rhsa-2024_7987
Vulnerability from csaf_redhat
Published
2024-10-10 20:31
Modified
2024-11-06 07:13
Summary
Red Hat Security Advisory: Satellite 6.15.4 Security Update
Notes
Topic
An update is now available for Red Hat Satellite 6.15 for RHEL 8.
Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from the
CVE link(s) in the References section.
Details
Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.
Security Fix(es):
* python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers (CVE-2024-1135)
* golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)
* python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override (CVE-2024-26130)
* python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget (CVE-2024-41991)
Users of Red Hat Satellite are advised to upgrade to these updated
packages, which fix these bugs.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for Red Hat Satellite 6.15 for RHEL 8.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from the\nCVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\nSecurity Fix(es):\n\n* python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers (CVE-2024-1135)\n* golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses (CVE-2024-24790)\n* python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override (CVE-2024-26130)\n* python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget (CVE-2024-41991)\n\nUsers of Red Hat Satellite are advised to upgrade to these updated\npackages, which fix these bugs.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:7987",
"url": "https://access.redhat.com/errata/RHSA-2024:7987"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index"
},
{
"category": "external",
"summary": "2269617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269617"
},
{
"category": "external",
"summary": "2275280",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2275280"
},
{
"category": "external",
"summary": "2292787",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292787"
},
{
"category": "external",
"summary": "2302435",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302435"
},
{
"category": "external",
"summary": "SAT-25848",
"url": "https://issues.redhat.com/browse/SAT-25848"
},
{
"category": "external",
"summary": "SAT-27294",
"url": "https://issues.redhat.com/browse/SAT-27294"
},
{
"category": "external",
"summary": "SAT-27295",
"url": "https://issues.redhat.com/browse/SAT-27295"
},
{
"category": "external",
"summary": "SAT-27296",
"url": "https://issues.redhat.com/browse/SAT-27296"
},
{
"category": "external",
"summary": "SAT-27299",
"url": "https://issues.redhat.com/browse/SAT-27299"
},
{
"category": "external",
"summary": "SAT-27950",
"url": "https://issues.redhat.com/browse/SAT-27950"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7987.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.15.4 Security Update",
"tracking": {
"current_release_date": "2024-11-06T07:13:35+00:00",
"generator": {
"date": "2024-11-06T07:13:35+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.1.1"
}
},
"id": "RHSA-2024:7987",
"initial_release_date": "2024-10-10T20:31:33+00:00",
"revision_history": [
{
"date": "2024-10-10T20:31:33+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-10-10T20:31:33+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-11-06T07:13:35+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.15::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.15::el8"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product": {
"name": "Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.15::el8"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-0:3.9.1.10-1.el8sat.src",
"product": {
"name": "foreman-0:3.9.1.10-1.el8sat.src",
"product_id": "foreman-0:3.9.1.10-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.9.1.10-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.9.3.5-1.el8sat.src",
"product": {
"name": "foreman-installer-1:3.9.3.5-1.el8sat.src",
"product_id": "foreman-installer-1:3.9.3.5-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.9.3.5-1.el8sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python-cryptography-0:42.0.8-1.el8pc.src",
"product": {
"name": "python-cryptography-0:42.0.8-1.el8pc.src",
"product_id": "python-cryptography-0:42.0.8-1.el8pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-cryptography@42.0.8-1.el8pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-django-0:4.2.15-1.el8pc.src",
"product": {
"name": "python-django-0:4.2.15-1.el8pc.src",
"product_id": "python-django-0:4.2.15-1.el8pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-django@4.2.15-1.el8pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-gunicorn-0:22.0.0-1.el8pc.src",
"product": {
"name": "python-gunicorn-0:22.0.0-1.el8pc.src",
"product_id": "python-gunicorn-0:22.0.0-1.el8pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-gunicorn@22.0.0-1.el8pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulp-certguard-0:1.7.2-1.el8pc.src",
"product": {
"name": "python-pulp-certguard-0:1.7.2-1.el8pc.src",
"product_id": "python-pulp-certguard-0:1.7.2-1.el8pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-certguard@1.7.2-1.el8pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulpcore-0:3.39.21-1.el8pc.src",
"product": {
"name": "python-pulpcore-0:3.39.21-1.el8pc.src",
"product_id": "python-pulpcore-0:3.39.21-1.el8pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulpcore@3.39.21-1.el8pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"product": {
"name": "python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"product_id": "python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pyOpenSSL@24.1.0-1.el8pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"product": {
"name": "rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"product_id": "rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@9.0.58-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"product": {
"name": "rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"product_id": "rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_theme_satellite@13.3.0-0.1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"product": {
"name": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"product_id": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-hammer_cli_foreman_tasks@0.0.21-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.11.0.17-1.el8sat.src",
"product": {
"name": "rubygem-katello-0:4.11.0.17-1.el8sat.src",
