{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite.", "title": "Topic" }, { "category": "general", "text": "Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.\n\nSecurity Fix(es):\n2043714 - CVE-2021-4142 candlepin: Satellite: Allow unintended SCA certificate to authenticate Candlepin [rhn_satellite_6-default]\n\nThis update fixes the following bugs:\n\n2043702 - Unable to sync EPEL repositories on Satellite 6.10 when 'Mirror on Sync' is enabled\n2043710 - Syncing tens of repos to capsule can cause deadlock: while updating tuple (...) in relation \"core_content\"\n2048306 - Satellite 6.10 may fail to sync content to capsule still in version 6.9\n2049760 - No longer be able to import content into disconnected Satellite for existing content views \n2053723 - Large repo sync failed with \"Katello::Errors::Pulp3Error: Response payload is not completed\"\n2053726 - After upgrading to 6.10, Satellite fails to sync some repositories with large files with timeout error \n2055660 - organization context fails to change in web UI\n2055662 - Incremental CV update fails with 400 HTTP error \n2027367 - Satellite doesn't forward the \"If-Modified-Since\" header for /accessible_content endpoint to Candlepin\n2027786 - Satellite schedules one recurring InventorySync::Async::InventoryScheduledSync per org but each task syncs all orgs, resulting in harmless but unnecessary tasks \n2043697 - null value in column \"manifest_id\" violates not-null constraint error while syncing RHOSP container images\n2043698 - Remote Execution fails to honor remote_execution_connect_by_ip override on host\n2043699 - Content view export failed with undefined method `first' for nil:NilClass\n2043700 - webhook event \"build_exited\" never gets triggered\n2043701 - Ansible roles are not starting automatically after provisioning\n2043704 - Syncing sha-checksummed KS repository fails with: \" Artifact() got an unexpected keyword argument 'sha' \"\n2043705 - db:seed can fail when there are host mismatches\n2043706 - New OS created due to facts mismatch for operatingsystem for RHSM, Puppet and Ansible\n2043707 - Satellite upgrade to 6.10.1 fails with multiple rubygem-sinatra package dependency errors\n2043712 - pulpcore-workers grow very large when repositories have many changelog entries\n2043715 - Limited CV docker tags cannot be pulled after syncing library repo with \"limit sync tags\" \n2043716 - 406 error appears when running insights-client --compliance\n2043719 - Incremental publish content view doesn't copy any contents\n2043720 - ERROR: at least one Erratum record has migrated_pulp3_href NULL value \n2047345 - New version of Candlepin now has org in entitlement certificate and causes authorization issues\n\nUsers of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2022:0790", "url": "https://access.redhat.com/errata/RHSA-2022:0790" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "2027367", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2027367" }, { "category": "external", "summary": "2027786", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2027786" }, { "category": "external", "summary": "2034346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034346" }, { "category": "external", "summary": "2043697", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043697" }, { "category": "external", "summary": "2043698", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043698" }, { "category": "external", "summary": "2043699", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043699" }, { "category": "external", "summary": "2043700", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043700" }, { "category": "external", "summary": "2043701", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043701" }, { "category": "external", "summary": "2043702", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043702" }, { "category": "external", "summary": "2043704", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043704" }, { "category": "external", "summary": "2043705", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043705" }, { "category": "external", "summary": "2043706", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043706" }, { "category": "external", "summary": "2043707", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043707" }, { "category": "external", "summary": "2043710", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043710" }, { "category": "external", "summary": "2043712", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043712" }, { "category": "external", "summary": "2043715", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043715" }, { "category": "external", "summary": "2043716", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043716" }, { "category": "external", "summary": "2043719", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043719" }, { "category": "external", "summary": "2043720", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2043720" }, { "category": "external", "summary": "2047345", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2047345" }, { "category": "external", "summary": "2048306", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2048306" }, { "category": "external", "summary": "2049760", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2049760" }, { "category": "external", "summary": "2053723", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053723" }, { "category": "external", "summary": "2053726", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2053726" }, { "category": "external", "summary": "2055660", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2055660" }, { "category": "external", "summary": "2055662", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2055662" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0790.json" } ], "title": "Red