The following advisory data is extracted from:

https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_2010.json

Red Hat officially shut down their mailing list notifications October 10, 2023.  Due to this, Packet Storm has recreated the below data as a reference point to raise awareness.  It must be noted that due to an inability to easily track revision updates without crawling Red Hat's archive, these advisories are single notifications and we strongly suggest that you visit the Red Hat provided links to ensure you have the latest information available if the subject matter listed pertains to your environment.

- Packet Storm Staff




====================================================================
Red Hat Security Advisory

Synopsis:           Important: Satellite 6.15.0 release
Advisory ID:        RHSA-2024:2010-03
Product:            Red Hat Satellite 6
Advisory URL:       https://access.redhat.com/errata/RHSA-2024:2010
Issue date:         2024-04-23
Revision:           03
CVE Names:          CVE-2022-40896
====================================================================

Summary: 

An update is now available for Red Hat Satellite 6.15. The release contains a
new version of Satellite and important security fixes for various components.

Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.




Description:

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Security fixes:
* python-pygments: ReDoS in pygments (CVE-2022-40896)
* python-pycryptodomex: Side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323)
* satellite: Arithmetic overflow in satellite (CVE-2023-4320)
* automation-hub: Ansible Automation Hub: insecure galaxy-importer tarfile extraction (CVE-2023-5189)
* jetty: Improper addition of quotation marks to user inputs in CgiServlet (CVE-2023-36479)
* python-aiohttp: HTTP request smuggling via llhttp HTTP request parser (CVE-2023-37276)
* rubygem-activesupport: File Disclosure of Locally Encrypted Files (CVE-2023-38037)
* jetty: Improper validation of HTTP/1 content-length (CVE-2023-40167)
* python-django: Potential denial of service vulnerability in `django.utils.encoding.uri_to_iri()` (CVE-2023-41164)
* python-django: Denial-of-service possibility in django.utils.text.Truncator (CVE-2023-43665)
* python-aiohttp: Numerous issues in HTTP parser with header parsing (CVE-2023-47627)
* python-aiohttp: HTTP request modification (CVE-2023-49081)
* python-aiohttp: CRLF injection if user controls the HTTP method using aiohttp client (CVE-2023-49082)
* rubygem-puma: HTTP request smuggling when parsing chunked Transfer-Encoding Bodies (CVE-2024-21647)
* rubygem-audited: Race condition can lead to audit logs being incorrectly attributed to the wrong user (CVE-2024-22047)
* python-jinja2: HTML attribute injection when passing user input as keys to xmlattr filter (CVE-2024-22195)
* python-aiohttp: Follow_symlinks directory traversal vulnerability (CVE-2024-23334)
* python-aiohttp: HTTP request smuggling (CVE-2024-23829)

Additional Changes:
This update also fixes several bugs and adds various enhancements.

Documentation for these changes is available from the Release Notes document linked to in the References section.


Solution:



CVEs:

CVE-2022-40896

References:

