RHBA-2020:3255
Vulnerability from csaf_redhat - Published: 2020-07-30 20:22 - Updated: 2026-03-13 01:04Summary
Red Hat Bug Fix Advisory: Satellite 6.7.2 Async Bug Fix Update
Severity
Important
Notes
Topic: Updated Satellite 6.7 packages that fix several bugs are now available for Red Hat Satellite.
Details: Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.
This update fixes the following bugs:
1832581 Unable to list/enable EUS repositories on the RHEL clients registered in the satellite server with org_environment contentAccessMode
1839970 New version of the plugin is available: 1.0.7
1851128 Satellite 6.2 Upgrade Fails with error "rake aborted! NoMethodError: undefined method `first' for nil:NilClass" when there are custom bookmarks created
1851130 Satellite may create duplicate CreateRssNotifications tasks after restarting foreman tasks
1851132 candlepin refuses to start or hangs periodically when having too many messages in ActiveMQ journal
1851133 [RFE] Speed up the restore process
1851134 undefined method `split' for nil:NilClass when viewing the host info with hammer
1851136 Error while deleting the content view version.
1851137 While using concurrency_level in remote execution, job progress in WebUI is not being updated properly
1851138 Ldap refresh failed with "Validation failed: Adding would cause a cycle!"
1851140 "foreman-rake katello:publish_unpublished_repositories" is referring to column which no longer exists in katello_repositories table.
1851141 iso upload: correctly check if upload directory exists
1851148 Satellite Receptor Installer role can miss accounts under certain conditions
1851149 Changing a host parameter using "hammer host update" removes assigned Puppet classes
1851151 [RFE] Capsules shouldn't update hosts' "Registered through" facts on the Satellite server in a load-balanced configuration.
1851152 Capsule sync fails when promoting a content view to more than one lifecyle env at the same time
1851154 Unable to update default value of a smart class parameter (Sql query error).
1851157 Slow manifest import and/or refresh
1851158 Configure default MongoDB WiredTiger cache to be 20% of RAM in the Satellite server
1851159 Tasks uses wrong controller name for bookmarks
1851160 Get HTTP error when deploying the virt-who configure plugin
1851163 Improve performance of externalNodes
1854824 satellite-installer --enable-foreman-plugin-inventory-upload still attempts to install old inventory package
1856834 New version of the plugin is available: 1.0.9
1857359 large capsule syncs cause slow processing of dynflow tasks/steps
Users of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the ehcache gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.
8.1 (High)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
Workaround
The following conditions are needed for an exploit, we recommend avoiding all if possible:
* Deserialization from sources you do not control
* `enableDefaultTyping()`
* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`
A flaw was found in FasterXML jackson-databind in versions 2.0.0 through 2.9.10.2. A "gadget" exploit is possible due to a lack of a Java object being blocking from being deserialized. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
0.0 (None)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
0.0 (None)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
0.0 (None)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
0.0 (None)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
A flaw was found in jackson-databind 2.x prior to version 2.9.10.4. The interaction between serialization gadgets and typing is mishandled in the bus-proxy. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
0.0 (None)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
Workaround
The following conditions are needed for an exploit, we recommend avoiding all if possible
* Deserialization from sources you do not control
* `enableDefaultTyping()`
* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality.
