Red Hat Security AdvisoryRHSA-2025:9838
Satellite 6.15.5.3 Async Update
Released 2025-06-26 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Satellite 6.15 for RHEL 8 cjson-1.7.18-1.el8sat, python-sqlparse-0.5.0-1.el8pc, python3.11-sqlparse-0.5.0-1.el8pc +1
Fixes 5 records
Priority HIGH 72
Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03237 · Published 2024-04-30 · Partial fix · 0.5.0 CWE-674
Priority HIGH 72
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00969 · Published 2023-12-14 · Fixed CWE-476
Priority HIGH 66
cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00648 · Published 2024-04-26 · Fixed CWE-476
Priority MEDIUM 41
Rack is a modular Ruby web server interface.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01228 · Published 2025-05-07 · Partial fix · 2.2.14, 3.0.16 +1 CWE-400
Priority LOW 36
cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01521 · Published 2023-12-14 · Fixed CWE-476
THREATIST.IORead the docs