Vulnerability Database
Blog
FAQ
Docs
RHSA-2023:5931
See a problem?
Source
https://access.redhat.com/errata/RHSA-2023:5931
Import Source
https://security.access.redhat.com/data/osv/RHSA-2023:5931.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2023:5931
Related
CVE-2022-1292
CVE-2022-2068
CVE-2022-24439
CVE-2022-3874
CVE-2022-46648
CVE-2022-47318
CVE-2023-0462
CVE-2023-31047
CVE-2023-36053
CVE-2023-3817
CVE-2023-39325
CVE-2023-40267
CVE-2023-44487
GO-2023-2102
Published
2024-10-02T11:22:53Z
Modified
2024-10-31T05:21:20Z
Severity
9.8 (Critical)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: Satellite 6.13.5 Async Security Update
Details
References
https://access.redhat.com/errata/RHSA-2023:5931
https://access.redhat.com/security/updates/classification/#important
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.13/html/upgrading_and_updating_red_hat_satellite/index
https://access.redhat.com/security/vulnerabilities/RHSB-2023-003
https://bugzilla.redhat.com/show_bug.cgi?id=2081494
https://bugzilla.redhat.com/show_bug.cgi?id=2097310
https://bugzilla.redhat.com/show_bug.cgi?id=2140577
https://bugzilla.redhat.com/show_bug.cgi?id=2151583
https://bugzilla.redhat.com/show_bug.cgi?id=2159672
https://bugzilla.redhat.com/show_bug.cgi?id=2162970
https://bugzilla.redhat.com/show_bug.cgi?id=2169385
https://bugzilla.redhat.com/show_bug.cgi?id=2192565
https://bugzilla.redhat.com/show_bug.cgi?id=2218004
https://bugzilla.redhat.com/show_bug.cgi?id=2231474
https://bugzilla.redhat.com/show_bug.cgi?id=2238346
https://bugzilla.redhat.com/show_bug.cgi?id=2238348
https://bugzilla.redhat.com/show_bug.cgi?id=2238350
https://bugzilla.redhat.com/show_bug.cgi?id=2238353
https://bugzilla.redhat.com/show_bug.cgi?id=2238359
https://bugzilla.redhat.com/show_bug.cgi?id=2238361
https://bugzilla.redhat.com/show_bug.cgi?id=2238363
https://bugzilla.redhat.com/show_bug.cgi?id=2238367
https://bugzilla.redhat.com/show_bug.cgi?id=2238369
https://bugzilla.redhat.com/show_bug.cgi?id=2238371
https://bugzilla.redhat.com/show_bug.cgi?id=2239041
https://bugzilla.redhat.com/show_bug.cgi?id=2240781
https://bugzilla.redhat.com/show_bug.cgi?id=2241914
https://bugzilla.redhat.com/show_bug.cgi?id=2242803
https://bugzilla.redhat.com/show_bug.cgi?id=2243296
https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_5931.json
https://access.redhat.com/security/cve/CVE-2022-1292
https://www.cve.org/CVERecord?id=CVE-2022-1292
https://nvd.nist.gov/vuln/detail/CVE-2022-1292
https://www.openssl.org/news/secadv/20220503.txt
https://access.redhat.com/security/cve/CVE-2022-2068
https://www.cve.org/CVERecord?id=CVE-2022-2068
https://nvd.nist.gov/vuln/detail/CVE-2022-2068
https://www.openssl.org/news/secadv/20220621.txt
https://access.redhat.com/security/cve/CVE-2022-3874
https://www.cve.org/CVERecord?id=CVE-2022-3874
https://nvd.nist.gov/vuln/detail/CVE-2022-3874
https://access.redhat.com/security/cve/CVE-2022-24439
https://www.cve.org/CVERecord?id=CVE-2022-24439
https://nvd.nist.gov/vuln/detail/CVE-2022-24439
https://security.snyk.io/vuln/SNYK-PYTHON-GITPYTHON-3113858
https://access.redhat.com/security/cve/CVE-2022-46648
https://www.cve.org/CVERecord?id=CVE-2022-46648
https://nvd.nist.gov/vuln/detail/CVE-2022-46648
https://jvn.jp/en/jp/JVN16765254/
https://access.redhat.com/security/cve/CVE-2022-47318
https://www.cve.org/CVERecord?id=CVE-2022-47318
https://nvd.nist.gov/vuln/detail/CVE-2022-47318
https://access.redhat.com/security/cve/CVE-2023-0462
https://www.cve.org/CVERecord?id=CVE-2023-0462
https://nvd.nist.gov/vuln/detail/CVE-2023-0462
https://access.redhat.com/security/cve/CVE-2023-3817
https://bugzilla.redhat.com/show_bug.cgi?id=2227852
https://www.cve.org/CVERecord?id=CVE-2023-3817
https://nvd.nist.gov/vuln/detail/CVE-2023-3817
https://www.openssl.org/news/secadv/20230731.txt
https://access.redhat.com/security/cve/CVE-2023-31047
https://www.cve.org/CVERecord?id=CVE-2023-31047
https://nvd.nist.gov/vuln/detail/CVE-2023-31047
https://www.djangoproject.com/weblog/2023/may/03/security-releases/
https://access.redhat.com/security/cve/CVE-2023-36053
