RHSA-2025:9022

csafUSredhat_csaf

Red Hat Security Advisory: Satellite 6.17.1 Async Update

view advisory published 2025-06-12

A new release is now available for Red Hat Satellite 6.17 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-31755US——
cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of function cJSON_SetValuestring at cJSON.c.
02

references

External citations — patches, advisories, analysis.

03

remediations (49)

  • Fixedcjson-0:1.7.18-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.17/html/updating_red_hat_satellite/index

    https://access.redhat.com/errata/RHSA-2025:9022
  • Fixedcjson-0:1.7.18-1.el9sat.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.17/html/updating_red_hat_satellite/index

    https://access.redhat.com/errata/RHSA-2025:9022
  • Fixedcjson-debuginfo-0:1.7.18-1.el9sat.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.17/html/updating_red_hat_satellite/index

    https://access.redhat.com/errata/RHSA-2025:9022
  • Fixedcjson-debugsource-0:1.7.18-1.el9sat.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9

    Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.17/html/updating_red_hat_satellite/index

    https://access.redhat.com/errata/RHSA-2025:9022
  • Workaroundansible-collection-redhat-satellite-0:5.1.1-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundansible-collection-redhat-satellite-0:5.1.1-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundcjson-0:1.7.18-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundcjson-0:1.7.18-1.el9sat.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundcjson-debuginfo-0:1.7.18-1.el9sat.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundcjson-debugsource-0:1.7.18-1.el9sat.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-0:3.14.0.3-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-cli-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-debug-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-dynflow-sidekiq-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-ec2-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-installer-1:3.14.0.2-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-installer-1:3.14.0.2-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-installer-katello-1:3.14.0.2-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-journald-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-libvirt-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-openstack-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-ovirt-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-pcp-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-postgresql-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-redis-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-service-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-telemetry-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundforeman-vmware-0:3.14.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundpython-pulp-rpm-0:3.27.3-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundpython-pulpcore-0:3.63.17-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundpython3.11-pulp-rpm-0:3.27.3-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundpython3.11-pulpcore-0:3.63.17-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundrubygem-foreman_rh_cloud-0:11.4.1-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundrubygem-foreman_rh_cloud-0:11.4.1-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundrubygem-foreman_theme_satellite-0:14.3.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundrubygem-foreman_theme_satellite-0:14.3.3-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundrubygem-hammer_cli_katello-0:1.16.1.1-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundrubygem-hammer_cli_katello-0:1.16.1.1-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundrubygem-katello-0:4.16.0.5-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundrubygem-katello-0:4.16.0.5-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundsatellite-0:6.17.1-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundsatellite-0:6.17.1-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundsatellite-capsule-0:6.17.1-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundsatellite-cli-0:6.17.1-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundsatellite-common-0:6.17.1-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundsatellite-lifecycle-0:6.17.0-2.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundsatellite-lifecycle-0:6.17.0-2.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

  • Workaroundsatellite-obsolete-packages-0:6.17.1-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9

    Currently, there's no available mitigation that matches Red Hat's mitigation criteria other than updating the affected packages.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan