RHSA-2023:0261
- Source
- https://access.redhat.com/errata/RHSA-2023:0261
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2023:0261.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2023:0261
- Related
- Published
- 2024-09-30T07:07:40Z
- Modified
- 2024-10-28T20:03:54Z
- Severity
-
- 8.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: Satellite 6.12.1 Async Security Update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2023:0261
- https://access.redhat.com/security/updates/classification/#critical
- https://bugzilla.redhat.com/show_bug.cgi?id=2082209
- https://bugzilla.redhat.com/show_bug.cgi?id=2108997
- https://bugzilla.redhat.com/show_bug.cgi?id=2135435
- https://bugzilla.redhat.com/show_bug.cgi?id=2141308
- https://bugzilla.redhat.com/show_bug.cgi?id=2150069
- https://bugzilla.redhat.com/show_bug.cgi?id=2150108
- https://bugzilla.redhat.com/show_bug.cgi?id=2150111
- https://bugzilla.redhat.com/show_bug.cgi?id=2150112
- https://bugzilla.redhat.com/show_bug.cgi?id=2150114
- https://bugzilla.redhat.com/show_bug.cgi?id=2150118
- https://bugzilla.redhat.com/show_bug.cgi?id=2150119
- https://bugzilla.redhat.com/show_bug.cgi?id=2150120
- https://bugzilla.redhat.com/show_bug.cgi?id=2150123
- https://bugzilla.redhat.com/show_bug.cgi?id=2150125
- https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0261.json
- https://access.redhat.com/security/cve/CVE-2022-32224
- https://www.cve.org/CVERecord?id=CVE-2022-32224
- https://nvd.nist.gov/vuln/detail/CVE-2022-32224
- https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017
- https://access.redhat.com/security/cve/CVE-2022-42003
- https://bugzilla.redhat.com/show_bug.cgi?id=2135244
- https://www.cve.org/CVERecord?id=CVE-2022-42003
- https://nvd.nist.gov/vuln/detail/CVE-2022-42003
- https://access.redhat.com/security/cve/CVE-2022-42889
- https://www.cve.org/CVERecord?id=CVE-2022-42889
- https://nvd.nist.gov/vuln/detail/CVE-2022-42889
- https://blogs.apache.org/security/entry/cve-2022-42889
- https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om
- https://seclists.org/oss-sec/2022/q4/22
Affected packages
Red Hat:satellite:6.12::el8 / rubygem-activerecord
Package
- Name
- rubygem-activerecord
- Purl
- pkg:rpm/redhat/rubygem-activerecord
Red Hat:satellite_capsule:6.12::el8 / foreman
Package
- Name
- foreman
- Purl
- pkg:rpm/redhat/foreman
Red Hat:satellite_capsule:6.12::el8 / foreman-cli
Package
- Name
- foreman-cli
- Purl
- pkg:rpm/redhat/foreman-cli
Red Hat:satellite_capsule:6.12::el8 / foreman-debug
Package
- Name
- foreman-debug
- Purl
- pkg:rpm/redhat/foreman-debug
Red Hat:satellite_capsule:6.12::el8 / foreman-dynflow-sidekiq
Package
- Name
- foreman-dynflow-sidekiq
- Purl
- pkg:rpm/redhat/foreman-dynflow-sidekiq
Red Hat:satellite_capsule:6.12::el8 / foreman-ec2
Package
- Name
- foreman-ec2
- Purl
- pkg:rpm/redhat/foreman-ec2
Red Hat:satellite_capsule:6.12::el8 / foreman-gce
Package
- Name
- foreman-gce
- Purl
- pkg:rpm/redhat/foreman-gce
Red Hat:satellite_capsule:6.12::el8 / foreman-journald
Package
- Name
- foreman-journald
- Purl
- pkg:rpm/redhat/foreman-journald
Red Hat:satellite_capsule:6.12::el8 / foreman-libvirt
Package
- Name
- foreman-libvirt
- Purl
- pkg:rpm/redhat/foreman-libvirt