https://www.cve.org/CVERecord?id=CVE-2023-36053
https://nvd.nist.gov/vuln/detail/CVE-2023-36053
https://www.djangoproject.com/weblog/2023/jul/03/security-releases/
https://access.redhat.com/security/cve/CVE-2023-39325
https://www.cve.org/CVERecord?id=CVE-2023-39325
https://nvd.nist.gov/vuln/detail/CVE-2023-39325
https://access.redhat.com/security/cve/CVE-2023-44487
https://go.dev/issue/63417
https://pkg.go.dev/vuln/GO-2023-2102
https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
https://access.redhat.com/security/cve/CVE-2023-40267
https://www.cve.org/CVERecord?id=CVE-2023-40267
https://nvd.nist.gov/vuln/detail/CVE-2023-40267
https://github.com/advisories/GHSA-pr76-5cm5-w9cj
https://www.cve.org/CVERecord?id=CVE-2023-44487
https://nvd.nist.gov/vuln/detail/CVE-2023-44487
https://github.com/dotnet/announcements/issues/277
https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Affected packages
Red Hat:satellite_capsule:6.13::el8
/
puppet-agent
Package
Name
puppet-agent
Purl
pkg:rpm/redhat/puppet-agent
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.26.0-3.el8sat
Red Hat:satellite:6.13::el8
/
puppet-agent
Package
Name
puppet-agent
Purl
pkg:rpm/redhat/puppet-agent
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:7.26.0-3.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman
Package
Name
foreman
Purl
pkg:rpm/redhat/foreman
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-cli
Package
Name
foreman-cli
Purl
pkg:rpm/redhat/foreman-cli
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-debug
Package
Name
foreman-debug
Purl
pkg:rpm/redhat/foreman-debug
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-dynflow-sidekiq
Package
Name
foreman-dynflow-sidekiq
Purl
pkg:rpm/redhat/foreman-dynflow-sidekiq
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-ec2
Package
Name
foreman-ec2
Purl
pkg:rpm/redhat/foreman-ec2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-journald
Package
Name
foreman-journald
Purl
pkg:rpm/redhat/foreman-journald
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-libvirt
Package
Name
foreman-libvirt
Purl
pkg:rpm/redhat/foreman-libvirt
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-openstack
Package
Name
foreman-openstack
Purl
pkg:rpm/redhat/foreman-openstack
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-ovirt
Package
Name
foreman-ovirt
Purl
pkg:rpm/redhat/foreman-ovirt
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-postgresql
Package
Name
foreman-postgresql
Purl
pkg:rpm/redhat/foreman-postgresql
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-service
Package
Name
foreman-service
Purl
pkg:rpm/redhat/foreman-service
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-telemetry
Package
Name
foreman-telemetry
Purl
pkg:rpm/redhat/foreman-telemetry
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
foreman-vmware
Package
Name
foreman-vmware
Purl
pkg:rpm/redhat/foreman-vmware
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman
Package
Name
foreman
Purl
pkg:rpm/redhat/foreman
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-cli
Package
Name
foreman-cli
Purl
pkg:rpm/redhat/foreman-cli
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-debug
Package
Name
foreman-debug
Purl
pkg:rpm/redhat/foreman-debug
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-dynflow-sidekiq
Package
Name
foreman-dynflow-sidekiq
Purl
pkg:rpm/redhat/foreman-dynflow-sidekiq
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-ec2
Package
Name
foreman-ec2
Purl
pkg:rpm/redhat/foreman-ec2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-journald
Package
Name
foreman-journald
Purl
pkg:rpm/redhat/foreman-journald
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-libvirt
Package
Name
foreman-libvirt
Purl
pkg:rpm/redhat/foreman-libvirt
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-openstack
Package
Name
foreman-openstack
Purl
pkg:rpm/redhat/foreman-openstack
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-ovirt
Package
Name
foreman-ovirt
Purl
pkg:rpm/redhat/foreman-ovirt
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-postgresql