0.0 (None)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
Workaround
The following conditions are needed for an exploit, we recommend avoiding all if possible
* Deserialization from sources you do not control
* `enableDefaultTyping()`
* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`
A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
0.0 (None)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
Workaround
The following conditions are needed for an exploit, we recommend avoiding all if possible:
* Deserialization from sources you do not control
* `enableDefaultTyping()`
* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
8.1 (High)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
Workaround
The following conditions are needed for an exploit, we recommend avoiding all if possible:
* Deserialization from sources you do not control
* enableDefaultTyping()
* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS
* oadd.org.apache.xalan.lib.sql.JNDIConnectionPool in classpath
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
8.1 (High)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
Workaround
The following conditions are needed for an exploit, we recommend avoiding all if possible:
* Deserialization from sources you do not control
* enableDefaultTyping()
* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS
* oracle.jms.AQjms*ConnectionFactory in classpath
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
8.1 (High)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
Workaround
The following conditions are needed for an exploit, we recommend avoiding all if possible:
* Deserialization from sources you do not control
* enableDefaultTyping()
* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS
* com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool in classpath
A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
8.1 (High)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts
https://access.redhat.com/errata/RHBA-2020:3255
Workaround
The following conditions are needed for an exploit, we recommend avoiding all if possible:
* Deserialization from sources you do not control
* enableDefaultTyping()
* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS
* org.jsecurity.realm.jndi.JndiRealmFactory in classpath
References
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated Satellite 6.7 packages that fix several bugs are now available for Red Hat Satellite.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.\n\nThis update fixes the following bugs:\n\n1832581 Unable to list/enable EUS repositories on the RHEL clients registered in the satellite server with org_environment contentAccessMode\n1839970 New version of the plugin is available: 1.0.7\n1851128 Satellite 6.2 Upgrade Fails with error \"rake aborted! NoMethodError: undefined method `first\u0027 for nil:NilClass\" when there are custom bookmarks created\n1851130 Satellite may create duplicate CreateRssNotifications tasks after restarting foreman tasks\n1851132 candlepin refuses to start or hangs periodically when having too many messages in ActiveMQ journal\n1851133 [RFE] Speed up the restore process\n1851134 undefined method `split\u0027 for nil:NilClass when viewing the host info with hammer\n1851136 Error while deleting the content view version.\n1851137 While using concurrency_level in remote execution, job progress in WebUI is not being updated properly\n1851138 Ldap refresh failed with \"Validation failed: Adding would cause a cycle!\"\n1851140 \"foreman-rake katello:publish_unpublished_repositories\" is referring to column which no longer exists in katello_repositories table.\n1851141 iso upload: correctly check if upload directory exists\n1851148 Satellite Receptor Installer role can miss accounts under certain conditions\n1851149 Changing a host parameter using \"hammer host update\" removes assigned Puppet classes\n1851151 [RFE] Capsules shouldn\u0027t update hosts\u0027 \"Registered through\" facts on the Satellite server in a load-balanced configuration.\n1851152 Capsule sync fails when promoting a content view to more than one lifecyle env at the same time\n1851154 Unable to update default value of a smart class parameter (Sql query error).\n1851157 Slow manifest import and/or refresh\n1851158 Configure default MongoDB WiredTiger cache to be 20% of RAM in the Satellite server\n1851159 Tasks uses wrong controller name for bookmarks\n1851160 Get HTTP error when deploying the virt-who configure plugin\n1851163 Improve performance of externalNodes\n1854824 satellite-installer --enable-foreman-plugin-inventory-upload still attempts to install old inventory package\n1856834 New version of the plugin is available: 1.0.9\n1857359 large capsule syncs cause slow processing of dynflow tasks/steps\n\nUsers of Red Hat Satellite are advised to upgrade to these updated packages, which fix these bugs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHBA-2020:3255",
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
},
{
"category": "external",
"summary": "1832581",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832581"
},
{
"category": "external",
"summary": "1839970",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1839970"
},
{
"category": "external",
"summary": "1851128",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851128"
},
{
"category": "external",
"summary": "1851130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851130"
},
{
"category": "external",
"summary": "1851132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851132"
},
{
"category": "external",
"summary": "1851133",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851133"
},
{
"category": "external",
"summary": "1851134",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851134"
},
{
"category": "external",
"summary": "1851136",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851136"
},
{
"category": "external",
"summary": "1851137",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851137"
},
{
"category": "external",
"summary": "1851138",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851138"
},
{
"category": "external",
"summary": "1851140",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851140"
},
{
"category": "external",
"summary": "1851141",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851141"
},
{
"category": "external",
"summary": "1851148",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851148"
},
{
"category": "external",
"summary": "1851149",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851149"
},
{
"category": "external",
"summary": "1851151",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851151"
},
{
"category": "external",
"summary": "1851152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851152"
},
{
"category": "external",
"summary": "1851154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851154"
},
{
"category": "external",
"summary": "1851157",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851157"
},
{
"category": "external",
"summary": "1851158",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851158"
},
{
"category": "external",
"summary": "1851159",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851159"
},
{
"category": "external",
"summary": "1851160",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851160"
},
{
"category": "external",
"summary": "1851163",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851163"
},
{
"category": "external",
"summary": "1854824",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1854824"
},
{
"category": "external",
"summary": "1856834",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1856834"
},
{
"category": "external",
"summary": "1857359",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1857359"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_3255.json"
}
],
"title": "Red Hat Bug Fix Advisory: Satellite 6.7.2 Async Bug Fix Update",
"tracking": {
"current_release_date": "2026-03-13T01:04:27+00:00",
"generator": {
"date": "2026-03-13T01:04:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.3"
}
},
"id": "RHBA-2020:3255",
"initial_release_date": "2020-07-30T20:22:52+00:00",
"revision_history": [
{
