Red Hat Security Advisory

RHSA-2025:19832

Satellite 6.17.6 Async Update

Released 2025-11-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.17 for RHEL 9 foreman-3.14.0.10-1.el9sat, foreman-cli-3.14.0.10-1.el9sat, foreman-debug-3.14.0.10-1.el9sat +13

TI-2025-37269 CVE-2025-59830 · GHSA-625h-95r8-8xpm

MEDIUM 40

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00573 Published 2025-09-25 Partial fix · 2.2.18 CWE-400

TI-2025-09723 CVE-2025-10622 · GHSA-f5h4-c4jw-c4gm

LOW 38

A flaw was found in Red Hat Satellite (Foreman component).

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00728 Published 2025-11-05 Partial fix · 3.16.1, 3.9.1.13-1.el8sat +4 CWE-78

TI-2025-38268 CVE-2025-61919 · GHSA-6xw4-3v39-52mm

LOW 34

Rack is a modular Ruby web server interface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00648 Published 2025-10-10 Partial fix · 2.2.20, 3.1.18 +1 CWE-400