"product_id": "rubygem-katello-0:4.11.0.17-1.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.11.0.17-1.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.15.4-2.el8sat.src",
"product": {
"name": "satellite-0:6.15.4-2.el8sat.src",
"product_id": "satellite-0:6.15.4-2.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.15.4-2.el8sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"product": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"product_id": "yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-2.el8sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ovirt@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-pcp@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-redis@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-service-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-service-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-service-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-service@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"product": {
"name": "foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"product_id": "foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@3.9.1.10-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"product": {
"name": "foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"product_id": "foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.9.3.5-1.el8sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"product": {
"name": "foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"product_id": "foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer-katello@3.9.3.5-1.el8sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.11-django-0:4.2.15-1.el8pc.noarch",
"product": {
"name": "python3.11-django-0:4.2.15-1.el8pc.noarch",
"product_id": "python3.11-django-0:4.2.15-1.el8pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-django@4.2.15-1.el8pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"product": {
"name": "python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"product_id": "python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-gunicorn@22.0.0-1.el8pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"product": {
"name": "python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"product_id": "python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-pulp-certguard@1.7.2-1.el8pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"product": {
"name": "python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"product_id": "python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-pulpcore@3.39.21-1.el8pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"product": {
"name": "python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"product_id": "python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-pyOpenSSL@24.1.0-1.el8pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"product": {
"name": "rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"product_id": "rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@9.0.58-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"product": {
"name": "rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"product_id": "rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_theme_satellite@13.3.0-0.1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"product": {
"name": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"product_id": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-hammer_cli_foreman_tasks@0.0.21-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"product": {
"name": "rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"product_id": "rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.11.0.17-1.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.15.4-2.el8sat.noarch",
"product": {
"name": "satellite-0:6.15.4-2.el8sat.noarch",
"product_id": "satellite-0:6.15.4-2.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.15.4-2.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.15.4-2.el8sat.noarch",
"product": {
"name": "satellite-cli-0:6.15.4-2.el8sat.noarch",
"product_id": "satellite-cli-0:6.15.4-2.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.15.4-2.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.15.4-2.el8sat.noarch",
"product": {
"name": "satellite-common-0:6.15.4-2.el8sat.noarch",
"product_id": "satellite-common-0:6.15.4-2.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.15.4-2.el8sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.15.4-2.el8sat.noarch",
"product": {
"name": "satellite-capsule-0:6.15.4-2.el8sat.noarch",
"product_id": "satellite-capsule-0:6.15.4-2.el8sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.15.4-2.el8sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"product": {
"name": "python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"product_id": "python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-cryptography@42.0.8-1.el8pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"product": {
"name": "python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"product_id": "python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-cryptography-debugsource@42.0.8-1.el8pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"product": {
"name": "python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"product_id": "python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-cryptography-debuginfo@42.0.8-1.el8pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64",
"product": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64",
"product_id": "yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-2.el8sat?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.10-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src"
},
"product_reference": "foreman-0:3.9.1.10-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch"
},
"product_reference": "foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.5-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src"
},
"product_reference": "foreman-installer-1:3.9.3.5-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-service-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cryptography-0:42.0.8-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src"
},
"product_reference": "python-cryptography-0:42.0.8-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64 as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64"
},