"date": "2020-07-30T20:22:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2020-07-30T20:22:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-03-13T01:04:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.7",
"product": {
"name": "Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.7::el7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite Capsule 6.7",
"product": {
"name": "Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.7::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "candlepin-0:2.9.28-1.el7sat.noarch",
"product": {
"name": "candlepin-0:2.9.28-1.el7sat.noarch",
"product_id": "candlepin-0:2.9.28-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin@2.9.28-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"product": {
"name": "candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"product_id": "candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin-selinux@2.9.28-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-gce@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ovirt@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-rackspace@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"product": {
"name": "foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"product_id": "foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@1.24.1.24-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"product": {
"name": "foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"product_id": "foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@1.24.1.21-1.el7sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"product": {
"name": "foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"product_id": "foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer-katello@1.24.1.21-1.el7sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"product": {
"name": "pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"product_id": "pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pulp-rpm-admin-extensions@2.21.0.6-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"product": {
"name": "pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"product_id": "pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pulp-rpm-plugins@2.21.0.6-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"product": {
"name": "python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"product_id": "python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-integrity@2.21.0.6-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"product": {
"name": "python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"product_id": "python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-rpm-common@2.21.0.6-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.7.2-1.el7sat.noarch",
"product": {
"name": "satellite-0:6.7.2-1.el7sat.noarch",
"product_id": "satellite-0:6.7.2-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.7.2-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.7.2-1.el7sat.noarch",
"product": {
"name": "satellite-capsule-0:6.7.2-1.el7sat.noarch",
"product_id": "satellite-capsule-0:6.7.2-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.7.2-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.7.2-1.el7sat.noarch",
"product": {
"name": "satellite-cli-0:6.7.2-1.el7sat.noarch",
"product_id": "satellite-cli-0:6.7.2-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.7.2-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.7.2-1.el7sat.noarch",
"product": {
"name": "satellite-common-0:6.7.2-1.el7sat.noarch",
"product_id": "satellite-common-0:6.7.2-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.7.2-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"product": {
"name": "satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"product_id": "satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-debug-tools@6.7.2-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"product": {
"name": "tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"product_id": "tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-fog-vsphere@3.2.1.1-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"product": {
"name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"product_id": "tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-foreman_remote_execution@2.0.10.1-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"product": {
"name": "tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"product_id": "tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-foreman_remote_execution-cockpit@2.0.10.1-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"product": {
"name": "tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"product_id": "tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-foreman-tasks@0.17.5.6-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"product": {
"name": "tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"product_id": "tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-hammer_cli_foreman@0.19.6.5-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"product": {
"name": "tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"product_id": "tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-foreman_rh_cloud@1.0.9-1.el7sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"product": {
"name": "tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"product_id": "tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-katello@3.14.0.25-1.el7sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "candlepin-0:2.9.28-1.el7sat.src",
"product": {
"name": "candlepin-0:2.9.28-1.el7sat.src",
"product_id": "candlepin-0:2.9.28-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/candlepin@2.9.28-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-0:1.24.1.24-1.el7sat.src",
"product": {
"name": "foreman-0:1.24.1.24-1.el7sat.src",
"product_id": "foreman-0:1.24.1.24-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@1.24.1.24-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:1.24.1.21-1.el7sat.src",
"product": {
"name": "foreman-installer-1:1.24.1.21-1.el7sat.src",
"product_id": "foreman-installer-1:1.24.1.21-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@1.24.1.21-1.el7sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "pulp-rpm-0:2.21.0.6-1.el7sat.src",
"product": {
"name": "pulp-rpm-0:2.21.0.6-1.el7sat.src",
"product_id": "pulp-rpm-0:2.21.0.6-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pulp-rpm@2.21.0.6-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.7.2-1.el7sat.src",
"product": {
"name": "satellite-0:6.7.2-1.el7sat.src",
"product_id": "satellite-0:6.7.2-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.7.2-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"product": {
"name": "tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"product_id": "tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-fog-vsphere@3.2.1.1-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"product": {
"name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"product_id": "tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-foreman_remote_execution@2.0.10.1-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"product": {
"name": "tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"product_id": "tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-foreman-tasks@0.17.5.6-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"product": {
"name": "tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"product_id": "tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-hammer_cli_foreman@0.19.6.5-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"product": {
"name": "tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"product_id": "tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-foreman_rh_cloud@1.0.9-1.el7sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src",
"product": {
"name": "tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src",
"product_id": "tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/tfm-rubygem-katello@3.14.0.25-1.el7sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:1.24.1.24-1.el7sat.src as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src"
},
"product_reference": "foreman-0:1.24.1.24-1.el7sat.src",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-gce-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:1.24.1.21-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch"
