Skip to content
OpenAdvisories
Critical RHSA-2025:4576 4 CVEs

Red Hat Security Advisory: Satellite 6.17.0 release

Published May 7, 2025 · Updated Oct 16, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · Satellite Capsule 6 satellite_capsule:6.17::el9 python-django 0:4.2.19-1.el9pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.17::el9 python-jinja2 0:3.1.5-1.el9pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.17::el9 python3.11-django 0:4.2.19-1.el9pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.17::el9 python3.11-jinja2 0:3.1.5-1.el9pc
Red Hat · Satellite Capsule 6 satellite_capsule:6.17::el9 rubygem-rack 0:2.2.13-1.el9sat
Red Hat · Satellite 6 satellite:6.17::el9 python-django 0:4.2.19-1.el9pc
Red Hat · Satellite 6 satellite:6.17::el9 python-jinja2 0:3.1.5-1.el9pc
Red Hat · Satellite 6 satellite:6.17::el9 python3.11-django 0:4.2.19-1.el9pc
Red Hat · Satellite 6 satellite:6.17::el9 python3.11-jinja2 0:3.1.5-1.el9pc
Red Hat · Satellite 6 satellite:6.17::el9 rubygem-graphql 0:1.13.24-1.el9sat
Red Hat · Satellite 6 satellite:6.17::el9 rubygem-rack 0:2.2.13-1.el9sat

Vulnerabilities 4

  • Critical 9.1
    CVE-2025-27407 Public exploit

    Remote code execution when loading a crafted GraphQL schema

    graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema…

    rmosolgo graphql-ruby graphql ruby-graphql Debian Ubuntu RubyGems
  • High 7.5
    CVE-2025-27610

    Local File Inclusion in Rack::Static

    Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.13, 3.0.14, and 3.1.12, `Rack::Static` can serve files under the specified `root:` even if `urls:` are provided, which may expose other files under the specified `root:`…

    rack rack kube-fluentd-operator rack Debian Ubuntu Wolfi RubyGems
  • Medium 5.8
    CVE-2024-56374

    Django has a potential denial-of-service vulnerability in IPv6 validation

    An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18. Lack of upper-bound limit enforcement in strings passed when performing IPv6 validation could lead to a potential denial-of-service attack. The undocumented and priv…

    djangoproject Django python-django django Debian Ubuntu Alpine Wolfi PyPI
  • Medium 5.4
    CVE-2024-56326

    Jinja has a sandbox breakout through indirect reference to format method

    Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability…

    pallets jinja kserve-storage-controller kubeflow-pipelines-visualization-server Debian Ubuntu Azure Linux Alpine Wolfi PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://issues.redhat.com/browse/SAT-12130
  • article
    https://issues.redhat.com/browse/SAT-16243
  • article
    https://issues.redhat.com/browse/SAT-16248
  • article
    https://issues.redhat.com/browse/SAT-16392
  • article
    https://issues.redhat.com/browse/SAT-17448
  • article
    https://issues.redhat.com/browse/SAT-17783
  • article
    https://issues.redhat.com/browse/SAT-19325
  • article
    https://issues.redhat.com/browse/SAT-19336
  • article
    https://issues.redhat.com/browse/SAT-19505
  • article
    https://issues.redhat.com/browse/SAT-19515
  • article
    https://issues.redhat.com/browse/SAT-19781
  • article
    https://issues.redhat.com/browse/SAT-19933
  • article
    https://issues.redhat.com/browse/SAT-20010
  • article
    https://issues.redhat.com/browse/SAT-20579
  • article
    https://issues.redhat.com/browse/SAT-20586
  • article
    https://issues.redhat.com/browse/SAT-20673
  • article
    https://issues.redhat.com/browse/SAT-20889
  • article
    https://issues.redhat.com/browse/SAT-21359
  • article
    https://issues.redhat.com/browse/SAT-22510
  • article
    https://issues.redhat.com/browse/SAT-22966
  • article
    https://issues.redhat.com/browse/SAT-22981
  • article
    https://issues.redhat.com/browse/SAT-23035
  • article
    https://issues.redhat.com/browse/SAT-23114
  • article
    https://issues.redhat.com/browse/SAT-23229
  • article
    https://issues.redhat.com/browse/SAT-2340
  • article
    https://issues.redhat.com/browse/SAT-23647
  • article
    https://issues.redhat.com/browse/SAT-24108
  • article
    https://issues.redhat.com/browse/SAT-24282
  • article
    https://issues.redhat.com/browse/SAT-24725
  • article
    https://issues.redhat.com/browse/SAT-24795
  • article
    https://issues.redhat.com/browse/SAT-25448
  • article
    https://issues.redhat.com/browse/SAT-25464
  • article
    https://issues.redhat.com/browse/SAT-2549
  • article
    https://issues.redhat.com/browse/SAT-25949
  • article
    https://issues.redhat.com/browse/SAT-26058
  • article
    https://issues.redhat.com/browse/SAT-26076
  • article
    https://issues.redhat.com/browse/SAT-26522
  • article
    https://issues.redhat.com/browse/SAT-26537