https://access.redhat.com/security/updates/classification/#important
https://bugzilla.redhat.com/show_bug.cgi?id=1393613
https://bugzilla.redhat.com/show_bug.cgi?id=1792187
https://bugzilla.redhat.com/show_bug.cgi?id=1884395
https://bugzilla.redhat.com/show_bug.cgi?id=1937203
https://bugzilla.redhat.com/show_bug.cgi?id=1943306
https://bugzilla.redhat.com/show_bug.cgi?id=1964539
https://bugzilla.redhat.com/show_bug.cgi?id=1967073
https://bugzilla.redhat.com/show_bug.cgi?id=1976178
https://bugzilla.redhat.com/show_bug.cgi?id=1976213
https://bugzilla.redhat.com/show_bug.cgi?id=1992495
https://bugzilla.redhat.com/show_bug.cgi?id=1993917
https://bugzilla.redhat.com/show_bug.cgi?id=1994654
https://bugzilla.redhat.com/show_bug.cgi?id=2015344
https://bugzilla.redhat.com/show_bug.cgi?id=2026701
https://bugzilla.redhat.com/show_bug.cgi?id=2044527
https://bugzilla.redhat.com/show_bug.cgi?id=2048805
https://bugzilla.redhat.com/show_bug.cgi?id=2053416
https://bugzilla.redhat.com/show_bug.cgi?id=2063218
https://bugzilla.redhat.com/show_bug.cgi?id=2063717
https://bugzilla.redhat.com/show_bug.cgi?id=2068263
https://bugzilla.redhat.com/show_bug.cgi?id=2068527
https://bugzilla.redhat.com/show_bug.cgi?id=2070487
https://bugzilla.redhat.com/show_bug.cgi?id=2071097
https://bugzilla.redhat.com/show_bug.cgi?id=2081244
https://bugzilla.redhat.com/show_bug.cgi?id=2087537
https://bugzilla.redhat.com/show_bug.cgi?id=2091900
https://bugzilla.redhat.com/show_bug.cgi?id=2096930
https://bugzilla.redhat.com/show_bug.cgi?id=2097084
https://bugzilla.redhat.com/show_bug.cgi?id=2103757
https://bugzilla.redhat.com/show_bug.cgi?id=2104582
https://bugzilla.redhat.com/show_bug.cgi?id=2106256
https://bugzilla.redhat.com/show_bug.cgi?id=2108725
https://bugzilla.redhat.com/show_bug.cgi?id=2109740
https://bugzilla.redhat.com/show_bug.cgi?id=2121957
https://bugzilla.redhat.com/show_bug.cgi?id=2124275
https://bugzilla.redhat.com/show_bug.cgi?id=2125367
https://bugzilla.redhat.com/show_bug.cgi?id=2125728
https://bugzilla.redhat.com/show_bug.cgi?id=2125809
https://bugzilla.redhat.com/show_bug.cgi?id=2126357
https://bugzilla.redhat.com/show_bug.cgi?id=2126420
https://bugzilla.redhat.com/show_bug.cgi?id=2129296
https://bugzilla.redhat.com/show_bug.cgi?id=2131798
https://bugzilla.redhat.com/show_bug.cgi?id=2138905
https://bugzilla.redhat.com/show_bug.cgi?id=2139834
https://bugzilla.redhat.com/show_bug.cgi?id=2141421
https://bugzilla.redhat.com/show_bug.cgi?id=2143980
https://bugzilla.redhat.com/show_bug.cgi?id=2144615
https://bugzilla.redhat.com/show_bug.cgi?id=2148439
https://bugzilla.redhat.com/show_bug.cgi?id=2148534
https://bugzilla.redhat.com/show_bug.cgi?id=2149288
https://bugzilla.redhat.com/show_bug.cgi?id=2152709
https://bugzilla.redhat.com/show_bug.cgi?id=2153523
https://bugzilla.redhat.com/show_bug.cgi?id=2153548
https://bugzilla.redhat.com/show_bug.cgi?id=2155083
https://bugzilla.redhat.com/show_bug.cgi?id=2155218
https://bugzilla.redhat.com/show_bug.cgi?id=2155444
https://bugzilla.redhat.com/show_bug.cgi?id=2158524
https://bugzilla.redhat.com/show_bug.cgi?id=2158959
https://bugzilla.redhat.com/show_bug.cgi?id=2159706
https://bugzilla.redhat.com/show_bug.cgi?id=2160160
https://bugzilla.redhat.com/show_bug.cgi?id=2162637
https://bugzilla.redhat.com/show_bug.cgi?id=2162882