Package
Name
foreman-postgresql
Purl
pkg:rpm/redhat/foreman-postgresql
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-service
Package
Name
foreman-service
Purl
pkg:rpm/redhat/foreman-service
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-telemetry
Package
Name
foreman-telemetry
Purl
pkg:rpm/redhat/foreman-telemetry
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_utils:6.13::el8
/
foreman-vmware
Package
Name
foreman-vmware
Purl
pkg:rpm/redhat/foreman-vmware
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman
Package
Name
foreman
Purl
pkg:rpm/redhat/foreman
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-cli
Package
Name
foreman-cli
Purl
pkg:rpm/redhat/foreman-cli
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-debug
Package
Name
foreman-debug
Purl
pkg:rpm/redhat/foreman-debug
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-dynflow-sidekiq
Package
Name
foreman-dynflow-sidekiq
Purl
pkg:rpm/redhat/foreman-dynflow-sidekiq
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-ec2
Package
Name
foreman-ec2
Purl
pkg:rpm/redhat/foreman-ec2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-journald
Package
Name
foreman-journald
Purl
pkg:rpm/redhat/foreman-journald
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-libvirt
Package
Name
foreman-libvirt
Purl
pkg:rpm/redhat/foreman-libvirt
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-openstack
Package
Name
foreman-openstack
Purl
pkg:rpm/redhat/foreman-openstack
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-ovirt
Package
Name
foreman-ovirt
Purl
pkg:rpm/redhat/foreman-ovirt
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-postgresql
Package
Name
foreman-postgresql
Purl
pkg:rpm/redhat/foreman-postgresql
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-service
Package
Name
foreman-service
Purl
pkg:rpm/redhat/foreman-service
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-telemetry
Package
Name
foreman-telemetry
Purl
pkg:rpm/redhat/foreman-telemetry
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite:6.13::el8
/
foreman-vmware
Package
Name
foreman-vmware
Purl
pkg:rpm/redhat/foreman-vmware
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.5.1.23-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
python-gitpython
Package
Name
python-gitpython
Purl
pkg:rpm/redhat/python-gitpython
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.1.32-1.el8pc
Red Hat:satellite_capsule:6.13::el8
/
python39-gitpython
Package
Name
python39-gitpython
Purl
pkg:rpm/redhat/python39-gitpython
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.1.32-1.el8pc
Red Hat:satellite:6.13::el8
/
python-gitpython
Package
Name
python-gitpython
Purl
pkg:rpm/redhat/python-gitpython
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.1.32-1.el8pc
Red Hat:satellite:6.13::el8
/
python39-gitpython
Package
Name
python39-gitpython
Purl
pkg:rpm/redhat/python39-gitpython
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.1.32-1.el8pc
Red Hat:satellite:6.13::el8
/
rubygem-git
Package
Name
rubygem-git
Purl
pkg:rpm/redhat/rubygem-git
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.18.0-1.el8sat
Red Hat:satellite_capsule:6.13::el8
/
python-django
Package
Name
python-django
Purl
pkg:rpm/redhat/python-django
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.2.21-1.el8pc
Red Hat:satellite_capsule:6.13::el8
/
python39-django
Package
Name
python39-django
Purl
pkg:rpm/redhat/python39-django
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.2.21-1.el8pc
Red Hat:satellite:6.13::el8
/
python-django
Package
Name
python-django
Purl
pkg:rpm/redhat/python-django
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.2.21-1.el8pc
Red Hat:satellite:6.13::el8
/
python39-django
Package
Name
python39-django
Purl
pkg:rpm/redhat/python39-django
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.2.21-1.el8pc
Red Hat:satellite:6.13::el8
/
yggdrasil-worker-forwarder
Package
Name
yggdrasil-worker-forwarder
Purl
pkg:rpm/redhat/yggdrasil-worker-forwarder
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:0.0.3-1.el8sat
RHSA-2023:5931 - OSV