Red Hat:satellite_capsule:6.12::el8 / foreman-openstack
Package
- Name
- foreman-openstack
- Purl
- pkg:rpm/redhat/foreman-openstack
Red Hat:satellite_capsule:6.12::el8 / foreman-ovirt
Package
- Name
- foreman-ovirt
- Purl
- pkg:rpm/redhat/foreman-ovirt
Red Hat:satellite_capsule:6.12::el8 / foreman-postgresql
Package
- Name
- foreman-postgresql
- Purl
- pkg:rpm/redhat/foreman-postgresql
Red Hat:satellite_capsule:6.12::el8 / foreman-service
Package
- Name
- foreman-service
- Purl
- pkg:rpm/redhat/foreman-service
Red Hat:satellite_capsule:6.12::el8 / foreman-telemetry
Package
- Name
- foreman-telemetry
- Purl
- pkg:rpm/redhat/foreman-telemetry
Red Hat:satellite_capsule:6.12::el8 / foreman-vmware
Package
- Name
- foreman-vmware
- Purl
- pkg:rpm/redhat/foreman-vmware
Red Hat:satellite_capsule:6.12::el8 / python-pulp-container
Package
- Name
- python-pulp-container
- Purl
- pkg:rpm/redhat/python-pulp-container
Red Hat:satellite_capsule:6.12::el8 / python-pulp-rpm
Package
- Name
- python-pulp-rpm
- Purl
- pkg:rpm/redhat/python-pulp-rpm
Red Hat:satellite_capsule:6.12::el8 / python-pulpcore
Package
- Name
- python-pulpcore
- Purl
- pkg:rpm/redhat/python-pulpcore
Red Hat:satellite_capsule:6.12::el8 / python39-pulp-container
Package
- Name
- python39-pulp-container
- Purl
- pkg:rpm/redhat/python39-pulp-container
Red Hat:satellite_capsule:6.12::el8 / python39-pulp-rpm
Package
- Name
- python39-pulp-rpm
- Purl
- pkg:rpm/redhat/python39-pulp-rpm
Red Hat:satellite_capsule:6.12::el8 / python39-pulpcore
Package
- Name
- python39-pulpcore
- Purl
- pkg:rpm/redhat/python39-pulpcore
Red Hat:satellite_capsule:6.12::el8 / rubygem-smart_proxy_container_gateway
Package
- Name
- rubygem-smart_proxy_container_gateway
- Purl
- pkg:rpm/redhat/rubygem-smart_proxy_container_gateway
Red Hat:satellite_capsule:6.12::el8 / satellite
Package
- Name
- satellite
- Purl
- pkg:rpm/redhat/satellite
Red Hat:satellite_capsule:6.12::el8 / satellite-capsule
Package
- Name
- satellite-capsule
- Purl
- pkg:rpm/redhat/satellite-capsule
Red Hat:satellite_capsule:6.12::el8 / satellite-cli
Package
- Name
- satellite-cli
- Purl
- pkg:rpm/redhat/satellite-cli
Red Hat:satellite_capsule:6.12::el8 / satellite-common
Package
- Name
- satellite-common
- Purl
- pkg:rpm/redhat/satellite-common
Red Hat:satellite_maintenance:6.12::el8 / satellite-clone
Package
- Name
- satellite-clone
- Purl
- pkg:rpm/redhat/satellite-clone
Red Hat:satellite_utils:6.12::el8 / foreman
Package
- Name
- foreman
- Purl
- pkg:rpm/redhat/foreman
Red Hat:satellite_utils:6.12::el8 / foreman-cli
Package
- Name
- foreman-cli
- Purl
- pkg:rpm/redhat/foreman-cli
Red Hat:satellite_utils:6.12::el8 / foreman-debug
Package
- Name
- foreman-debug
- Purl
- pkg:rpm/redhat/foreman-debug
Red Hat:satellite_utils:6.12::el8 / foreman-dynflow-sidekiq
Package
- Name
- foreman-dynflow-sidekiq
- Purl
- pkg:rpm/redhat/foreman-dynflow-sidekiq
Red Hat:satellite_utils:6.12::el8 / foreman-ec2
Package
- Name
- foreman-ec2
- Purl
- pkg:rpm/redhat/foreman-ec2
Red Hat:satellite_utils:6.12::el8 / foreman-gce
Package
- Name
- foreman-gce
- Purl
- pkg:rpm/redhat/foreman-gce
Red Hat:satellite_utils:6.12::el8 / foreman-journald
Package
- Name
- foreman-journald
- Purl
- pkg:rpm/redhat/foreman-journald