"product_reference": "python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-django-0:4.2.15-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src"
},
"product_reference": "python-django-0:4.2.15-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gunicorn-0:22.0.0-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src"
},
"product_reference": "python-gunicorn-0:22.0.0-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-certguard-0:1.7.2-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src"
},
"product_reference": "python-pulp-certguard-0:1.7.2-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulpcore-0:3.39.21-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src"
},
"product_reference": "python-pulpcore-0:3.39.21-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyOpenSSL-0:24.1.0-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src"
},
"product_reference": "python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-cryptography-0:42.0.8-1.el8pc.x86_64 as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64"
},
"product_reference": "python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64 as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64"
},
"product_reference": "python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-django-0:4.2.15-1.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch"
},
"product_reference": "python3.11-django-0:4.2.15-1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-gunicorn-0:22.0.0-1.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch"
},
"product_reference": "python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch"
},
"product_reference": "python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulpcore-0:3.39.21-1.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch"
},
"product_reference": "python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch"
},
"product_reference": "python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.4-2.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src"
},
"product_reference": "satellite-0:6.15.4-2.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-capsule-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-cli-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-common-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.10-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src"
},
"product_reference": "foreman-0:3.9.1.10-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-service-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch"
},
"product_reference": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src"
},
"product_reference": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.4-2.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src"
},
"product_reference": "satellite-0:6.15.4-2.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-capsule-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-cli-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-common-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.9.1.10-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src"
},
"product_reference": "foreman-0:3.9.1.10-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch"
},
"product_reference": "foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.9.3.5-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src"
},
"product_reference": "foreman-installer-1:3.9.3.5-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-service-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.9.1.10-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch"
},
"product_reference": "foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cryptography-0:42.0.8-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src"
},
"product_reference": "python-cryptography-0:42.0.8-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64 as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64"
},
"product_reference": "python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-django-0:4.2.15-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src"
},
"product_reference": "python-django-0:4.2.15-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-gunicorn-0:22.0.0-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src"
},
"product_reference": "python-gunicorn-0:22.0.0-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-certguard-0:1.7.2-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src"
},
"product_reference": "python-pulp-certguard-0:1.7.2-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulpcore-0:3.39.21-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src"
},
"product_reference": "python-pulpcore-0:3.39.21-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pyOpenSSL-0:24.1.0-1.el8pc.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src"
},
"product_reference": "python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-cryptography-0:42.0.8-1.el8pc.x86_64 as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64"
},
"product_reference": "python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64 as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64"
},
"product_reference": "python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-django-0:4.2.15-1.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch"
},
"product_reference": "python3.11-django-0:4.2.15-1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-gunicorn-0:22.0.0-1.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch"
},
"product_reference": "python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch"
},
"product_reference": "python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulpcore-0:3.39.21-1.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch"
},
"product_reference": "python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch"
},
"product_reference": "python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch"
},
"product_reference": "rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src"
},
"product_reference": "rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch"
},
"product_reference": "rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src"
},
"product_reference": "rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch"
},
"product_reference": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src"
},
"product_reference": "rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.11.0.17-1.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch"
},