Hat Security Advisory: Satellite 6.10.3 Async Bug Fix Update", "tracking": { "current_release_date": "2026-06-26T17:54:58+00:00", "generator": { "date": "2026-06-26T17:54:58+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.2.6" } }, "id": "RHSA-2022:0790", "initial_release_date": "2022-03-08T21:28:24+00:00", "revision_history": [ { "date": "2022-03-08T21:28:24+00:00", "number": "1", "summary": "Initial version" }, { "date": "2022-03-08T21:28:24+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-06-26T17:54:58+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Satellite 6.10", "product": { "name": "Red Hat Satellite 6.10", "product_id": "7Server-Satellite610", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite:6.10::el7" } } }, { "category": "product_name", "name": "Red Hat Satellite Capsule 6.10", "product": { "name": "Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610", "product_identification_helper": { "cpe": "cpe:/a:redhat:satellite_capsule:6.10::el7" } } } ], "category": "product_family", "name": "Red Hat Satellite 6" }, { "branches": [ { "category": "product_version", "name": "candlepin-0:4.0.15-1.el7sat.src", "product": { "name": "candlepin-0:4.0.15-1.el7sat.src", "product_id": "candlepin-0:4.0.15-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin@4.0.15-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "product": { "name": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "product_id": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-aiohttp-xmlrpc@1.3.2-0.1.el7pc?arch=src" } } }, { "category": "product_version", "name": "python-pulp-container-0:2.8.4-0.1.el7pc.src", "product": { "name": "python-pulp-container-0:2.8.4-0.1.el7pc.src", "product_id": "python-pulp-container-0:2.8.4-0.1.el7pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-pulp-container@2.8.4-0.1.el7pc?arch=src" } } }, { "category": "product_version", "name": "python-pulp-rpm-0:3.14.12-1.el7pc.src", "product": { "name": "python-pulp-rpm-0:3.14.12-1.el7pc.src", "product_id": "python-pulp-rpm-0:3.14.12-1.el7pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-pulp-rpm@3.14.12-1.el7pc?arch=src" } } }, { "category": "product_version", "name": "satellite-0:6.10.3-1.el7sat.src", "product": { "name": "satellite-0:6.10.3-1.el7sat.src", "product_id": "satellite-0:6.10.3-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite@6.10.3-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src", "product": { "name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src", "product_id": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-foreman_ansible@6.3.4.1-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src", "product": { "name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src", "product_id": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-foreman_rh_cloud@4.0.31-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "foreman-0:2.5.2.19-1.el7sat.src", "product": { "name": "foreman-0:2.5.2.19-1.el7sat.src", "product_id": "foreman-0:2.5.2.19-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman@2.5.2.19-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "python-pulpcore-0:3.14.12-1.el7pc.src", "product": { "name": "python-pulpcore-0:3.14.12-1.el7pc.src", "product_id": "python-pulpcore-0:3.14.12-1.el7pc.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python-pulpcore@3.14.12-1.el7pc?arch=src" } } }, { "category": "product_version", "name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src", "product": { "name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src", "product_id": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-katello@4.1.1.48-1.el7sat?arch=src" } } }, { "category": "product_version", "name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src", "product": { "name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src", "product_id": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-pulp_rpm_client@3.14.12.1-1.el7sat?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "candlepin-0:4.0.15-1.el7sat.noarch", "product": { "name": "candlepin-0:4.0.15-1.el7sat.noarch", "product_id": "candlepin-0:4.0.15-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin@4.0.15-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "candlepin-selinux-0:4.0.15-1.el7sat.noarch", "product": { "name": "candlepin-selinux-0:4.0.15-1.el7sat.noarch", "product_id": "candlepin-selinux-0:4.0.15-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin-selinux@4.0.15-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "product": { "name": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "product_id": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-aiohttp-xmlrpc@1.3.2-0.1.el7pc?arch=noarch" } } }, { "category": "product_version", "name": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "product": { "name": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "product_id": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-pulp-container@2.8.4-0.1.el7pc?arch=noarch" } } }, { "category": "product_version", "name": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "product": { "name": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "product_id": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-pulp-rpm@3.14.12-1.el7pc?arch=noarch" } } }, { "category": "product_version", "name": "satellite-capsule-0:6.10.3-1.el7sat.noarch", "product": { "name": "satellite-capsule-0