Red Hat Security Advisory

RHSA-2025:4576

Satellite 6.17.0 release

Released 2025-05-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.17 for RHEL 9 python-django-4.2.19-1.el9pc, python-jinja2-3.1.5-1.el9pc, python3.11-django-4.2.19-1.el9pc +3

TI-2025-20242 CVE-2025-27407 · GHSA-q92j-grw3-h492

MEDIUM 47

graphql-ruby is a Ruby implementation of GraphQL.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03102 Published 2025-03-12 Fixed in 1.11.8, 1.12.25 +8 CWE-94

TI-2025-20419 CVE-2025-27610 · GHSA-7wqh-767x-r66v

MEDIUM 41

Rack provides an interface for developing web applications in Ruby.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01173 Published 2025-03-10 Partial fix · 2.2.13, 3.0.14 +1 CWE-23

TI-2024-37331 CVE-2024-56374 · GHSA-qcgg-j2x8-h9g8

MEDIUM 41

An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01277 Published 2025-01-14 Partial fix · 4.2.18, 5.0.11 +1 CWE-770

TI-2024-37287 CVE-2024-56326 · GHSA-q2x7-8rv6-6q7h

LOW 27

Jinja is an extensible templating engine.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00522 Published 2024-12-23 Partial fix · 3.1.5 CWE-1336