Red Hat Product Errata RHSA-2023:5979 - Security Advisory
Issued:
2023-10-20
Updated:
2023-10-20

RHSA-2023:5979 - Security Advisory

Synopsis

Important: Satellite 6.12.5.2 Async Security Update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated Satellite 6.12 packages that fixes important security bugs and several
regular bugs are now available for Red Hat Satellite.

Description

Red Hat Satellite is a system management solution that allows organizations to
configure and maintain their systems without the necessity to provide public
Internet access to their servers or other client systems. It performs
provisioning and configuration management of predefined standard operating
environments.

Security fix(es):

foreman: Arbitrary code execution through templates

foreman: Satellite/Foreman: Arbitrary code execution through yaml global parameters

foreman: OS command injection via ct_command and fcct_command

puppet-agent for Satellite and Capsule: various flaws

tfm-rubygem-git: ruby-git: code injection vulnerability

rubygem-git: ruby-git: code injection vulnerability

yggdrasil-worker-forwarder: various flaws

This update fixes the following bugs:

2159656 - CVE-2023-0118 foreman: Arbitrary code execution through templates [rhn_satellite_6.12]
2163524 - CVE-2023-0462 foreman: Satellite/Foreman: Arbitrary code execution through yaml global parameters [rhn_satellite_6.12]
2163694 - CVE-2022-3874 foreman: OS command injection via ct_command and fcct_command [rhn_satellite_6.12]
2242354 - CVE-2022-1292 CVE-2022-2068 puppet-agent for Satellite and Capsule: various flaws [rhn_satellite_6.12]
2242359 - CVE-2022-47318 tfm-rubygem-git: ruby-git: code injection vulnerability [rhn_satellite_6.12]
2242362 - CVE-2022-46648 rubygem-git: ruby-git: code injection vulnerability [rhn_satellite_6.12]
2243833 - [Major Incident] CVE-2023-39325 CVE-2023-44487 yggdrasil-worker-forwarder: various flaws [rhn_satellite_6.12]

Users of Red Hat Satellite are advised to upgrade to these updated packages,
which fix these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Satellite 6.12 x86_64
  • Red Hat Satellite Capsule 6.12 x86_64
  • Red Hat Enterprise Linux for x86_64 8 x86_64

Fixes

  • BZ - 2081494 - CVE-2022-1292 openssl: c_rehash script allows command injection
  • BZ - 2097310 - CVE-2022-2068 openssl: the c_rehash script allows command injection
  • BZ - 2140577 - CVE-2022-3874 foreman: OS command injection via ct_command and fcct_command
  • BZ - 2159291 - CVE-2023-0118 Foreman: Arbitrary code execution through templates
  • BZ - 2159672 - CVE-2022-47318 ruby-git: code injection vulnerability
  • BZ - 2162970 - CVE-2023-0462 Satellite/Foreman: Arbitrary code execution through yaml global parameters
  • BZ - 2169385 - CVE-2022-46648 ruby-git: code injection vulnerability
  • BZ - 2242803 - CVE-2023-44487 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)
  • BZ - 2243296 - CVE-2023-39325 golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)

