Stay Secure with the Latest Linux Advisories

security advisoryupdatered hat

Red Hat: RHSA-2020-2740-01 Critical Update for Candlepin and Satellite

An update for candlepin and satellite is now available for Red Hat Satellite 6.5 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: candlepin and satellite security update Advisory ID: RHSA-2020:2740-01 Product: Red Hat Satellite 6 Advisory URL: https://access.redhat.com/errata/RHSA-2020:2740 Issue date: 2020-06-24 CVE Names: CVE-2019-10086 ==================================================================== 1. Summary: An update for candlepin and satellite is now available for Red Hat Satellite 6.5 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Satellite 6.5 - noarch Red Hat Satellite Capsule 6.5 - noarch 3. Description: Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default (CVE-2019-10086) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailedinstructions how to apply this update, refer to: rver_and_content_hosts 5. Bugs fixed (https://bugzilla.redhat.com/): 1767483 - CVE-2019-10086 apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default 6. Package List: Red Hat Satellite Capsule 6.5: Source: satellite-6.5.3.2-1.el7sat.src.rpm noarch: satellite-capsule-6.5.3.2-1.el7sat.noarch.rpm satellite-common-6.5.3.2-1.el7sat.noarch.rpm satellite-debug-tools-6.5.3.2-1.el7sat.noarch.rpm Red Hat Satellite 6.5: Source: candlepin-2.5.22-1.el7sat.src.rpm satellite-6.5.3.2-1.el7sat.src.rpm noarch: candlepin-2.5.22-1.el7sat.noarch.rpm candlepin-selinux-2.5.22-1.el7sat.noarch.rpm satellite-6.5.3.2-1.el7sat.noarch.rpm satellite-capsule-6.5.3.2-1.el7sat.noarch.rpm satellite-cli-6.5.3.2-1.el7sat.noarch.rpm satellite-common-6.5.3.2-1.el7sat.noarch.rpm satellite-debug-tools-6.5.3.2-1.el7sat.noarch.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2019-10086 https://access.redhat.com/security/updates/classification#important 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPGv1 iQIVAwUBXvNf9tzjgjWX9erEAQiM/Q//Zb39r+xCmnDeLn25bgTOSFo0RpYioVzm 5bnuJoKgQyE8kvCXcvt/sTYzO3LJqrNd8I0m3gKWzX+RNWkeJ5W6NsYw9xGycpoP 05beeqF1OCGekEkpEiIG2BBhyh6RHJ96/5QekO6SbncyZakB3LwoeP6ZBhgMQOXd KTaGZcMz1huhBSrnQF+lfXnSyLScSEvQfZigJ0fNJ9BgdCiZcYIe10QyCVgYvKiR KbiWFjVMyLJvlh/LC+Wt/GG3A8XD6jCnP7joEteEEvaNmG04ipKZ3+m+wOAIjRC0 GqSbg365/doj9XoqCtFgGUWqP80+wa3JKo8m4ZjWGO3OPCLUqpFbKNLq1iQSrGyW s4T46eLzlOlOoCIMTJ3m4b+o7ozQAJa3wZfe/vFEe0uwYmrXn8I/CsZvYV8TckWf xF4CcBfbUHQ6WQWpXZ7aTG9Q/7zapwaIJ+HatGdQK381tCQ85JggjqpdGksx9XW4 fWGpuRljRYZQ+HB+BLGaq4EkxLseCyNg6ek86BL3Cv9rxdFZLFV+A8/68iT6LhLE 75cXWk7ruDKvbsJxtKGC5OorQxMUZbugkQSS8fyRt8NcAKbYTLFfPkZxm3MzQ1/d YicuT+1oDmH4sP8KYTx8DU7QHXGOcAKfOKQGlA6zTyLtTUUDpEMOVBYmaY65PSKg 10EO7jr30lM=pC9g -----END PGP SIGNATURE----- -- RHSA-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Red Hat Satellite administrators are advised to apply updates due to significant security vulnerabilities found in candlepin and satellite systems. More information available here.. Red Hat Satellite, candlepin update, security fix. . Severity: Important. LinuxSecurity.com Team

Jun 24, 2020 •Important Red Hat