Every CVE Search/ Get API key

CVE-2020-7942

Improper Certificate Validation in Puppet

6.5 MediumFix available

Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the default node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting strict_hostname_checking = true in puppet.conf on your Puppet master. Puppet 6.13.0 and 5.5.19 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior. Affected software versions: Puppet 6.x prior to 6.13.0 Puppet Agent 6.x prior to 6.13.0 Puppet 5.5.x prior to 5.5.19 Puppet Agent 5.5.x prior to 5.5.19 Resolved in: Puppet 6.13.0 Puppet Agent 6.13.0 Puppet 5.5.19 Puppet Agent 5.5.19

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.80%Up 0.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.5

Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the default node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting strict_hostname_checking = true in puppet.conf on your Puppet master. Puppet 6.13.0 and 5.5.19 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior. Affected software versions: Puppet 6.x prior to 6.13.0 Puppet Agent 6.x prior to 6.13.0 Puppet 5.5.x prior to 5.5.19 Puppet Agent 5.5.x prior to 5.5.19 Resolved in: Puppet 6.13.0 Puppet Agent 6.13.0 Puppet 5.5.19 Puppet Agent 5.5.19

Record
CVE-2020-7942
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
4.0 MediumAV:N/AC:L/Au:S/C:P/I:N/A:N
Weakness
CWE-295
Updated
2026-11-02
CVE List No score

Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the default node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting strict_hostname_checking = true in puppet.conf on your Puppet master. Puppet 6.13.0 and 5.5.19 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior. Affected software versions: Puppet 6.x prior to 6.13.0 Puppet Agent 6.x prior to 6.13.0 Puppet 5.5.x prior to 5.5.19 Puppet Agent 5.5.x prior to 5.5.19 Resolved in: Puppet 6.13.0 Puppet Agent 6.13.0 Puppet 5.5.19 Puppet Agent 5.5.19

Record
CVE-2020-7942
Updated
2026-11-02
EUVDEUVD-2021-0827 No score

Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the default node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting strict_hostname_checking = true in puppet.conf on your Puppet master. Puppet 6.13.0 and 5.5.19 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior. Affected software versions: Puppet 6.x prior to 6.13.0 Puppet Agent 6.x prior to 6.13.0 Puppet 5.5.x prior to 5.5.19 Puppet Agent 5.5.x prior to 5.5.19 Resolved in: Puppet 6.13.0 Puppet Agent 6.13.0 Puppet 5.5.19 Puppet Agent 5.5.19

Record
EUVD-2021-0827
Updated
2026-11-03
GitHub AdvisoriesGHSA-gqvf-892r-vjm5 6.5

Improper Certificate Validation in Puppet

Previously, Puppet operated on the model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the default node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting strict_hostname_checking = true in puppet.conf on your Puppet master. Puppet 6.13.0 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior.

Record
GHSA-gqvf-892r-vjm5
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-295
Updated
2026-11-02
OSV 6.5

Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the default node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting strict_hostname_checking = true in puppet.conf on your Puppet master. Puppet 6.13.0 and 5.5.19 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior. Affected software versions: Puppet 6.x prior to 6.13.0 Puppet Agent 6.x prior to 6.13.0 Puppet 5.5.x prior to 5.5.19 Puppet Agent 5.5.x prior to 5.5.19 Resolved in: Puppet 6.13.0 Puppet Agent 6.13.0 Puppet 5.5.19 Puppet Agent 5.5.19

Record
CVE-2020-7942
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2020-7942 6.5

Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the default node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting strict_hostname_checking = true in puppet.conf on your Puppet master. Puppet 6.13.0 and 5.5.19 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior. Affected software versions: Puppet 6.x prior to 6.13.0 Puppet Agent 6.x prior to 6.13.0 Puppet 5.5.x prior to 5.5.19 Puppet Agent 5.5.x prior to 5.5.19 Resolved in: Puppet 6.13.0 Puppet Agent 6.13.0 Puppet 5.5.19 Puppet Agent 5.5.19

Record
DEBIAN-CVE-2020-7942
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVGHSA-gqvf-892r-vjm5 6.5

Improper Certificate Validation in Puppet

Previously, Puppet operated on the model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infrastructure. When a node's catalog falls back to the default node, the catalog can be retrieved for a different node by modifying facts for the Puppet run. This issue can be mitigated by setting strict_hostname_checking = true in puppet.conf on your Puppet master. Puppet 6.13.0 changes the default behavior for strict_hostname_checking from false to true. It is recommended that Puppet Open Source and Puppet Enterprise users that are not upgrading still set strict_hostname_checking to true to ensure secure behavior.