"product_reference": "rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.11.0.17-1.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src"
},
"product_reference": "rubygem-katello-0:4.11.0.17-1.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.15.4-2.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src"
},
"product_reference": "satellite-0:6.15.4-2.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-capsule-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-cli-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.15.4-2.el8sat.noarch as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch"
},
"product_reference": "satellite-common-0:6.15.4-2.el8sat.noarch",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src"
},
"product_reference": "yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"relates_to_product_reference": "8Base-satellite-6.15"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64 as a component of Red Hat Satellite 6.15 for RHEL 8",
"product_id": "8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
},
"product_reference": "yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64",
"relates_to_product_reference": "8Base-satellite-6.15"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-1135",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2024-04-16T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2275280"
}
],
"notes": [
{
"category": "description",
"text": "An HTTP Request Smuggling vulnerability was found in Gunicorn. By crafting requests with conflicting Transfer-Encoding headers, attackers can bypass security restrictions and access restricted endpoints. This issue is due to Gunicorn\u0027s handling of Transfer-Encoding headers, where it incorrectly processes requests with multiple, conflicting Transfer-Encoding headers, treating them as chunked regardless of the final encoding specified. This vulnerability allows for a range of attacks, including cache poisoning, session manipulation, and data exposure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-1135"
},
{
"category": "external",
"summary": "RHBZ#2275280",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2275280"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-1135",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-1135"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-1135",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1135"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-w3h3-4rj7-4ph4",
"url": "https://github.com/advisories/GHSA-w3h3-4rj7-4ph4"
},
{
"category": "external",
"summary": "https://github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d",
"url": "https://github.com/benoitc/gunicorn/commit/ac29c9b0a758d21f1e0fb3b3457239e523fa9f1d"
},
{
"category": "external",
"summary": "https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1",
"url": "https://huntr.com/bounties/22158e34-cfd5-41ad-97e0-a780773d96c1"
}
],
"release_date": "2024-04-15T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-10T20:31:33+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:7987"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.0"
},
"products": [
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers"
},
{
"cve": "CVE-2024-24790",
"cwe": {
"id": "CWE-115",
"name": "Misinterpretation of Input"
},
"discovery_date": "2024-06-17T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2292787"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go language standard library net/netip. The method Is*() (IsPrivate(), IsPublic(), etc) doesn\u0027t behave properly when working with IPv6 mapped to IPv4 addresses. The unexpected behavior can lead to integrity and confidentiality issues, specifically when these methods are used to control access to resources or data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This CVE has been marked as moderate as for our products a network-based attack vector is simply impossible when it comes to golang code,apart from that as per CVE flaw analysis reported by golang, this only affects integrity and confidentiality and has no effect on availability, hence CVSS has been marked as such.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-24790"
},
{
"category": "external",
"summary": "RHBZ#2292787",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292787"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-24790",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-24790"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-24790",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24790"
}
],
"release_date": "2024-06-04T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-10T20:31:33+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:7987"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses"
},
{
"cve": "CVE-2024-26130",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2024-03-14T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2269617"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was discovered in python-cryptography. A NULL pointer dereference can be triggered when a PKCS#12 key and certificate do not match. Specifically, if the pkcs12.serialize_key_and_certificates function is called with a non-matching certificate and private key and an encryption algorithm with hmac_hash set, the Python process may crash, leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The vulnerability in python-cryptography that leads to a NULL pointer dereference during the pkcs12.serialize_key_and_certificates function execution is classified as a moderate severity issue. While the vulnerability can result in a denial-of-service (DoS) by crashing the Python process, it requires specific conditions to trigger: a mismatch between the provided certificate\u0027s public key and private key, coupled with the use of an encryption algorithm with hmac_hash set.\n\nThe exploitation of this vulnerability does not directly lead to arbitrary code execution or data leakage. Instead, it causes a controlled termination of the Python process, which, although disruptive, is not as critical as other vulnerabilities that can lead to unauthorized access, data corruption, or code injection. However, it\u0027s important to note that denial-of-service conditions can still have operational impacts, disrupting services or causing system instability.\n\nThis issue does not affect Red Hat Enterprise Linux 6, 7, 8 and 9 as we dont ship the vulnerable code and package version.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-26130"