https://bugzilla.redhat.com/show_bug.cgi?id=2164844
https://bugzilla.redhat.com/show_bug.cgi?id=2164856
https://bugzilla.redhat.com/show_bug.cgi?id=2164997
https://bugzilla.redhat.com/show_bug.cgi?id=2165012
https://bugzilla.redhat.com/show_bug.cgi?id=2165092
https://bugzilla.redhat.com/show_bug.cgi?id=2166428
https://bugzilla.redhat.com/show_bug.cgi?id=2167493
https://bugzilla.redhat.com/show_bug.cgi?id=2168013
https://bugzilla.redhat.com/show_bug.cgi?id=2168152
https://bugzilla.redhat.com/show_bug.cgi?id=2168173
https://bugzilla.redhat.com/show_bug.cgi?id=2168202
https://bugzilla.redhat.com/show_bug.cgi?id=2168503
https://bugzilla.redhat.com/show_bug.cgi?id=2168728
https://bugzilla.redhat.com/show_bug.cgi?id=2168866
https://bugzilla.redhat.com/show_bug.cgi?id=2170016
https://bugzilla.redhat.com/show_bug.cgi?id=2170448
https://bugzilla.redhat.com/show_bug.cgi?id=2170727
https://bugzilla.redhat.com/show_bug.cgi?id=2172083
https://bugzilla.redhat.com/show_bug.cgi?id=2172094
https://bugzilla.redhat.com/show_bug.cgi?id=2172379
https://bugzilla.redhat.com/show_bug.cgi?id=2172384
https://bugzilla.redhat.com/show_bug.cgi?id=2172393
https://bugzilla.redhat.com/show_bug.cgi?id=2172394
https://bugzilla.redhat.com/show_bug.cgi?id=2172756
https://bugzilla.redhat.com/show_bug.cgi?id=2173870
https://bugzilla.redhat.com/show_bug.cgi?id=2175132
https://bugzilla.redhat.com/show_bug.cgi?id=2179974
https://bugzilla.redhat.com/show_bug.cgi?id=2180568
https://bugzilla.redhat.com/show_bug.cgi?id=2180761
https://bugzilla.redhat.com/show_bug.cgi?id=2181595
https://bugzilla.redhat.com/show_bug.cgi?id=2181991
https://bugzilla.redhat.com/show_bug.cgi?id=2184151
https://bugzilla.redhat.com/show_bug.cgi?id=2188287
https://bugzilla.redhat.com/show_bug.cgi?id=2189318
https://bugzilla.redhat.com/show_bug.cgi?id=2189687
https://bugzilla.redhat.com/show_bug.cgi?id=2192939
https://bugzilla.redhat.com/show_bug.cgi?id=2193010
https://bugzilla.redhat.com/show_bug.cgi?id=2203077
https://bugzilla.redhat.com/show_bug.cgi?id=2208310
https://bugzilla.redhat.com/show_bug.cgi?id=2208557
https://bugzilla.redhat.com/show_bug.cgi?id=2208588
https://bugzilla.redhat.com/show_bug.cgi?id=2209968
https://bugzilla.redhat.com/show_bug.cgi?id=2212499
https://bugzilla.redhat.com/show_bug.cgi?id=2213163
https://bugzilla.redhat.com/show_bug.cgi?id=2214285
https://bugzilla.redhat.com/show_bug.cgi?id=2214331
https://bugzilla.redhat.com/show_bug.cgi?id=2215050
https://bugzilla.redhat.com/show_bug.cgi?id=2215310
https://bugzilla.redhat.com/show_bug.cgi?id=2216006
https://bugzilla.redhat.com/show_bug.cgi?id=2216017
https://bugzilla.redhat.com/show_bug.cgi?id=2216158
https://bugzilla.redhat.com/show_bug.cgi?id=2216533
https://bugzilla.redhat.com/show_bug.cgi?id=2217397
https://bugzilla.redhat.com/show_bug.cgi?id=2218179
https://bugzilla.redhat.com/show_bug.cgi?id=2218278
https://bugzilla.redhat.com/show_bug.cgi?id=2218821
https://bugzilla.redhat.com/show_bug.cgi?id=2221673
https://bugzilla.redhat.com/show_bug.cgi?id=2222725
https://bugzilla.redhat.com/show_bug.cgi?id=2222816
https://bugzilla.redhat.com/show_bug.cgi?id=2222968
https://bugzilla.redhat.com/show_bug.cgi?id=2223567
https://bugzilla.redhat.com/show_bug.cgi?id=2224122
https://bugzilla.redhat.com/show_bug.cgi?id=2224170
https://bugzilla.redhat.com/show_bug.cgi?id=2224185