Red Hat Satellite 6.12

SRPM
foreman-3.3.0.23-1.el8sat.src.rpm SHA-256: c5189e7b1c1525faa53ed21eda154bc87f6c6332cce11b48f28861987971e208
puppet-agent-7.26.0-3.el8sat.src.rpm SHA-256: b74e9a66ede61765c6e831331ea39b231079b654c81e6f3bf7516a246cf6fcca
rubygem-git-1.18.0-1.el8sat.src.rpm SHA-256: 819b91cef0d6d90e09bd877fb9ada246e9d81a34c2ee47f7dc2780cf6a94a63f
rubygem-safemode-1.3.8-1.el8sat.src.rpm SHA-256: 8848d88ff12c1122a7a2b63d95048f6252ce686f9431bbe9931a7a8c4771ebf5
satellite-6.12.5.2-1.el8sat.src.rpm SHA-256: 959afa9f26ebedca1005920f63be9d410d2c47ca2434717b89bd3774fffb4aee
yggdrasil-worker-forwarder-0.0.3-1.el8sat.src.rpm SHA-256: 45854be1e160d0056c61e509c3463beaf4aafbdef825ea9d10e6699fab906d6e
x86_64
foreman-3.3.0.23-1.el8sat.noarch.rpm SHA-256: c4524faecc840694c1b78c7b3538082096e2a86d829658899e2e1eb69ff1451c
foreman-cli-3.3.0.23-1.el8sat.noarch.rpm SHA-256: e9ec3c5bc9a5485c0444fc5def4b160974896741a9991ae1d07ca3f2d652f57e
foreman-debug-3.3.0.23-1.el8sat.noarch.rpm SHA-256: e6160b1bcd9e04e7bd26fb8d703df83718053bc5bbbe023593e698bff57b5646
foreman-dynflow-sidekiq-3.3.0.23-1.el8sat.noarch.rpm SHA-256: c02f93ae9a656c7824125f08bc76d70d1d7504dae4554454ebc3663523cdc46f
foreman-ec2-3.3.0.23-1.el8sat.noarch.rpm SHA-256: 19c9d371416b6bc2682ee76e99321323bbd97e265b97d2f65fe010f9b93c3425
foreman-gce-3.3.0.23-1.el8sat.noarch.rpm SHA-256: 95fb426be3630a55ffb95fb11f0ec9f8e963ffaead668ca9c944c3aeec4f1021
foreman-journald-3.3.0.23-1.el8sat.noarch.rpm SHA-256: 1af7809debfc9149b2a37bb15bcbb1ba30b994a6dc326bfd37e036b53c5edef3
foreman-libvirt-3.3.0.23-1.el8sat.noarch.rpm SHA-256: 169167778b267eaa27666950948bc5a0c1be8056cde9395566d3b424e39ea24e
foreman-openstack-3.3.0.23-1.el8sat.noarch.rpm SHA-256: 506f99f06046b695b89767c5f867da40d88fabb7c1354f625e442e376b926b0a
foreman-ovirt-3.3.0.23-1.el8sat.noarch.rpm SHA-256: 21fa6331878c8761dbd7d5505f79064f48aa24ff3795877c90c71c7e3d0168fd
foreman-postgresql-3.3.0.23-1.el8sat.noarch.rpm SHA-256: 3ced7033ee94b639e0543f52cc72c674d37c5c8647416982925386b9d2977b23
foreman-service-3.3.0.23-1.el8sat.noarch.rpm SHA-256: 27c5c3b91ce60fa96b7edbfa0ac48c4047361e3a68882add7a2fd7b542c078a9
foreman-telemetry-3.3.0.23-1.el8sat.noarch.rpm SHA-256: fd403e77a31cf10cfeb24327b519d1f9580e25c6429cafc450880df890f8bac2
foreman-vmware-3.3.0.23-1.el8sat.noarch.rpm SHA-256: da0421807841436dcf711e3a5ecfdf0f7084845c66ca5a123027981210f8152d
puppet-agent-7.26.0-3.el8sat.x86_64.rpm SHA-256: cc4bf1c0903e4e5c32eb7842fef51b10a8554883e3db5ed5214ec9003b2c400d
rubygem-git-1.18.0-1.el8sat.noarch.rpm SHA-256: 0359bc46b15f333b347aa93a709ba1c58c40432789c33cd5892a0db809456322
rubygem-safemode-1.3.8-1.el8sat.noarch.rpm SHA-256: 423aed44c3ada5fa14161306afef1891a255576bd73f68122cbbd47f14cddfd5
satellite-6.12.5.2-1.el8sat.noarch.rpm SHA-256: 47914ea5820278ee47157359429a925435614d3cb8777a404089592420424c78
satellite-cli-6.12.5.2-1.el8sat.noarch.rpm SHA-256: 6afaa9f100364e90d4da3c2b4363ee818e82fd97a98727387da8e16319f52b12
satellite-common-6.12.5.2-1.el8sat.noarch.rpm SHA-256: cdbe33c3d7fe6166a54122edc8dd435b31213106fc74a84d87ad1f71b0864d20
yggdrasil-worker-forwarder-0.0.3-1.el8sat.x86_64.rpm SHA-256: 083c3b580f7053ddc97446dd7b64f97d6874c5d5e4448bc9c66f98b58f8a5afc

Red Hat Satellite Capsule 6.12

SRPM
foreman-3.3.0.23-1.el8sat.src.rpm SHA-256: c5189e7b1c1525faa53ed21eda154bc87f6c6332cce11b48f28861987971e208
puppet-agent-7.26.0-3.el8sat.src.rpm SHA-256: b74e9a66ede61765c6e831331ea39b231079b654c81e6f3bf7516a246cf6fcca
satellite-6.12.5.2-1.el8sat.src.rpm SHA-256: 959afa9f26ebedca1005920f63be9d410d2c47ca2434717b89bd3774fffb4aee
x86_64
foreman-debug-3.3.0.23-1.el8sat.noarch.rpm SHA-256: e6160b1bcd9e04e7bd26fb8d703df83718053bc5bbbe023593e698bff57b5646
puppet-agent-7.26.0-3.el8sat.x86_64.rpm SHA-256: cc4bf1c0903e4e5c32eb7842fef51b10a8554883e3db5ed5214ec9003b2c400d
satellite-capsule-6.12.5.2-1.el8sat.noarch.rpm SHA-256: 40d12657dc5e0fe1b37800b5a465e9f9b5c89f923b2d5d6a310c46065e334c53
satellite-common-6.12.5.2-1.el8sat.noarch.rpm SHA-256: cdbe33c3d7fe6166a54122edc8dd435b31213106fc74a84d87ad1f71b0864d20

Red Hat Enterprise Linux for x86_64 8

SRPM
foreman-3.3.0.23-1.el8sat.src.rpm SHA-256: c5189e7b1c1525faa53ed21eda154bc87f6c6332cce11b48f28861987971e208
satellite-6.12.5.2-1.el8sat.src.rpm SHA-256: 959afa9f26ebedca1005920f63be9d410d2c47ca2434717b89bd3774fffb4aee
x86_64
foreman-cli-3.3.0.23-1.el8sat.noarch.rpm SHA-256: e9ec3c5bc9a5485c0444fc5def4b160974896741a9991ae1d07ca3f2d652f57e
satellite-cli-6.12.5.2-1.el8sat.noarch.rpm SHA-256: 6afaa9f100364e90d4da3c2b4363ee818e82fd97a98727387da8e16319f52b12

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.