:6.10.3-1.el7sat.noarch", "product_id": "satellite-capsule-0:6.10.3-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-capsule@6.10.3-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-common-0:6.10.3-1.el7sat.noarch", "product": { "name": "satellite-common-0:6.10.3-1.el7sat.noarch", "product_id": "satellite-common-0:6.10.3-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-common@6.10.3-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-0:6.10.3-1.el7sat.noarch", "product": { "name": "satellite-0:6.10.3-1.el7sat.noarch", "product_id": "satellite-0:6.10.3-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite@6.10.3-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "satellite-cli-0:6.10.3-1.el7sat.noarch", "product": { "name": "satellite-cli-0:6.10.3-1.el7sat.noarch", "product_id": "satellite-cli-0:6.10.3-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/satellite-cli@6.10.3-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch", "product": { "name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch", "product_id": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-foreman_ansible@6.3.4.1-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch", "product": { "name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch", "product_id": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-foreman_rh_cloud@4.0.31-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-debug-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-debug-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-debug-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-debug@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-cli-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-cli-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-cli-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-cli@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-ec2@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-gce-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-gce-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-gce-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-gce@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-journald-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-journald-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-journald-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-journald@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-libvirt@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-openstack@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-ovirt@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-postgresql@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-service-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-service-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-service-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-service@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-telemetry@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch", "product": { "name": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch", "product_id": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/foreman-vmware@2.5.2.19-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "python3-pulpcore-0:3.14.12-1.el7pc.noarch", "product": { "name": "python3-pulpcore-0:3.14.12-1.el7pc.noarch", "product_id": "python3-pulpcore-0:3.14.12-1.el7pc.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3-pulpcore@3.14.12-1.el7pc?arch=noarch" } } }, { "category": "product_version", "name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch", "product": { "name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch", "product_id": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-katello@4.1.1.48-1.el7sat?arch=noarch" } } }, { "category": "product_version", "name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch", "product": { "name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch", "product_id": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/tfm-rubygem-pulp_rpm_client@3.14.12.1-1.el7sat?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "foreman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.src" }, "product_reference": "foreman-0:2.5.2.19-1.el7sat.src", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:foreman-debug-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-debug-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src" }, "product_reference": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulp-container-0:2.8.4-0.1.el7pc.src as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:python-pulp-container-0:2.8.4-0.1.el7pc.src" }, "product_reference": "python-pulp-container-0:2.8.4-0.1.el7pc.src", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulp-rpm-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:python-pulp-rpm-0:3.14.12-1.el7pc.src" }, "product_reference": "python-pulp-rpm-0:3.14.12-1.el7pc.src", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulpcore-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:python-pulpcore-0:3.14.12-1.el7pc.src" }, "product_reference": "python-pulpcore-0:3.14.12-1.el7pc.src", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch" }, "product_reference": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch" }, "product_reference": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch" }, "product_reference": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "python3-pulpcore-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:python3-pulpcore-0:3.14.12-1.el7pc.noarch" }, "product_reference": "python3-pulpcore-0:3.14.12-1.el7pc.noarch", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.10.3-1.el7sat.src