},
"product_reference": "foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:1.24.1.21-1.el7sat.src as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src"
},
"product_reference": "foreman-installer-1:1.24.1.21-1.el7sat.src",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch"
},
"product_reference": "foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-rackspace-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulp-rpm-0:2.21.0.6-1.el7sat.src as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src"
},
"product_reference": "pulp-rpm-0:2.21.0.6-1.el7sat.src",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch"
},
"product_reference": "pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch"
},
"product_reference": "pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch"
},
"product_reference": "python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch"
},
"product_reference": "python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.7.2-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch"
},
"product_reference": "satellite-0:6.7.2-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.7.2-1.el7sat.src as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src"
},
"product_reference": "satellite-0:6.7.2-1.el7sat.src",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.7.2-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch"
},
"product_reference": "satellite-capsule-0:6.7.2-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.7.2-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch"
},
"product_reference": "satellite-cli-0:6.7.2-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.7.2-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch"
},
"product_reference": "satellite-common-0:6.7.2-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-debug-tools-0:6.7.2-1.el7sat.noarch as a component of Red Hat Satellite Capsule 6.7",
"product_id": "7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch"
},
"product_reference": "satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Capsule67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-0:2.9.28-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch"
},
"product_reference": "candlepin-0:2.9.28-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-0:2.9.28-1.el7sat.src as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src"
},
"product_reference": "candlepin-0:2.9.28-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "candlepin-selinux-0:2.9.28-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch"
},
"product_reference": "candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:1.24.1.24-1.el7sat.src as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src"
},
"product_reference": "foreman-0:1.24.1.24-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-gce-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:1.24.1.21-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch"
},
"product_reference": "foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:1.24.1.21-1.el7sat.src as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src"
},
"product_reference": "foreman-installer-1:1.24.1.21-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch"
},
"product_reference": "foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-rackspace-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:1.24.1.24-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch"
},
"product_reference": "foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulp-rpm-0:2.21.0.6-1.el7sat.src as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src"
},
"product_reference": "pulp-rpm-0:2.21.0.6-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch"
},
"product_reference": "pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch"
},
"product_reference": "pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch"
},
"product_reference": "python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch"
},
"product_reference": "python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.7.2-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch"
},
"product_reference": "satellite-0:6.7.2-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.7.2-1.el7sat.src as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src"
},
"product_reference": "satellite-0:6.7.2-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.7.2-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch"
},
"product_reference": "satellite-capsule-0:6.7.2-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.7.2-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch"
},
"product_reference": "satellite-cli-0:6.7.2-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.7.2-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch"
},
"product_reference": "satellite-common-0:6.7.2-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-debug-tools-0:6.7.2-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch"
},
"product_reference": "satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch"
},
"product_reference": "tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src"
},
"product_reference": "tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch"
},
"product_reference": "tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src"
},
"product_reference": "tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch"
},
"product_reference": "tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src"
},
"product_reference": "tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch"
},
"product_reference": "tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch"
},
"product_reference": "tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src"
},
"product_reference": "tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch"
},
"product_reference": "tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src"
},
"product_reference": "tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch"
},
"product_reference": "tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"relates_to_product_reference": "7Server-Satellite67"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src as a component of Red Hat Satellite 6.7",
"product_id": "7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
},
"product_reference": "tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src",
"relates_to_product_reference": "7Server-Satellite67"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2019-20330",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-01-20T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1793154"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in FasterXML jackson-databind, where it would permit polymorphic deserialization of malicious objects using the ehcache gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: lacks certain net.sf.ehcache blocking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2019-20330"
},
{
"category": "external",
"summary": "RHBZ#1793154",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793154"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2019-20330",
"url": "https://www.cve.org/CVERecord?id=CVE-2019-20330"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20330",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20330"
}
],
"release_date": "2020-01-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
},
{
"category": "workaround",
"details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jackson-databind: lacks certain net.sf.ehcache blocking"
},
{
"cve": "CVE-2020-8840",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-03-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1816330"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in FasterXML jackson-databind in versions 2.0.0 through 2.9.10.2. A \"gadget\" exploit is possible due to a lack of a Java object being blocking from being deserialized. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Lacks certain xbean-reflect/JNDI blocking",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-8840"
},
{
"category": "external",