Record
GHSA-gqvf-892r-vjm5
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-295
Updated
2026-11-02
OSVRHSA-2020:4366 8.8

Red Hat Security Advisory: Satellite 6.8 release

Record
RHSA-2020:4366
CVSS 3.1
8.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVSUSE-SU-2020:1057-1 No score

Security update for puppet

This update for puppet fixes the following issues:

  • CVE-2020-7942: Added a warning for a vulnerable configuration option, which could allow for information disclosure in certain setups. Disabling it my break some setups. (bsc#1167645)
Record
SUSE-SU-2020:1057-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
puppet
RubyGems
 6.0.0 up to 6.13.0
6.13.0
puppet
RubyGems
 before 5.5.19
5.5.19
puppet
Debian:11
 All versions, plus listed versions
5.5.22-25.5.22-2.15.5.22-2.25.5.22-35.5.22-46.16.0-1
 None known
puppet
RubyGems
 6.0.0 up to 6.13.0, plus listed versions
6.0.16.0.106.0.26.0.36.0.4
Show 25 moreShow less
6.0.56.0.76.0.86.0.96.1.06.10.06.10.16.11.06.11.16.12.06.2.06.3.06.4.06.4.16.4.26.4.36.4.46.4.56.5.06.6.06.7.06.7.26.8.06.8.16.9.0
6.13.0
puppet
RubyGems
 before 5.5.19, plus listed versions
0.13.00.13.10.13.20.13.60.16.0
Show 45 moreShow less
0.18.40.22.40.23.00.23.10.23.20.24.00.24.10.24.20.24.30.24.40.24.50.24.60.24.70.24.80.24.90.25.00.25.10.25.20.25.30.25.40.25.50.9.22.6.02.6.12.6.102.6.112.6.122.6.132.6.142.6.152.6.162.6.172.6.182.6.22.6.32.6.42.6.52.6.62.6.72.6.82.6.92.7.12.7.112.7.122.7.13
5.5.19
ansible-collection-redhat-satellite
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.3.0-1.el7sat
0:1.3.0-1.el7sat
ansible-runner
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.4.6-1.el7ar
0:1.4.6-1.el7ar
ansiblerole-foreman_scap_client
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.0.5-1.el7sat
0:0.0.5-1.el7sat
ansiblerole-insights-client
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.7.1-1.el7sat
0:1.7.1-1.el7sat
ansiblerole-satellite-receptor-installer
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.6.13-1.el7sat
0:0.6.13-1.el7sat
Show 290 moreShow less
Affected packages
PackageAffectedFixed
crane-selinux
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.4.0-1.el7sat
0:3.4.0-1.el7sat
createrepo_c
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.4-1.el7sat
0:0.7.4-1.el7sat
createrepo_c-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.4-1.el7sat
0:0.7.4-1.el7sat
createrepo_c-libs
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.4-1.el7sat
0:0.7.4-1.el7sat
foreman
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-bootloaders-redhat
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:202005201200-1.el7sat
0:202005201200-1.el7sat
foreman-bootloaders-redhat-tftpboot
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:202005201200-1.el7sat
0:202005201200-1.el7sat
foreman-debug
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-discovery-image
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:3.6.7-1.el7sat
1:3.6.7-1.el7sat
foreman-discovery-image-service
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.0.0-3.el7sat
0:1.0.0-3.el7sat
foreman-discovery-image-service-tui
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.0.0-3.el7sat
0:1.0.0-3.el7sat
foreman-installer
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:2.1.2.8-1.el7sat
1:2.1.2.8-1.el7sat
foreman-installer-katello
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:2.1.2.8-1.el7sat
1:2.1.2.8-1.el7sat
foreman-proxy
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2-2.el7sat
0:2.1.2-2.el7sat
foreman-proxy-content
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.16.0-1.el7sat
0:3.16.0-1.el7sat
foreman-proxy-journald
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2-2.el7sat
0:2.1.2-2.el7sat
future
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.16.0-11.el7sat
0:0.16.0-11.el7sat
gofer
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.12.5-7.el7sat
0:2.12.5-7.el7sat
hfsplus-tools
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:332.14-12.el7
0:332.14-12.el7
hfsplus-tools-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:332.14-12.el7
0:332.14-12.el7
katello
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.16.0-1.el7sat
0:3.16.0-1.el7sat
katello-certs-tools
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.7.1-1.el7sat
0:2.7.1-1.el7sat
katello-client-bootstrap
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.7.5-1.el7sat
0:1.7.5-1.el7sat
katello-common
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.16.0-1.el7sat
0:3.16.0-1.el7sat
katello-debug
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.16.0-1.el7sat
0:3.16.0-1.el7sat
katello-selinux
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.4.0-1.el7sat
0:3.4.0-1.el7sat
kobo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.5.1-1.el7sat
0:0.5.1-1.el7sat
libmodulemd
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.7.0-1.pulp.el7sat
0:1.7.0-1.pulp.el7sat
libmodulemd-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.7.0-1.pulp.el7sat
0:1.7.0-1.pulp.el7sat
libsolv
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.4-4.pulp.el7sat