as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:satellite-0:6.10.3-1.el7sat.src" }, "product_reference": "satellite-0:6.10.3-1.el7sat.src", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-capsule-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:satellite-capsule-0:6.10.3-1.el7sat.noarch" }, "product_reference": "satellite-capsule-0:6.10.3-1.el7sat.noarch", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-common-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.10", "product_id": "7Server-Capsule610:satellite-common-0:6.10.3-1.el7sat.noarch" }, "product_reference": "satellite-common-0:6.10.3-1.el7sat.noarch", "relates_to_product_reference": "7Server-Capsule610" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.noarch" }, "product_reference": "candlepin-0:4.0.15-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-0:4.0.15-1.el7sat.src as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.src" }, "product_reference": "candlepin-0:4.0.15-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-selinux-0:4.0.15-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:candlepin-selinux-0:4.0.15-1.el7sat.noarch" }, "product_reference": "candlepin-selinux-0:4.0.15-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-0:2.5.2.19-1.el7sat.src as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.src" }, "product_reference": "foreman-0:2.5.2.19-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-cli-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-cli-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-cli-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-debug-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-debug-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-debug-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-ec2-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-gce-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-gce-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-gce-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-journald-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-journald-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-journald-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-libvirt-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-openstack-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-ovirt-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-postgresql-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-service-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-service-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-service-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-telemetry-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch" }, "product_reference": "foreman-vmware-0:2.5.2.19-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src" }, "product_reference": "python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulp-container-0:2.8.4-0.1.el7pc.src as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:python-pulp-container-0:2.8.4-0.1.el7pc.src" }, "product_reference": "python-pulp-container-0:2.8.4-0.1.el7pc.src", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulp-rpm-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:python-pulp-rpm-0:3.14.12-1.el7pc.src" }, "product_reference": "python-pulp-rpm-0:3.14.12-1.el7pc.src", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "python-pulpcore-0:3.14.12-1.el7pc.src as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:python-pulpcore-0:3.14.12-1.el7pc.src" }, "product_reference": "python-pulpcore-0:3.14.12-1.el7pc.src", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch" }, "product_reference": "python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch" }, "product_reference": "python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch" }, "product_reference": "python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "python3-pulpcore-0:3.14.12-1.el7pc.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:python3-pulpcore-0:3.14.12-1.el7pc.noarch" }, "product_reference": "python3-pulpcore-0:3.14.12-1.el7pc.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.noarch" }, "product_reference": "satellite-0:6.10.3-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-0:6.10.3-1.el7sat.src as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.src" }, "product_reference": "satellite-0:6.10.3-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-cli-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:satellite-cli-0:6.10.3-1.el7sat.noarch" }, "product_reference": "satellite-cli-0:6.10.3-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "satellite-common-0:6.10.3-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:satellite-common-0:6.10.3-1.el7sat.noarch" }, "product_reference": "satellite-common-0:6.10.3-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch" }, "product_reference": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src" }, "product_reference": "tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch" }, "product_reference": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src" }, "product_reference": "tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch" }, "product_reference": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src" }, "product_reference": "tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch" }, "product_reference": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch", "relates_to_product_reference": "7Server-Satellite610" }, { "category": "default_component_of", "full_product_name": { "name": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src