Red Hat Security AdvisoryRHSA-2025:17606
Satellite 6.17.5 Async Update
Released 2025-10-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.17 for RHEL 9 cjson-1.7.18-2.el9sat, puppet-agent-8.8.1-3.el9sat, python-django-4.2.24-0.1.el9pc +1
Fixes 3 records
Priority HIGH 82
cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00743 · Published 2025-09-03 · Fixed CWE-125
Priority HIGH 70
An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.28271 · Published 2025-09-03 · Partial fix · 4.2.24, 5.1.12 +1 CWE-89
Priority MEDIUM 40
A flaw was found in REXML.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00549 · Published 2026-02-27 · Fixed in 6.17.5, 6.16.5.4 +4 CWE-1333
