Red Hat Security AdvisoryRHSA-2025:17614
Satellite 6.15.5.5 Async Update
Released 2025-10-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.15 for RHEL 8 cjson-1.7.18-2.el8sat, puppet-agent-7.34.0-4.el8sat, python-django-4.2.24-0.1.el8pc +1
Fixes 3 records
Priority HIGH 82
cJSON 1.5.0 through 1.7.18 allows out-of-bounds access via the decode_array_index_from_pointer function in cJSON_Utils.c, allowing remote attackers to bypass array bounds checking and access restricted data via malformed…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00743 · Published 2025-09-03 · Fixed CWE-125
Priority HIGH 70
An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.28271 · Published 2025-09-03 · Partial fix · 4.2.24, 5.1.12 +1 CWE-89
Priority LOW 38
REXML is an XML toolkit for Ruby.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.0142 · Published 2024-10-28 · Partial fix · 3.3.9 CWE-1333