as a component of Red Hat Satellite 6.10", "product_id": "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src" }, "product_reference": "tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src", "relates_to_product_reference": "7Server-Satellite610" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Nikolaos Moumoulidis", "Barnaby Court" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2021-4142", "cwe": { "id": "CWE-305", "name": "Authentication Bypass by Primary Weakness" }, "discovery_date": "2021-12-20T00:00:00+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.src", "7Server-Capsule610:foreman-debug-0:2.5.2.19-1.el7sat.noarch", "7Server-Capsule610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "7Server-Capsule610:python-pulp-container-0:2.8.4-0.1.el7pc.src", "7Server-Capsule610:python-pulp-rpm-0:3.14.12-1.el7pc.src", "7Server-Capsule610:python-pulpcore-0:3.14.12-1.el7pc.src", "7Server-Capsule610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "7Server-Capsule610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "7Server-Capsule610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "7Server-Capsule610:python3-pulpcore-0:3.14.12-1.el7pc.noarch", "7Server-Capsule610:satellite-0:6.10.3-1.el7sat.src", "7Server-Capsule610:satellite-capsule-0:6.10.3-1.el7sat.noarch", "7Server-Capsule610:satellite-common-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.src", "7Server-Satellite610:foreman-cli-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-debug-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-gce-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-journald-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-service-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "7Server-Satellite610:python-pulp-container-0:2.8.4-0.1.el7pc.src", "7Server-Satellite610:python-pulp-rpm-0:3.14.12-1.el7pc.src", "7Server-Satellite610:python-pulpcore-0:3.14.12-1.el7pc.src", "7Server-Satellite610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "7Server-Satellite610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "7Server-Satellite610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "7Server-Satellite610:python3-pulpcore-0:3.14.12-1.el7pc.noarch", "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.src", "7Server-Satellite610:satellite-cli-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:satellite-common-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2034346" } ], "notes": [ { "category": "description", "text": "The Candlepin component of Red Hat Satellite was affected by an improper authentication flaw. Few factors could allow an attacker to use the SCA (simple content access) certificate for authentication with Candlepin.", "title": "Vulnerability description" }, { "category": "summary", "text": "Satellite: Allow unintended SCA certificate to authenticate Candlepin", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.noarch", "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.src", "7Server-Satellite610:candlepin-selinux-0:4.0.15-1.el7sat.noarch" ], "known_not_affected": [ "7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.src", "7Server-Capsule610:foreman-debug-0:2.5.2.19-1.el7sat.noarch", "7Server-Capsule610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "7Server-Capsule610:python-pulp-container-0:2.8.4-0.1.el7pc.src", "7Server-Capsule610:python-pulp-rpm-0:3.14.12-1.el7pc.src", "7Server-Capsule610:python-pulpcore-0:3.14.12-1.el7pc.src", "7Server-Capsule610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "7Server-Capsule610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "7Server-Capsule610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "7Server-Capsule610:python3-pulpcore-0:3.14.12-1.el7pc.noarch", "7Server-Capsule610:satellite-0:6.10.3-1.el7sat.src", "7Server-Capsule610:satellite-capsule-0:6.10.3-1.el7sat.noarch", "7Server-Capsule610:satellite-common-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.src", "7Server-Satellite610:foreman-cli-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-debug-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-gce-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-journald-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-service-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "7Server-Satellite610:python-pulp-container-0:2.8.4-0.1.el7pc.src", "7Server-Satellite610:python-pulp-rpm-0:3.14.12-1.el7pc.src", "7Server-Satellite610:python-pulpcore-0:3.14.12-1.el7pc.src", "7Server-Satellite610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "7Server-Satellite610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "7Server-Satellite610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "7Server-Satellite610:python3-pulpcore-0:3.14.12-1.el7pc.noarch", "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.src", "7Server-Satellite610:satellite-cli-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:satellite-common-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-4142" }, { "category": "external", "summary": "RHBZ#2034346", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2034346" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-4142", "url": "https://www.cve.org/CVERecord?id=CVE-2021-4142" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-4142", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4142" } ], "release_date": "2022-01-17T10:30:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2022-03-08T21:28:24+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.10/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts", "product_ids": [ "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.noarch", "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.src", "7Server-Satellite610:candlepin-selinux-0:4.0.15-1.el7sat.