0:0.7.4-4.pulp.el7sat
libsolv-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.4-4.pulp.el7sat
0:0.7.4-4.pulp.el7sat
libwebsockets
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.4.2-2.el7
0:2.4.2-2.el7
libwebsockets-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.4.2-2.el7
0:2.4.2-2.el7
livecd-tools
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:20.4-1.6.el7sat
1:20.4-1.6.el7sat
mod_xsendfile
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.12-11.el7sat
0:0.12-11.el7sat
mod_xsendfile-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.12-11.el7sat
0:0.12-11.el7sat
ostree
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2017.1-2.atomic.el7
0:2017.1-2.atomic.el7
ostree-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2017.1-2.atomic.el7
0:2017.1-2.atomic.el7
pulp
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
pulp-admin-client
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
pulp-docker
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2.7-1.el7sat
0:3.2.7-1.el7sat
pulp-docker-admin-extensions
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2.7-1.el7sat
0:3.2.7-1.el7sat
pulp-docker-plugins
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2.7-1.el7sat
0:3.2.7-1.el7sat
pulp-katello
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.0.3-1.el7sat
0:1.0.3-1.el7sat
pulp-maintenance
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
pulp-nodes-child
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
pulp-nodes-common
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
pulp-nodes-parent
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
pulp-ostree
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.3.1-2.el7sat
0:1.3.1-2.el7sat
pulp-ostree-admin-extensions
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.3.1-2.el7sat
0:1.3.1-2.el7sat
pulp-ostree-plugins
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.3.1-2.el7sat
0:1.3.1-2.el7sat
pulp-puppet
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-puppet-admin-extensions
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-puppet-plugins
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-rpm
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-rpm-admin-extensions
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-rpm-plugins
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-selinux
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
pulp-server
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
puppet-agent
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.14.0-2.el7sat
0:6.14.0-2.el7sat
puppet-agent-oauth
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.5.1-3.el7sat
0:0.5.1-3.el7sat
puppet-foreman_scap_client
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.4.0-1.el7sat
0:0.4.0-1.el7sat
puppetlabs-stdlib
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:4.25.1-2.el7sat
0:4.25.1-2.el7sat
puppetserver
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.13.0-1.el7sat
0:6.13.0-1.el7sat
pycairo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.16.3-9.el7sat
0:1.16.3-9.el7sat
pycairo-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.16.3-9.el7sat
0:1.16.3-9.el7sat
pygobject3
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.28.3-2.el7sat
0:3.28.3-2.el7sat
pygobject3-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.28.3-2.el7sat
0:3.28.3-2.el7sat
python-amqp
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.2.2-5.el7sat
0:2.2.2-5.el7sat
python-anyjson
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.3.3-11.el7sat
0:0.3.3-11.el7sat
python-apypie
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.2.2-1.el7sat
0:0.2.2-1.el7sat
python-billiard
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:3.5.0.3-3.el7sat
1:3.5.0.3-3.el7sat
python-billiard-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:3.5.0.3-3.el7sat
1:3.5.0.3-3.el7sat
python-blinker
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.3-2.el7sat
0:1.3-2.el7sat
python-bson
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2-2.el7sat
0:3.2-2.el7sat
python-celery
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:4.0.2-9.el7sat
0:4.0.2-9.el7sat
python-click
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.7-9.el7sat
0:6.7-9.el7sat
python-crane
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.3.1-9.el7sat
0:3.3.1-9.el7sat
python-daemon
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2-7.el7at
0:2.1.2-7.el7at
python-django
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.11.29-1.el7sat
0:1.11.29-1.el7sat
python-flask
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:0.12.2-4.el7sat
1:0.12.2-4.el7sat
python-gnupg
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.3.7-1.el7ui
0:0.3.7-1.el7ui
python-gofer
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.12.5-7.el7sat
0:2.12.5-7.el7sat
python-gofer-qpid
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.12.5-7.el7sat
0:2.12.5-7.el7sat
python-imgcreate
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:20.4-1.6.el7sat
1:20.4-1.6.el7sat
python-isodate
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.5.4-12.el7sat