},
{
"category": "external",
"summary": "RHBZ#2269617",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2269617"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-26130",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26130"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-26130",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26130"
}
],
"release_date": "2024-02-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-10T20:31:33+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:7987"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override"
},
{
"cve": "CVE-2024-41991",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2024-08-02T02:03:22+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2302435"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Django. \u0027urlize\u0027, \u0027urlizetrunc\u0027, and \u0027AdminURLFieldWidget\u0027 may be subject to a denial of service attack via certain inputs with a very large number of Unicode characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The identified vulnerability in Django\u0027s urlize, urlizetrunc template filters, and the AdminURLFieldWidget widget is classified as moderate severity rather than important due to its specific attack vector and impact. While the flaw allows for a potential denial-of-service (DoS) attack via inputs with a large number of Unicode characters, exploiting this vulnerability requires a significant volume of data to be processed by these components, which is a non-trivial task. Additionally, standard mitigation measures such as input validation, rate limiting, and monitoring can effectively reduce the risk.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch"
],
"known_not_affected": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-41991"
},
{
"category": "external",
"summary": "RHBZ#2302435",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2302435"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-41991",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-41991"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-41991",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41991"
},
{
"category": "external",
"summary": "https://www.djangoproject.com/weblog/2024/aug/06/security-releases/",
"url": "https://www.djangoproject.com/weblog/2024/aug/06/security-releases/"
}
],
"release_date": "2024-08-06T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-10-10T20:31:33+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"product_ids": [
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:7987"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15-capsule:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-capsule:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15-capsule:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-capsule:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-capsule:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15-utils:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15-utils:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15-utils:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15-utils:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-0:3.9.1.10-1.el8sat.src",
"8Base-satellite-6.15:foreman-cli-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-debug-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-dynflow-sidekiq-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ec2-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-installer-1:3.9.3.5-1.el8sat.src",
"8Base-satellite-6.15:foreman-installer-katello-1:3.9.3.5-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-journald-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-libvirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-openstack-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-ovirt-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-pcp-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-postgresql-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-redis-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-service-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-telemetry-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:foreman-vmware-0:3.9.1.10-1.el8sat.noarch",
"8Base-satellite-6.15:python-cryptography-0:42.0.8-1.el8pc.src",
"8Base-satellite-6.15:python-cryptography-debugsource-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python-gunicorn-0:22.0.0-1.el8pc.src",
"8Base-satellite-6.15:python-pulp-certguard-0:1.7.2-1.el8pc.src",
"8Base-satellite-6.15:python-pulpcore-0:3.39.21-1.el8pc.src",
"8Base-satellite-6.15:python-pyOpenSSL-0:24.1.0-1.el8pc.src",
"8Base-satellite-6.15:python3.11-cryptography-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-cryptography-debuginfo-0:42.0.8-1.el8pc.x86_64",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-gunicorn-0:22.0.0-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulp-certguard-0:1.7.2-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pulpcore-0:3.39.21-1.el8pc.noarch",
"8Base-satellite-6.15:python3.11-pyOpenSSL-0:24.1.0-1.el8pc.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_rh_cloud-0:9.0.58-1.el8sat.src",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-foreman_theme_satellite-0:13.3.0-0.1.el8sat.src",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-hammer_cli_foreman_tasks-0:0.0.21-1.el8sat.src",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.noarch",
"8Base-satellite-6.15:rubygem-katello-0:4.11.0.17-1.el8sat.src",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-0:6.15.4-2.el8sat.src",
"8Base-satellite-6.15:satellite-capsule-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-cli-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:satellite-common-0:6.15.4-2.el8sat.noarch",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.src",
"8Base-satellite-6.15:yggdrasil-worker-forwarder-0:0.0.3-2.el8sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"8Base-satellite-6.15-capsule:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15-capsule:python3.11-django-0:4.2.15-1.el8pc.noarch",
"8Base-satellite-6.15:python-django-0:4.2.15-1.el8pc.src",
"8Base-satellite-6.15:python3.11-django-0:4.2.15-1.el8pc.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "python-django: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget"
}
]
}
Loading...
Loading...
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.