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2022:0790" }, { "category": "workaround", "details": "Mitigation for this issue is not available because it doesn't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.src", "7Server-Capsule610:foreman-debug-0:2.5.2.19-1.el7sat.noarch", "7Server-Capsule610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "7Server-Capsule610:python-pulp-container-0:2.8.4-0.1.el7pc.src", "7Server-Capsule610:python-pulp-rpm-0:3.14.12-1.el7pc.src", "7Server-Capsule610:python-pulpcore-0:3.14.12-1.el7pc.src", "7Server-Capsule610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "7Server-Capsule610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "7Server-Capsule610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "7Server-Capsule610:python3-pulpcore-0:3.14.12-1.el7pc.noarch", "7Server-Capsule610:satellite-0:6.10.3-1.el7sat.src", "7Server-Capsule610:satellite-capsule-0:6.10.3-1.el7sat.noarch", "7Server-Capsule610:satellite-common-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.noarch", "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.src", "7Server-Satellite610:candlepin-selinux-0:4.0.15-1.el7sat.noarch", "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.src", "7Server-Satellite610:foreman-cli-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-debug-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-gce-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-journald-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-service-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "7Server-Satellite610:python-pulp-container-0:2.8.4-0.1.el7pc.src", "7Server-Satellite610:python-pulp-rpm-0:3.14.12-1.el7pc.src", "7Server-Satellite610:python-pulpcore-0:3.14.12-1.el7pc.src", "7Server-Satellite610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "7Server-Satellite610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "7Server-Satellite610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "7Server-Satellite610:python3-pulpcore-0:3.14.12-1.el7pc.noarch", "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.src", "7Server-Satellite610:satellite-cli-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:satellite-common-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-Capsule610:foreman-0:2.5.2.19-1.el7sat.src", "7Server-Capsule610:foreman-debug-0:2.5.2.19-1.el7sat.noarch", "7Server-Capsule610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "7Server-Capsule610:python-pulp-container-0:2.8.4-0.1.el7pc.src", "7Server-Capsule610:python-pulp-rpm-0:3.14.12-1.el7pc.src", "7Server-Capsule610:python-pulpcore-0:3.14.12-1.el7pc.src", "7Server-Capsule610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "7Server-Capsule610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "7Server-Capsule610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "7Server-Capsule610:python3-pulpcore-0:3.14.12-1.el7pc.noarch", "7Server-Capsule610:satellite-0:6.10.3-1.el7sat.src", "7Server-Capsule610:satellite-capsule-0:6.10.3-1.el7sat.noarch", "7Server-Capsule610:satellite-common-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.noarch", "7Server-Satellite610:candlepin-0:4.0.15-1.el7sat.src", "7Server-Satellite610:candlepin-selinux-0:4.0.15-1.el7sat.noarch", "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-0:2.5.2.19-1.el7sat.src", "7Server-Satellite610:foreman-cli-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-debug-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-dynflow-sidekiq-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-ec2-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-gce-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-journald-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-libvirt-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-openstack-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-ovirt-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-postgresql-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-service-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-telemetry-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:foreman-vmware-0:2.5.2.19-1.el7sat.noarch", "7Server-Satellite610:python-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.src", "7Server-Satellite610:python-pulp-container-0:2.8.4-0.1.el7pc.src", "7Server-Satellite610:python-pulp-rpm-0:3.14.12-1.el7pc.src", "7Server-Satellite610:python-pulpcore-0:3.14.12-1.el7pc.src", "7Server-Satellite610:python3-aiohttp-xmlrpc-0:1.3.2-0.1.el7pc.noarch", "7Server-Satellite610:python3-pulp-container-0:2.8.4-0.1.el7pc.noarch", "7Server-Satellite610:python3-pulp-rpm-0:3.14.12-1.el7pc.noarch", "7Server-Satellite610:python3-pulpcore-0:3.14.12-1.el7pc.noarch", "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:satellite-0:6.10.3-1.el7sat.src", "7Server-Satellite610:satellite-cli-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:satellite-common-0:6.10.3-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_ansible-0:6.3.4.1-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-foreman_rh_cloud-0:4.0.31-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-katello-0:4.1.1.48-1.el7sat.src", "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.noarch", "7Server-Satellite610:tfm-rubygem-pulp_rpm_client-0:3.14.12.1-1.el7sat.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Satellite: Allow unintended SCA certificate to authenticate Candlepin" } ] }