https://bugzilla.redhat.com/show_bug.cgi?id=2224719
https://bugzilla.redhat.com/show_bug.cgi?id=2225534
https://bugzilla.redhat.com/show_bug.cgi?id=2226714
https://bugzilla.redhat.com/show_bug.cgi?id=2227753
https://bugzilla.redhat.com/show_bug.cgi?id=2229095
https://bugzilla.redhat.com/show_bug.cgi?id=2229810
https://bugzilla.redhat.com/show_bug.cgi?id=2230237
https://bugzilla.redhat.com/show_bug.cgi?id=2230459
https://bugzilla.redhat.com/show_bug.cgi?id=2231814
https://bugzilla.redhat.com/show_bug.cgi?id=2232500
https://bugzilla.redhat.com/show_bug.cgi?id=2232625
https://bugzilla.redhat.com/show_bug.cgi?id=2233162
https://bugzilla.redhat.com/show_bug.cgi?id=2233490
https://bugzilla.redhat.com/show_bug.cgi?id=2234387
https://bugzilla.redhat.com/show_bug.cgi?id=2234467
https://bugzilla.redhat.com/show_bug.cgi?id=2236261
https://bugzilla.redhat.com/show_bug.cgi?id=2236418
https://bugzilla.redhat.com/show_bug.cgi?id=2236502
https://bugzilla.redhat.com/show_bug.cgi?id=2236693
https://bugzilla.redhat.com/show_bug.cgi?id=2236806
https://bugzilla.redhat.com/show_bug.cgi?id=2237258
https://bugzilla.redhat.com/show_bug.cgi?id=2238325
https://bugzilla.redhat.com/show_bug.cgi?id=2238906
https://bugzilla.redhat.com/show_bug.cgi?id=2238952
https://bugzilla.redhat.com/show_bug.cgi?id=2239549
https://bugzilla.redhat.com/show_bug.cgi?id=2239630
https://bugzilla.redhat.com/show_bug.cgi?id=2239634
https://bugzilla.redhat.com/show_bug.cgi?id=2239767
https://bugzilla.redhat.com/show_bug.cgi?id=2240243
https://bugzilla.redhat.com/show_bug.cgi?id=2240956
https://bugzilla.redhat.com/show_bug.cgi?id=2241017
https://bugzilla.redhat.com/show_bug.cgi?id=2241046
https://bugzilla.redhat.com/show_bug.cgi?id=2241934
https://bugzilla.redhat.com/show_bug.cgi?id=2242214
https://bugzilla.redhat.com/show_bug.cgi?id=2242515
https://bugzilla.redhat.com/show_bug.cgi?id=2242812
https://bugzilla.redhat.com/show_bug.cgi?id=2243256
https://bugzilla.redhat.com/show_bug.cgi?id=2243344
https://bugzilla.redhat.com/show_bug.cgi?id=2243679
https://bugzilla.redhat.com/show_bug.cgi?id=2244122
https://bugzilla.redhat.com/show_bug.cgi?id=2244370
https://bugzilla.redhat.com/show_bug.cgi?id=2244629
https://bugzilla.redhat.com/show_bug.cgi?id=2244811
https://bugzilla.redhat.com/show_bug.cgi?id=2245050
https://bugzilla.redhat.com/show_bug.cgi?id=2245081
https://bugzilla.redhat.com/show_bug.cgi?id=2245455
https://bugzilla.redhat.com/show_bug.cgi?id=2246121
https://bugzilla.redhat.com/show_bug.cgi?id=2246546
https://bugzilla.redhat.com/show_bug.cgi?id=2247081
https://bugzilla.redhat.com/show_bug.cgi?id=2248864
https://bugzilla.redhat.com/show_bug.cgi?id=2248865
https://bugzilla.redhat.com/show_bug.cgi?id=2249540
https://bugzilla.redhat.com/show_bug.cgi?id=2249736
https://bugzilla.redhat.com/show_bug.cgi?id=2249825
https://bugzilla.redhat.com/show_bug.cgi?id=2249847
https://bugzilla.redhat.com/show_bug.cgi?id=2249904
https://bugzilla.redhat.com/show_bug.cgi?id=2249913
https://bugzilla.redhat.com/show_bug.cgi?id=2249970
https://bugzilla.redhat.com/show_bug.cgi?id=2250397
https://bugzilla.redhat.com/show_bug.cgi?id=2251014
https://bugzilla.redhat.com/show_bug.cgi?id=2251019
https://bugzilla.redhat.com/show_bug.cgi?id=2251200
https://bugzilla.redhat.com/show_bug.cgi?id=2251643
https://bugzilla.redhat.com/show_bug.cgi?id=2252064
