite WebUI
• BZ - 1998409 - Package count is missing from the "Sync Status" page on the Satellite UI for any new repository sync.
• BZ - 1998487 - Remove Statistics API resources from Satellite API documentation
• BZ - 1998566 - Could not update repository with URL (ISE 500 in logs) when url was not previously set
• BZ - 1999116 - Selecting certain products in "Red Hat Repositories" page renders a Blank Page in Satellite 6.10
• BZ - 1999541 - Sync state is blank in product list stdout.
• BZ - 1999679 - Bring latest job wizard preview for 6.10
• BZ - 2000008 - Make the registration form more compact like in 6.9
• BZ - 2000036 - The warning for activation key should be styled according to the PF4 recommendation
• BZ - 2000063 - Some of the filters permission needs to be clean
• BZ - 2000237 - Dependency issues when attempting to install Infoblox DNS and DHCP plugins
• BZ - 2000286 - Need an updated version of libsolv
• BZ - 2000424 - Backport pulp systemd service check in ping
• BZ - 2000534 - Compute Resource cannot list the VMs if any VMs in the datacenter has config.instanceUuid set to '' in Satellite 6.7 and above
• BZ - 2001052 - Selected yum metadata checksum type on is not reflected in repomd.xml on a repo creation
• BZ - 2001088 - Some mirror list syncs fail due to bad url encoding
• BZ - 2001091 - Publication lacks metadata after syncing from certain mirror lists
• BZ - 2001476 - 'str' object has no attribute 'decode' When register RHEL-8.5.0-20210902.5 against Satellite6.8/Satellite6.9/Satellite6.10 by bootstrap.py
• BZ - 2001674 - satellite-installer always redundantly runs "upgrade:run" and "katello:correct_repositories" rake scripts
• BZ - 2002693 - increase pulpcore-api worker count and make it configurable
• BZ - 2003264 - clients connected to on_demand capsules will start getting 404s if the Satellite regenerates repository metadata
• BZ - 2003705 - [RFE] Add task to set host parameters from Puppet data
• BZ - 2003764 - CV-promotion with-filters causes pulp code to do repoclosure once per-rpm-copied, which is Very Nonperformant.
• BZ - 2004397 - Sync of a Kickstart repo to the N-1 capsule fails
• BZ - 2005137 - Update of the Registry Name Pattern fails
• BZ - 2005754 - Issue while registering the RHEL 6 Host using new Satellite Server Token Registration Steps.
• BZ - 2006827 - Run 'subscription-manager clean' when force=true
• BZ - 2006959 - Cannot pull container images from Container Gateway if there are slashes in the repository name
• BZ - 2008015 - RHEL 6 Host always getting registered under default location using new Satellite Server Token Registration Steps.
• BZ - 2009630 - In Satellite upgrade, the package upgrade section failed to resolve the python2-solv package dependency
• BZ - 2010207 - RHEL6.10 kickstart repo sync error "incompatible with 'mirror' sync"
• BZ - 2010230 - In Satellite upgrade, installer failed with exit status 6 in the db:migrate stage.
• BZ - 2010411 - Update recommended repos for Satellite & Tools from 6.9 to 6.10
• BZ - 2010863 - Ansible jobs never start
• BZ - 2011303 - Unable to sync content from CDN when using an HTTP proxy
• BZ - 2011696 - Reduce allocations in FactImporter#update_facts
• BZ - 2012460 - Satellite RPM still has "beta" in the release, making login page brand as "6.10.0 Beta"
• BZ - 2012808 - The link "here" in tabs of a content host (/content_hosts/1/...) is not opening any page
• BZ - 2012826 - repo sync fails with [digital envelope routines: EVP_DigestInit_ex] disabled for fips
• BZ - 2019177 - Fix packaging issues in foreman, python-pycares

CVEs

• CVE-2019-14853
• CVE-2019-14859
• CVE-2019-25025
• CVE-2020-8130
• CVE-2020-8908
• CVE-2020-14343
• CVE-2020-26247
• CVE-2021-3413
• CVE-2021-3494
• CVE-2021-20256
• CVE-2021-21330
• CVE-2021-22885
• CVE-2021-22902
• CVE-2021-22904
• CVE-2021-28658
• CVE-2021-29509
• CVE-2021-31542
• CVE-2021-32740
• CVE-2021-33203
• CVE-2021-33503
• CVE-2021-33571

References

• https://access.redhat.com/security/updates/classification/#moderate