0:0.5.4-12.el7sat
python-itsdangerous
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.24-15.el7sat
0:0.24-15.el7sat
python-jinja2
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.10-10.el7sat
0:2.10-10.el7sat
python-jmespath
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.9.0-6.el7_7
0:0.9.0-6.el7_7
python-kid
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.9.6-11.el7sat
0:0.9.6-11.el7sat
python-kombu
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 10:4.0.2-13.el7sat
10:4.0.2-13.el7sat
python-lockfile
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:0.11.0-10.el7ar
1:0.11.0-10.el7ar
python-markupsafe
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.23-21.el7sat
0:0.23-21.el7sat
python-markupsafe-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.23-21.el7sat
0:0.23-21.el7sat
python-mongoengine
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.10.5-2.el7sat
0:0.10.5-2.el7sat
python-nectar
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.6.2-1.el7sat
0:1.6.2-1.el7sat
python-oauth2
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.5.211-8.el7sat
0:1.5.211-8.el7sat
python-okaara
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.0.37-2.el7sat
0:1.0.37-2.el7sat
python-pexpect
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:4.6-1.el7at
0:4.6-1.el7at
python-psutil
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:5.0.1-3.el7sat
0:5.0.1-3.el7sat
python-psutil-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:5.0.1-3.el7sat
0:5.0.1-3.el7sat
python-ptyprocess
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.5.2-3.el7at
0:0.5.2-3.el7at
python-pulp-agent-lib
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
python-pulp-bindings
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
python-pulp-client-lib
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
python-pulp-common
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
python-pulp-docker-common
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2.7-1.el7sat
0:3.2.7-1.el7sat
python-pulp-integrity
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
python-pulp-oid_validation
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
python-pulp-ostree-common
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.3.1-2.el7sat
0:1.3.1-2.el7sat
python-pulp-puppet-common
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
python-pulp-repoauth
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
python-pulp-rpm-common
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
python-pulp-streamer
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
python-pycurl
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:7.43.0.2-4.el7sat
0:7.43.0.2-4.el7sat
python-pycurl-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:7.43.0.2-4.el7sat
0:7.43.0.2-4.el7sat
python-pymongo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2-2.el7sat
0:3.2-2.el7sat
python-pymongo-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2-2.el7sat
0:3.2-2.el7sat
python-pymongo-gridfs
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2-2.el7sat
0:3.2-2.el7sat
python-qpid
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.35.0-5.el7
0:1.35.0-5.el7
python-qpid-proton
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.28.0-3.el7
0:0.28.0-3.el7
python-qpid-qmf
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.36.0-28.el7amq
0:1.36.0-28.el7amq
python-saslwrapper
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.22-5.el7sat
0:0.22-5.el7sat
python-semantic_version
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.2.0-6.el7sat
0:2.2.0-6.el7sat
python-simplejson
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2.0-1.el7sat
0:3.2.0-1.el7sat
python-simplejson-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2.0-1.el7sat
0:3.2.0-1.el7sat
python-twisted
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:16.4.1-12.el7sat
0:16.4.1-12.el7sat
python-twisted-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:16.4.1-12.el7sat
0:16.4.1-12.el7sat
python-vine
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 10:1.1.3-6.el7sat
10:1.1.3-6.el7sat
python-werkzeug
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.12.2-5.el7sat
0:0.12.2-5.el7sat
python-zope-interface
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:4.0.5-4.el7
0:4.0.5-4.el7
python-zope-interface-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:4.0.5-4.el7
0:4.0.5-4.el7
python2-amqp
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.2.2-5.el7sat
0:2.2.2-5.el7sat
python2-ansible-runner
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.4.6-1.el7ar
0:1.4.6-1.el7ar
python2-anyjson
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.3.3-11.el7sat
0:0.3.3-11.el7sat
python2-apypie
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.2.2-1.el7sat
0:0.2.2-1.el7sat
python2-billiard
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:3.5.0.3-3.el7sat
1:3.5.0.3-3.el7sat
python2-celery
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:4.0.2-9.el7sat
0:4.0.2-9.el7sat
python2-click