Red Hat:satellite_utils:6.12::el8 / foreman-libvirt
Package
- Name
- foreman-libvirt
- Purl
- pkg:rpm/redhat/foreman-libvirt
Red Hat:satellite_utils:6.12::el8 / foreman-openstack
Package
- Name
- foreman-openstack
- Purl
- pkg:rpm/redhat/foreman-openstack
Red Hat:satellite_utils:6.12::el8 / foreman-ovirt
Package
- Name
- foreman-ovirt
- Purl
- pkg:rpm/redhat/foreman-ovirt
Red Hat:satellite_utils:6.12::el8 / foreman-postgresql
Package
- Name
- foreman-postgresql
- Purl
- pkg:rpm/redhat/foreman-postgresql
Red Hat:satellite_utils:6.12::el8 / foreman-service
Package
- Name
- foreman-service
- Purl
- pkg:rpm/redhat/foreman-service
Red Hat:satellite_utils:6.12::el8 / foreman-telemetry
Package
- Name
- foreman-telemetry
- Purl
- pkg:rpm/redhat/foreman-telemetry
Red Hat:satellite_utils:6.12::el8 / foreman-vmware
Package
- Name
- foreman-vmware
- Purl
- pkg:rpm/redhat/foreman-vmware
Red Hat:satellite_utils:6.12::el8 / satellite
Package
- Name
- satellite
- Purl
- pkg:rpm/redhat/satellite
Red Hat:satellite_utils:6.12::el8 / satellite-capsule
Package
- Name
- satellite-capsule
- Purl
- pkg:rpm/redhat/satellite-capsule
Red Hat:satellite_utils:6.12::el8 / satellite-cli
Package
- Name
- satellite-cli
- Purl
- pkg:rpm/redhat/satellite-cli
Red Hat:satellite_utils:6.12::el8 / satellite-common
Package
- Name
- satellite-common
- Purl
- pkg:rpm/redhat/satellite-common
Red Hat:satellite:6.12::el8 / candlepin
Package
- Name
- candlepin
- Purl
- pkg:rpm/redhat/candlepin
Red Hat:satellite:6.12::el8 / candlepin-selinux
Package
- Name
- candlepin-selinux
- Purl
- pkg:rpm/redhat/candlepin-selinux
Red Hat:satellite:6.12::el8 / foreman
Package
- Name
- foreman
- Purl
- pkg:rpm/redhat/foreman
Red Hat:satellite:6.12::el8 / foreman-cli
Package
- Name
- foreman-cli
- Purl
- pkg:rpm/redhat/foreman-cli
Red Hat:satellite:6.12::el8 / foreman-debug
Package
- Name
- foreman-debug
- Purl
- pkg:rpm/redhat/foreman-debug
Red Hat:satellite:6.12::el8 / foreman-dynflow-sidekiq
Package
- Name
- foreman-dynflow-sidekiq
- Purl
- pkg:rpm/redhat/foreman-dynflow-sidekiq
Red Hat:satellite:6.12::el8 / foreman-ec2
Package
- Name
- foreman-ec2
- Purl
- pkg:rpm/redhat/foreman-ec2
Red Hat:satellite:6.12::el8 / foreman-gce
Package
- Name
- foreman-gce
- Purl
- pkg:rpm/redhat/foreman-gce
Red Hat:satellite:6.12::el8 / foreman-journald
Package
- Name
- foreman-journald
- Purl
- pkg:rpm/redhat/foreman-journald
Red Hat:satellite:6.12::el8 / foreman-libvirt
Package
- Name
- foreman-libvirt
- Purl
- pkg:rpm/redhat/foreman-libvirt
Red Hat:satellite:6.12::el8 / foreman-openstack
Package
- Name
- foreman-openstack
- Purl
- pkg:rpm/redhat/foreman-openstack
Red Hat:satellite:6.12::el8 / foreman-ovirt
Package
- Name
- foreman-ovirt
- Purl
- pkg:rpm/redhat/foreman-ovirt
Red Hat:satellite:6.12::el8 / foreman-postgresql
Package
- Name
- foreman-postgresql
- Purl
- pkg:rpm/redhat/foreman-postgresql
Red Hat:satellite:6.12::el8 / foreman-service
Package
- Name
- foreman-service
- Purl
- pkg:rpm/redhat/foreman-service
Red Hat:satellite:6.12::el8 / foreman-telemetry
Package
- Name
- foreman-telemetry
- Purl
- pkg:rpm/redhat/foreman-telemetry
Red Hat:satellite:6.12::el8 / foreman-vmware
Package
- Name
- foreman-vmware
- Purl
- pkg:rpm/redhat/foreman-vmware