"summary": "RHBZ#1816330",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816330"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-8840",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-8840"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8840",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8840"
}
],
"release_date": "2020-03-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 0.0,
"baseSeverity": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jackson-databind: Lacks certain xbean-reflect/JNDI blocking"
},
{
"cve": "CVE-2020-9546",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-03-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1816332"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Serialization gadgets in shaded-hikari-config",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-9546"
},
{
"category": "external",
"summary": "RHBZ#1816332",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816332"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-9546",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9546"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-9546",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9546"
}
],
"release_date": "2020-03-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 0.0,
"baseSeverity": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jackson-databind: Serialization gadgets in shaded-hikari-config"
},
{
"cve": "CVE-2020-9547",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-03-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1816337"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Serialization gadgets in ibatis-sqlmap",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-9547"
},
{
"category": "external",
"summary": "RHBZ#1816337",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816337"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-9547",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9547"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-9547",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9547"
}
],
"release_date": "2020-03-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 0.0,
"baseSeverity": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jackson-databind: Serialization gadgets in ibatis-sqlmap"
},
{
"cve": "CVE-2020-9548",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-03-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1816340"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind 2.x. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Serialization gadgets in anteros-core",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-9548"
},
{
"category": "external",
"summary": "RHBZ#1816340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1816340"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-9548",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-9548"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-9548",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-9548"
}
],
"release_date": "2020-03-02T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 0.0,
"baseSeverity": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jackson-databind: Serialization gadgets in anteros-core"
},
{
"cve": "CVE-2020-10968",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-03-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1819208"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind 2.x prior to version 2.9.10.4. The interaction between serialization gadgets and typing is mishandled in the bus-proxy. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-10968"
},
{
"category": "external",
"summary": "RHBZ#1819208",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819208"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-10968",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10968"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10968",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10968"
}
],
"release_date": "2020-03-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
},
{
"category": "workaround",
"details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 0.0,
"baseSeverity": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jackson-databind: Serialization gadgets in org.aoju.bus.proxy.provider.*.RmiProvider"
},
{
"cve": "CVE-2020-10969",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-03-26T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1819212"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Serialization gadgets in javax.swing.JEditorPane",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-10969"
},
{
"category": "external",
"summary": "RHBZ#1819212",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1819212"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-10969",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-10969"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10969",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10969"
}
],
"release_date": "2020-03-03T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
},
{
"category": "workaround",
"details": "The following conditions are needed for an exploit, we recommend avoiding all if possible\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 0.0,
"baseSeverity": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jackson-databind: Serialization gadgets in javax.swing.JEditorPane"
},
{
"cve": "CVE-2020-11619",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-04-08T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1826805"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind 2.x. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Serialization gadgets in org.springframework:spring-aop",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nWhile OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used. We may update the jackson-databind dependency in a future release.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-11619"
},
{
"category": "external",
"summary": "RHBZ#1826805",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826805"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-11619",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-11619"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-11619",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-11619"
}
],
"release_date": "2020-04-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
},
{
"category": "workaround",
"details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* `enableDefaultTyping()`\n* `@JsonTypeInfo using `id.CLASS` or `id.MINIMAL_CLASS`",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 0.0,
"baseSeverity": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jackson-databind: Serialization gadgets in org.springframework:spring-aop"
},
{
"cve": "CVE-2020-14060",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-06-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1848960"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. The interaction between serialization gadgets and typing is mishandled. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 and Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nThe version of jackson-databind as shipped in Red Hat Software Collections rh-maven35 is used only while building maven, thus it does not deserialize data coming from untrusted sources, lowering the impact of the vulnerability for the Product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-14060"
},
{
"category": "external",
"summary": "RHBZ#1848960",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848960"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-14060",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14060"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14060",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14060"
}
],
"release_date": "2020-05-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
},
{
"category": "workaround",
"details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* enableDefaultTyping()\n* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS\n* oadd.org.apache.xalan.lib.sql.JNDIConnectionPool in classpath",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: serialization in oadd.org.apache.xalan.lib.sql.JNDIConnectionPool"
},
{