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.7-9.el7sat
0:6.7-9.el7sat
python2-crane
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.3.1-9.el7sat
0:3.3.1-9.el7sat
python2-daemon
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2-7.el7at
0:2.1.2-7.el7at
python2-django
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.11.29-1.el7sat
0:1.11.29-1.el7sat
python2-flask
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:0.12.2-4.el7sat
1:0.12.2-4.el7sat
python2-future
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.16.0-11.el7sat
0:0.16.0-11.el7sat
python2-gobject
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.28.3-2.el7sat
0:3.28.3-2.el7sat
python2-gobject-base
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.28.3-2.el7sat
0:3.28.3-2.el7sat
python2-isodate
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.5.4-12.el7sat
0:0.5.4-12.el7sat
python2-itsdangerous
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.24-15.el7sat
0:0.24-15.el7sat
python2-jinja2
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.10-10.el7sat
0:2.10-10.el7sat
python2-jmespath
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.9.0-6.el7_7
0:0.9.0-6.el7_7
python2-kombu
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 10:4.0.2-13.el7sat
10:4.0.2-13.el7sat
python2-lockfile
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 1:0.11.0-10.el7ar
1:0.11.0-10.el7ar
python2-markupsafe
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.23-21.el7sat
0:0.23-21.el7sat
python2-okaara
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.0.37-2.el7sat
0:1.0.37-2.el7sat
python2-pexpect
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:4.6-1.el7at
0:4.6-1.el7at
python2-ptyprocess
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.5.2-3.el7at
0:0.5.2-3.el7at
python2-pycurl
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:7.43.0.2-4.el7sat
0:7.43.0.2-4.el7sat
python2-solv
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.4-4.pulp.el7sat
0:0.7.4-4.pulp.el7sat
python2-twisted
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:16.4.1-12.el7sat
0:16.4.1-12.el7sat
python2-vine
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 10:1.1.3-6.el7sat
10:1.1.3-6.el7sat
python2-werkzeug
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.12.2-5.el7sat
0:0.12.2-5.el7sat
qpid-cpp
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.36.0-28.el7amq
0:1.36.0-28.el7amq
qpid-cpp-client
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.36.0-28.el7amq
0:1.36.0-28.el7amq
qpid-cpp-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.36.0-28.el7amq
0:1.36.0-28.el7amq
qpid-cpp-server
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.36.0-28.el7amq
0:1.36.0-28.el7amq
qpid-cpp-server-linearstore
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.36.0-28.el7amq
0:1.36.0-28.el7amq
qpid-dispatch
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.5.0-4.el7
0:1.5.0-4.el7
qpid-dispatch-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.5.0-4.el7
0:1.5.0-4.el7
qpid-dispatch-router
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.5.0-4.el7
0:1.5.0-4.el7
qpid-dispatch-tools
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.5.0-4.el7
0:1.5.0-4.el7
qpid-proton
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.28.0-3.el7
0:0.28.0-3.el7
qpid-proton-c
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.28.0-3.el7
0:0.28.0-3.el7
qpid-proton-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.28.0-3.el7
0:0.28.0-3.el7
qpid-qmf
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.36.0-28.el7amq
0:1.36.0-28.el7amq
qpid-tools
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.36.0-28.el7amq
0:1.36.0-28.el7amq
redhat-access-insights-puppet
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.0.1-1.el7sat
0:1.0.1-1.el7sat
repoview
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.6.6-11.el7sat
0:0.6.6-11.el7sat
rubygem-fast_gettext
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.1.0-4.el7sat
0:1.1.0-4.el7sat
rubygem-highline
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.7.8-3.el7sat
0:1.7.8-3.el7sat
rubygem-newt
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.9.6-3.el7sat
0:0.9.6-3.el7sat
rubygem-newt-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.9.6-3.el7sat
0:0.9.6-3.el7sat
rubygem-oauth
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.5.4-2.el7sat
0:0.5.4-2.el7sat
saslwrapper
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.22-5.el7sat
0:0.22-5.el7sat
saslwrapper-debuginfo
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.22-5.el7sat
0:0.22-5.el7sat
satellite
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.8.0-1.el7sat
0:6.8.0-1.el7sat
satellite-capsule
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.8.0-1.el7sat
0:6.8.0-1.el7sat
satellite-common
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.8.0-1.el7sat
0:6.8.0-1.el7sat
satellite-debug-tools
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.8.0-1.el7sat
0:6.8.0-1.el7sat
satellite-installer
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.8.0.11-1.el7sat
0:6.8.0.11-1.el7sat
tfm