Red Hat:satellite:6.12::el8 / python-pulp-container
Package
- Name
- python-pulp-container
- Purl
- pkg:rpm/redhat/python-pulp-container
Red Hat:satellite:6.12::el8 / python-pulp-rpm
Package
- Name
- python-pulp-rpm
- Purl
- pkg:rpm/redhat/python-pulp-rpm
Red Hat:satellite:6.12::el8 / python-pulpcore
Package
- Name
- python-pulpcore
- Purl
- pkg:rpm/redhat/python-pulpcore
Red Hat:satellite:6.12::el8 / python39-pulp-container
Package
- Name
- python39-pulp-container
- Purl
- pkg:rpm/redhat/python39-pulp-container
Red Hat:satellite:6.12::el8 / python39-pulp-rpm
Package
- Name
- python39-pulp-rpm
- Purl
- pkg:rpm/redhat/python39-pulp-rpm
Red Hat:satellite:6.12::el8 / python39-pulpcore
Package
- Name
- python39-pulpcore
- Purl
- pkg:rpm/redhat/python39-pulpcore
Red Hat:satellite:6.12::el8 / rubygem-actioncable
Package
- Name
- rubygem-actioncable
- Purl
- pkg:rpm/redhat/rubygem-actioncable
Red Hat:satellite:6.12::el8 / rubygem-actionmailbox
Package
- Name
- rubygem-actionmailbox
- Purl
- pkg:rpm/redhat/rubygem-actionmailbox
Red Hat:satellite:6.12::el8 / rubygem-actionmailer
Package
- Name
- rubygem-actionmailer
- Purl
- pkg:rpm/redhat/rubygem-actionmailer
Red Hat:satellite:6.12::el8 / rubygem-actionpack
Package
- Name
- rubygem-actionpack
- Purl
- pkg:rpm/redhat/rubygem-actionpack
Red Hat:satellite:6.12::el8 / rubygem-actiontext
Package
- Name
- rubygem-actiontext
- Purl
- pkg:rpm/redhat/rubygem-actiontext
Red Hat:satellite:6.12::el8 / rubygem-actionview
Package
- Name
- rubygem-actionview
- Purl
- pkg:rpm/redhat/rubygem-actionview
Red Hat:satellite:6.12::el8 / rubygem-activejob
Package
- Name
- rubygem-activejob
- Purl
- pkg:rpm/redhat/rubygem-activejob
Red Hat:satellite:6.12::el8 / rubygem-activemodel
Package
- Name
- rubygem-activemodel
- Purl
- pkg:rpm/redhat/rubygem-activemodel
Red Hat:satellite:6.12::el8 / rubygem-activestorage
Package
- Name
- rubygem-activestorage
- Purl
- pkg:rpm/redhat/rubygem-activestorage
Red Hat:satellite:6.12::el8 / rubygem-activesupport
Package
- Name
- rubygem-activesupport
- Purl
- pkg:rpm/redhat/rubygem-activesupport
Red Hat:satellite:6.12::el8 / rubygem-foreman_rh_cloud
Package
- Name
- rubygem-foreman_rh_cloud
- Purl
- pkg:rpm/redhat/rubygem-foreman_rh_cloud
Red Hat:satellite:6.12::el8 / rubygem-foreman_webhooks
Package
- Name
- rubygem-foreman_webhooks
- Purl
- pkg:rpm/redhat/rubygem-foreman_webhooks
Red Hat:satellite:6.12::el8 / rubygem-katello
Package
- Name
- rubygem-katello
- Purl
- pkg:rpm/redhat/rubygem-katello
Red Hat:satellite:6.12::el8 / rubygem-rails
Package
- Name
- rubygem-rails
- Purl
- pkg:rpm/redhat/rubygem-rails
Red Hat:satellite:6.12::el8 / rubygem-railties
Package
- Name
- rubygem-railties
- Purl
- pkg:rpm/redhat/rubygem-railties
Red Hat:satellite:6.12::el8 / rubygem-smart_proxy_container_gateway
Package
- Name
- rubygem-smart_proxy_container_gateway
- Purl
- pkg:rpm/redhat/rubygem-smart_proxy_container_gateway
Red Hat:satellite:6.12::el8 / satellite
Package
- Name
- satellite
- Purl
- pkg:rpm/redhat/satellite
Red Hat:satellite:6.12::el8 / satellite-capsule
Package
- Name
- satellite-capsule
- Purl
- pkg:rpm/redhat/satellite-capsule
Red Hat:satellite:6.12::el8 / satellite-cli
Package
- Name
- satellite-cli
- Purl
- pkg:rpm/redhat/satellite-cli