"cve": "CVE-2020-14061",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-06-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1848966"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: serialization in weblogic/oracle-aqjms",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 and Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nThe version of jackson-databind as shipped in Red Hat Software Collections rh-maven35 is used only while building maven, thus it does not deserialize data coming from untrusted sources, lowering the impact of the vulnerability for the Product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-14061"
},
{
"category": "external",
"summary": "RHBZ#1848966",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848966"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-14061",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14061"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14061",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14061"
}
],
"release_date": "2020-05-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
},
{
"category": "workaround",
"details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* enableDefaultTyping()\n* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS\n* oracle.jms.AQjms*ConnectionFactory in classpath",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jackson-databind: serialization in weblogic/oracle-aqjms"
},
{
"cve": "CVE-2020-14062",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-06-15T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1848962"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 and Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nThe version of jackson-databind as shipped in Red Hat Software Collections rh-maven35 is used only while building maven, thus it does not deserialize data coming from untrusted sources, lowering the impact of the vulnerability for the Product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-14062"
},
{
"category": "external",
"summary": "RHBZ#1848962",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848962"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-14062",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14062"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14062",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14062"
}
],
"release_date": "2020-05-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
},
{
"category": "workaround",
"details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* enableDefaultTyping()\n* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS\n* com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool in classpath",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jackson-databind: serialization in com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool"
},
{
"cve": "CVE-2020-14195",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2020-06-17T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1848958"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.5. FasterXML jackson-databind mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "While OpenShift Container Platform\u0027s elasticsearch plugins do ship the vulnerable component, it doesn\u0027t do any of the unsafe things described in https://access.redhat.com/solutions/3279231. We may update the jackson-databind dependency in a future release.\n\nRed Hat OpenStack Platform ships OpenDaylight, which contains the vulnerable jackson-databind. However, OpenDaylight does not expose jackson-databind in a way that would make it vulnerable, lowering the impact of the vulnerability for OpenDaylight. As such, Red Hat will not be providing a fix for OpenDaylight at this time.\n\nThe PKI module as shipped in Red Hat Enterprise Linux 8 and Red Hat Satellite 6 does not enable polymorphic deserialization which is a required configuration for the vulnerability to be used, lowering the impact of the vulnerability for the Product. We may update the jackson-databind dependency in a future release.\n\nThe version of jackson-databind as shipped in Red Hat Software Collections rh-maven35 is used only while building maven, thus it does not deserialize data coming from untrusted sources, lowering the impact of the vulnerability for the Product.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2020-14195"
},
{
"category": "external",
"summary": "RHBZ#1848958",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1848958"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2020-14195",
"url": "https://www.cve.org/CVERecord?id=CVE-2020-14195"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-14195",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-14195"
}
],
"release_date": "2020-06-14T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2020-07-30T20:22:52+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.7/html/upgrading_and_updating_red_hat_satellite/updating_satellite_server_capsule_server_and_content_hosts",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHBA-2020:3255"
},
{
"category": "workaround",
"details": "The following conditions are needed for an exploit, we recommend avoiding all if possible:\n* Deserialization from sources you do not control\n* enableDefaultTyping()\n* @JsonTypeInfo using id.CLASS or id.MINIMAL_CLASS\n* org.jsecurity.realm.jndi.JndiRealmFactory in classpath",
"product_ids": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Capsule67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Capsule67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Capsule67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Capsule67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Capsule67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Capsule67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:candlepin-0:2.9.28-1.el7sat.src",
"7Server-Satellite67:candlepin-selinux-0:2.9.28-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-0:1.24.1.24-1.el7sat.src",
"7Server-Satellite67:foreman-cli-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-debug-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ec2-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-gce-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-installer-1:1.24.1.21-1.el7sat.src",
"7Server-Satellite67:foreman-installer-katello-1:1.24.1.21-1.el7sat.noarch",
"7Server-Satellite67:foreman-journald-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-libvirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-openstack-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-ovirt-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-postgresql-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-rackspace-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-telemetry-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:foreman-vmware-0:1.24.1.24-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-0:2.21.0.6-1.el7sat.src",
"7Server-Satellite67:pulp-rpm-admin-extensions-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:pulp-rpm-plugins-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-integrity-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:python-pulp-rpm-common-0:2.21.0.6-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-0:6.7.2-1.el7sat.src",
"7Server-Satellite67:satellite-capsule-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-cli-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-common-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:satellite-debug-tools-0:6.7.2-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-fog-vsphere-0:3.2.1.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman-tasks-0:0.17.5.6-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-0:2.0.10.1-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-foreman_remote_execution-cockpit-0:2.0.10.1-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-foreman_rh_cloud-0:1.0.9-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-hammer_cli_foreman-0:0.19.6.5-1.el7sat.src",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.noarch",
"7Server-Satellite67:tfm-rubygem-katello-0:3.14.0.25-1.el7sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "jackson-databind: serialization in org.jsecurity.realm.jndi.JndiRealmFactory"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…