https://bugzilla.redhat.com/show_bug.cgi?id=2252235
https://bugzilla.redhat.com/show_bug.cgi?id=2252248
https://bugzilla.redhat.com/show_bug.cgi?id=2252450
https://bugzilla.redhat.com/show_bug.cgi?id=2252945
https://bugzilla.redhat.com/show_bug.cgi?id=2252968
https://bugzilla.redhat.com/show_bug.cgi?id=2253191
https://bugzilla.redhat.com/show_bug.cgi?id=2253212
https://bugzilla.redhat.com/show_bug.cgi?id=2253381
https://bugzilla.redhat.com/show_bug.cgi?id=2253519
https://bugzilla.redhat.com/show_bug.cgi?id=2253618
https://bugzilla.redhat.com/show_bug.cgi?id=2253621
https://bugzilla.redhat.com/show_bug.cgi?id=2253673
https://bugzilla.redhat.com/show_bug.cgi?id=2254074
https://bugzilla.redhat.com/show_bug.cgi?id=2254178
https://bugzilla.redhat.com/show_bug.cgi?id=2254230
https://bugzilla.redhat.com/show_bug.cgi?id=2254383
https://bugzilla.redhat.com/show_bug.cgi?id=2254408
https://bugzilla.redhat.com/show_bug.cgi?id=2254491
https://bugzilla.redhat.com/show_bug.cgi?id=2254492
https://bugzilla.redhat.com/show_bug.cgi?id=2254612
https://bugzilla.redhat.com/show_bug.cgi?id=2254690
https://bugzilla.redhat.com/show_bug.cgi?id=2254694
https://bugzilla.redhat.com/show_bug.cgi?id=2254712
https://bugzilla.redhat.com/show_bug.cgi?id=2254827
https://bugzilla.redhat.com/show_bug.cgi?id=2255026
https://bugzilla.redhat.com/show_bug.cgi?id=2255329
https://bugzilla.redhat.com/show_bug.cgi?id=2255344
https://bugzilla.redhat.com/show_bug.cgi?id=2255346
https://bugzilla.redhat.com/show_bug.cgi?id=2255385
https://bugzilla.redhat.com/show_bug.cgi?id=2255421
https://bugzilla.redhat.com/show_bug.cgi?id=2255424
https://bugzilla.redhat.com/show_bug.cgi?id=2255426
https://bugzilla.redhat.com/show_bug.cgi?id=2255546
https://bugzilla.redhat.com/show_bug.cgi?id=2255658
https://bugzilla.redhat.com/show_bug.cgi?id=2255900
https://bugzilla.redhat.com/show_bug.cgi?id=2255949
https://bugzilla.redhat.com/show_bug.cgi?id=2255969
https://bugzilla.redhat.com/show_bug.cgi?id=2256024
https://bugzilla.redhat.com/show_bug.cgi?id=2256136
https://bugzilla.redhat.com/show_bug.cgi?id=2256154
https://bugzilla.redhat.com/show_bug.cgi?id=2256218
https://bugzilla.redhat.com/show_bug.cgi?id=2256411
https://bugzilla.redhat.com/show_bug.cgi?id=2256452
https://bugzilla.redhat.com/show_bug.cgi?id=2256473
https://bugzilla.redhat.com/show_bug.cgi?id=2256604
https://bugzilla.redhat.com/show_bug.cgi?id=2256683
https://bugzilla.redhat.com/show_bug.cgi?id=2256891
https://bugzilla.redhat.com/show_bug.cgi?id=2256927
https://bugzilla.redhat.com/show_bug.cgi?id=2257028
https://bugzilla.redhat.com/show_bug.cgi?id=2257340
https://bugzilla.redhat.com/show_bug.cgi?id=2257854
https://bugzilla.redhat.com/show_bug.cgi?id=2257957
https://bugzilla.redhat.com/show_bug.cgi?id=2258016
https://bugzilla.redhat.com/show_bug.cgi?id=2258109
https://bugzilla.redhat.com/show_bug.cgi?id=2258876
https://bugzilla.redhat.com/show_bug.cgi?id=2259163
https://bugzilla.redhat.com/show_bug.cgi?id=2261887
https://bugzilla.redhat.com/show_bug.cgi?id=2261909
https://bugzilla.redhat.com/show_bug.cgi?id=2263243
https://bugzilla.redhat.com/show_bug.cgi?id=2263815
https://bugzilla.redhat.com/show_bug.cgi?id=2264342
https://bugzilla.redhat.com/show_bug.cgi?id=2267949
https://bugzilla.redhat.com/show_bug.cgi?id=2269363
https://bugzilla.redhat.com/show_bug.cgi?id=2270295