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.1-1.el7sat
0:6.1-1.el7sat
tfm-rubygem-algebrick
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.3-6.el7sat
0:0.7.3-6.el7sat
tfm-rubygem-ansi
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.5.0-2.el7sat
0:1.5.0-2.el7sat
tfm-rubygem-apipie-params
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.0.5-5.el7sat
0:0.0.5-5.el7sat
tfm-rubygem-bundler_ext
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.4.1-4.el7sat
0:0.4.1-4.el7sat
tfm-rubygem-clamp
Red Hat:satellite_capsule:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.1.2-5.el7sat
0:1.1.2-5.el7sat
ansible-collection-redhat-satellite
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.3.0-1.el7sat
0:1.3.0-1.el7sat
ansible-runner
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.4.6-1.el7ar
0:1.4.6-1.el7ar
ansiblerole-foreman_scap_client
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.0.5-1.el7sat
0:0.0.5-1.el7sat
ansiblerole-insights-client
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.7.1-1.el7sat
0:1.7.1-1.el7sat
ansiblerole-satellite-receptor-installer
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.6.13-1.el7sat
0:0.6.13-1.el7sat
candlepin
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.1.21-1.el7sat
0:3.1.21-1.el7sat
candlepin-selinux
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.1.21-1.el7sat
0:3.1.21-1.el7sat
crane-selinux
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.4.0-1.el7sat
0:3.4.0-1.el7sat
createrepo_c
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.4-1.el7sat
0:0.7.4-1.el7sat
createrepo_c-debuginfo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.4-1.el7sat
0:0.7.4-1.el7sat
createrepo_c-libs
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.4-1.el7sat
0:0.7.4-1.el7sat
foreman
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-bootloaders-redhat
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:202005201200-1.el7sat
0:202005201200-1.el7sat
foreman-bootloaders-redhat-tftpboot
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:202005201200-1.el7sat
0:202005201200-1.el7sat
foreman-cli
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-debug
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-discovery-image
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 1:3.6.7-1.el7sat
1:3.6.7-1.el7sat
foreman-discovery-image-service
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.0.0-3.el7sat
0:1.0.0-3.el7sat
foreman-discovery-image-service-tui
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.0.0-3.el7sat
0:1.0.0-3.el7sat
foreman-dynflow-sidekiq
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-ec2
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-gce
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-installer
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 1:2.1.2.8-1.el7sat
1:2.1.2.8-1.el7sat
foreman-installer-katello
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 1:2.1.2.8-1.el7sat
1:2.1.2.8-1.el7sat
foreman-journald
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-libvirt
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-openstack
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-ovirt
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-postgresql
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-proxy
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2-2.el7sat
0:2.1.2-2.el7sat
foreman-proxy-content
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.16.0-1.el7sat
0:3.16.0-1.el7sat
foreman-proxy-journald
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2-2.el7sat
0:2.1.2-2.el7sat
foreman-selinux
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.3-1.el7sat
0:2.1.2.3-1.el7sat
foreman-service
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-telemetry
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
foreman-vmware
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.1.2.19-1.el7sat
0:2.1.2.19-1.el7sat
future
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.16.0-11.el7sat
0:0.16.0-11.el7sat
gofer
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.12.5-7.el7sat
0:2.12.5-7.el7sat
hfsplus-tools
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:332.14-12.el7
0:332.14-12.el7
hfsplus-tools-debuginfo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:332.14-12.el7
0:332.14-12.el7
katello
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.16.0-1.el7sat
0:3.16.0-1.el7sat
katello-certs-tools
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.7.1-1.el7sat
0:2.7.1-1.el7sat
katello-client-bootstrap
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.7.5-1.el7sat
0:1.7.5-1.el7sat
katello-common
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.16.0-1.el7sat
0:3.16.0-1.el7sat
katello-debug
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.16.0-1.el7sat
0:3.16.0-1.el7sat
katello-selinux
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.4.0-1.el7sat
0:3.4.0-1.el7sat
keycloak-httpd-client-install
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.2.2-1.el7sat
0:1.2.2-1.el7sat
kobo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.5.1-1.el7sat
