Red Hat Security Advisory: Satellite 6.15.5.3 Async Update

Fixed packages 12

Vulnerabilities 5

• High 7.6
  CVE-2024-31755

  cJSON v1.7.17 was discovered to contain a segmentation violation, which can trigger through the second parameter of fun…

  cjson cjson apparmor Debian Ubuntu Azure Linux
  Apr 26, 2024
• High 7.5
  CVE-2024-4340

  Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

  Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service due to RecursionError.

  kubeflow-pipelines-visualization-server sqlparse sqlparse sqlparse Debian Ubuntu Wolfi PyPI
  Apr 30, 2024
• High 7.5
  CVE-2025-46727

  Unbounded-Parameter DoS in Rack::QueryParser

  Rack is a modular Ruby web server interface. Prior to versions 2.2.14, 3.0.16, and 3.1.14, `Rack::QueryParser` parses query strings and `application/x-www-form-urlencoded` bodies into Ruby data structures without imposing any limit on the number of parameters…

  rack rack rack ruby-rack Debian Ubuntu Wolfi RubyGems
  May 7, 2025
• Unscored —
  CVE-2023-50471

  cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c.

  cjson cjson apparmor cjson Debian Ubuntu Azure Linux Alpine
  Dec 14, 2023
• Unscored —
  CVE-2023-50472

  cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c.

  cjson cjson apparmor cjson Debian Ubuntu Azure Linux Alpine
  Dec 14, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2254641
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2254643
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2277268
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2278038
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2364966
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9838.json
• report
  https://access.redhat.com/security/cve/CVE-2023-50471
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-50471
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-50471
• report
  https://access.redhat.com/security/cve/CVE-2023-50472
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-50472
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-50472
• report
  https://access.redhat.com/security/cve/CVE-2024-4340
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-4340
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-4340
• advisory
  https://github.com/advisories/GHSA-2m57-hf25-phgg
• report
  https://access.redhat.com/security/cve/CVE-2024-31755
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-31755
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-31755
• article
  https://github.com/DaveGamble/cJSON/issues/839
• advisory
  https://github.com/advisories/GHSA-5g69-hr8r-x577
• report
  https://access.redhat.com/security/cve/CVE-2025-46727
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-46727
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-46727
• article
  https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712
• article
  https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3
• article
  https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74
• article
  https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx