Red Hat Security Advisory: Satellite 6.16.8 Async Update

Important

A flaw was found in Python-Markdown. Parsing crafted markdown content containing malformed HTML-like sequences causes html.parser.HTMLParser to raise an unhandled AssertionError. This unhandled exception allows an attacker to cause an application crash and potentially disclose sensitive information via its stack trace.

CWE-617 - Reachable Assertion

A flaw was found the Pillow Python imaging library. Providing a specially crafted PSD image may lead to an out-of-bounds write. This could potentially allow for arbitrary code execution or information disclosure.

CWE-787 - Out-of-bounds Write

A flaw was found in pyOpenSSL. The set_cookie_generate_callback callback function can be used to generate DTLS cookies. When the callback returns a cookie string or byte sequence longer than 256 bytes, a buffer overflow can be triggered due to a missing bounds checking before copying the data to a fixed-size buffer provided by the underlying OpenSSL library.

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

A flaw was found in mchange-commons-java, a Java utility library. An attacker can exploit this vulnerability by providing a maliciously crafted `javax.naming.Reference` or serialized object to an application using the library. This can provoke the application to download and execute arbitrary malicious code due to mchange-commons-java's independent implementation of Java Naming and Directory Interface (JNDI) dereferencing, which supports remote code loading. This could lead to arbitrary code execution within the affected application.

CWE-502 - Deserialization of Untrusted Data

A flaw was found in Active Support, a toolkit of support libraries for Ruby on Rails. A remote attacker can exploit this vulnerability by providing specially crafted strings containing scientific notation (e.g., "1e10000") to number helpers. This input causes the `BigDecimal` component to expand into extremely large decimal representations, consuming excessive memory and CPU resources. This can lead to a Denial of Service (DoS) vulnerability, making the affected system unavailable.

CWE-770 - Allocation of Resources Without Limits or Throttling