0:0.5.1-1.el7sat
libmodulemd
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.7.0-1.pulp.el7sat
0:1.7.0-1.pulp.el7sat
libmodulemd-debuginfo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.7.0-1.pulp.el7sat
0:1.7.0-1.pulp.el7sat
libsolv
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.4-4.pulp.el7sat
0:0.7.4-4.pulp.el7sat
libsolv-debuginfo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.7.4-4.pulp.el7sat
0:0.7.4-4.pulp.el7sat
libwebsockets
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.4.2-2.el7
0:2.4.2-2.el7
libwebsockets-debuginfo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.4.2-2.el7
0:2.4.2-2.el7
livecd-tools
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 1:20.4-1.6.el7sat
1:20.4-1.6.el7sat
mod_passenger
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:4.0.18-24.el7sat
0:4.0.18-24.el7sat
mod_xsendfile
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.12-11.el7sat
0:0.12-11.el7sat
mod_xsendfile-debuginfo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.12-11.el7sat
0:0.12-11.el7sat
ostree
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2017.1-2.atomic.el7
0:2017.1-2.atomic.el7
ostree-debuginfo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2017.1-2.atomic.el7
0:2017.1-2.atomic.el7
pcp-mmvstatsd
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.4-2.el7sat
0:0.4-2.el7sat
pulp
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
pulp-admin-client
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
pulp-docker
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2.7-1.el7sat
0:3.2.7-1.el7sat
pulp-docker-admin-extensions
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2.7-1.el7sat
0:3.2.7-1.el7sat
pulp-docker-plugins
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.2.7-1.el7sat
0:3.2.7-1.el7sat
pulp-katello
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.0.3-1.el7sat
0:1.0.3-1.el7sat
pulp-maintenance
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
pulp-ostree
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.3.1-2.el7sat
0:1.3.1-2.el7sat
pulp-ostree-admin-extensions
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.3.1-2.el7sat
0:1.3.1-2.el7sat
pulp-ostree-plugins
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.3.1-2.el7sat
0:1.3.1-2.el7sat
pulp-puppet
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-puppet-admin-extensions
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-puppet-plugins
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-puppet-tools
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-rpm
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-rpm-admin-extensions
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-rpm-plugins
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-2.el7sat
0:2.21.3-2.el7sat
pulp-selinux
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
pulp-server
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.21.3-1.el7sat
0:2.21.3-1.el7sat
puppet-agent
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.14.0-2.el7sat
0:6.14.0-2.el7sat
puppet-agent-oauth
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.5.1-3.el7sat
0:0.5.1-3.el7sat
puppet-foreman_scap_client
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.4.0-1.el7sat
0:0.4.0-1.el7sat
puppetlabs-stdlib
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:4.25.1-2.el7sat
0:4.25.1-2.el7sat
puppetserver
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:6.13.0-1.el7sat
0:6.13.0-1.el7sat
pycairo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.16.3-9.el7sat
0:1.16.3-9.el7sat
pycairo-debuginfo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:1.16.3-9.el7sat
0:1.16.3-9.el7sat
pygobject3
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.28.3-2.el7sat
0:3.28.3-2.el7sat
pygobject3-debuginfo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.28.3-2.el7sat
0:3.28.3-2.el7sat
python-aiohttp
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.6.2-4.el7ar
0:3.6.2-4.el7ar
python-aiohttp-debuginfo
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:3.6.2-4.el7ar
0:3.6.2-4.el7ar
python-amqp
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:2.2.2-5.el7sat
0:2.2.2-5.el7sat
python-anyjson
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.3.3-11.el7sat
0:0.3.3-11.el7sat
python-apypie
Red Hat:satellite:6.8::el7
From an advisory covering 28 CVEs
 before 0:0.2.2-1.el7sat
0:0.2.2-1.el7sat
puppet
SUSE:Linux Enterprise Module for Advanced Systems Management 12
 before 3.8.5-15.12.1
3.8.5-15.12.1

History

History
RecordedChangedSources
affected, facts
aliases, productsEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-7942 is a medium vulnerability (CVSS 6.5) in Puppet, published February 19, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.80%, the 56th percentile. Fixed in puppet 6.13.0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 106 package rows, 144 versions and 392 references. The JSON record has them. Also not on the record: 407 package claims. ID and package lookups still check them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open