RHEA-2014:1175Critical

Red Hat Enhancement Advisory: Release of Satellite 6.0

Published
September 10, 2014
Last Modified
October 5, 2026

🔗 CVE IDs covered (24)

CVE-2013-2882 →CVE-2013-4180 →CVE-2013-4182 →CVE-2013-6640 →CVE-2014-0090 →CVE-2014-4616 →CVE-2012-6619 →CVE-2013-2101 →CVE-2013-2121 →CVE-2013-4201 →CVE-2013-4386 →CVE-2013-7440 →CVE-2014-0192 →CVE-2014-0241 →CVE-2013-6639 →CVE-2013-6650 →CVE-2014-0091 →CVE-2014-0208 →CVE-2014-3531 →CVE-2013-4225 →CVE-2014-0007 →CVE-2014-0089 →CVE-2014-0135 →CVE-2014-1704 →

📋 Description

CVE-2012-6619 — mongodb: memory over-read via incorrect BSON object length CVE-2013-2101 — Katello: Multiple XSS in various entities CVE-2013-2121 — Foreman: app/controllers/bookmarks_controller.rb remote code execution CVE-2013-2882 — v8: remote DoS or unspecified other impact via type confusion CVE-2013-4180 — Foreman: hosts_controller.rb power/ipmi_boot Symbol creation DoS CVE-2013-4182 — foreman: app/controllers/api/v1/hosts_controller.rb API privilege escalation CVE-2013-4201 — Katello: CLI - user without access can call "system remove_deletion" command CVE-2013-4225 — Katello: proxied Candlepin calls authorization bypass CVE-2013-4386 — Foreman: host and host group parameter SQL injection CVE-2013-6639 — v8: DoS (out-of-bounds write) in DehoistArrayIndex function in hydrogen.cc CVE-2013-6640 — v8: DoS (out-of-bounds read) in DehoistArrayIndex function in hydrogen.cc CVE-2013-6650 — v8: incorrect handling of popular pages CVE-2013-7440 — python: wildcard matching rules do not follow RFC 6125 CVE-2014-0007 — foreman-proxy: smart-proxy remote command injection CVE-2014-0089 — Foreman: Stored Cross Site Scripting CVE-2014-0090 — Foreman: Session fixation CVE-2014-0091 — Foreman: Improper input validation CVE-2014-0135 — rubygem-kafo: temporary file creation vulnerability when creating /tmp/default_values.yaml CVE-2014-0192 — Foreman: provisioning templates are world accessible CVE-2014-0208 — foreman: XSS in key name auto-completion CVE-2014-0241 — rubygem-hammer_cli_foreman: /etc/hammer/cli.modules.d/foreman.yml is world-readable CVE-2014-1704 — v8: multiple vulnerabilities fixed in Google Chrome version 33.0.1750.149 CVE-2014-3531 — foreman: XSS with operating system name/description CVE-2014-4616 — python: missing boundary check in JSON module

🎯 Affected products200

  • Red Hat Satellite 6.0
  • Red Hat Satellite 6.0 - Optional
  • Red Hat Satellite Capsule 6.0
  • advancecomp-0:1.15-13.el6sat.src as a component of Red Hat Satellite 6.0
  • advancecomp-0:1.15-13.el6sat.x86_64 as a component of Red Hat Satellite 6.0
  • advancecomp-0:1.15-13.el7sat.src as a component of Red Hat Satellite 6.0
  • advancecomp-0:1.15-13.el7sat.x86_64 as a component of Red Hat Satellite 6.0
  • advancecomp-debuginfo-0:1.15-13.el6sat.x86_64 as a component of Red Hat Satellite 6.0
  • advancecomp-debuginfo-0:1.15-13.el7sat.x86_64 as a component of Red Hat Satellite 6.0
  • aether-0:1.13.1-13.el7.src as a component of Red Hat Satellite 6.0
  • aether-api-0:1.13.1-13.el7.noarch as a component of Red Hat Satellite 6.0
  • aether-connector-wagon-0:1.13.1-13.el7.noarch as a component of Red Hat Satellite 6.0
  • aether-impl-0:1.13.1-13.el7.noarch as a component of Red Hat Satellite 6.0
  • aether-spi-0:1.13.1-13.el7.noarch as a component of Red Hat Satellite 6.0
  • aether-util-0:1.13.1-13.el7.noarch as a component of Red Hat Satellite 6.0
  • ant-antlr-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-apache-bcel-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-apache-bsf-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-apache-log4j-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-apache-oro-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-apache-regexp-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-apache-resolver-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-apache-xalan2-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-commons-logging-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-commons-net-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-javadoc-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-javamail-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-jdepend-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-jmf-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • ant-jsch-0:1.9.2-9.el7.noarch as a component of Red Hat Satellite 6.0 - Optional
  • +170 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via Red Hat Subscription Manageemnt. Details on how to use Red Hat Subscription Management are available at https://access.redhat.com/articles/433903.

🔗 References (5)