HighFix available
Red Hat Security Advisory: Satellite 6.15.5.3 Async Update
Type: advisorySources: OSV
- Products
- cjson, cjson-debuginfo, cjson-debugsource, python-sqlparse, python3.11-sqlparse, rubygem-rack
- Affected versions
- Not specified
- Fixed versions
- 0:0.5.0-1.el8pc, 0:1.7.18-1.el8sat, 0:2.2.14-1.el8sat
- CVEs
- CVE-2023-50471, CVE-2023-50472, CVE-2024-31755, CVE-2024-4340, CVE-2025-46727
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:09 UTC · Revision 1
Source evidence
Red Hat Security Advisory: Satellite 6.15.5.3 Async Update
core-osv · Original sourcePublished 27 Jun 2025, 10:05 UTC
Red Hat Security Advisory: Satellite 6.15.5.3 Async Update
osv:RHSA-2025:9838
cjson
Fixed versions: 0:1.7.18-1.el8sat
cjson-debuginfo
Fixed versions: 0:1.7.18-1.el8sat
cjson-debugsource
Fixed versions: 0:1.7.18-1.el8sat
cjson
Fixed versions: 0:1.7.18-1.el8sat
cjson-debuginfo
Fixed versions: 0:1.7.18-1.el8sat
cjson-debugsource
Fixed versions: 0:1.7.18-1.el8sat
python-sqlparse
Fixed versions: 0:0.5.0-1.el8pc
python3.11-sqlparse
Fixed versions: 0:0.5.0-1.el8pc
python-sqlparse
Fixed versions: 0:0.5.0-1.el8pc
python3.11-sqlparse
Fixed versions: 0:0.5.0-1.el8pc
rubygem-rack
Fixed versions: 0:2.2.14-1.el8sat
rubygem-rack
Fixed versions: 0:2.2.14-1.el8sat
Complete source record
{
"id": "85ddffada11d024354ea5d538a31d8ea7b5f47b4bf7ced3b8711fe0f79074e38",
"url": "https://osv.dev/vulnerability/RHSA-2025%3A9838",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: Satellite 6.15.5.3 Async Update",
"summary": "Red Hat Security Advisory: Satellite 6.15.5.3 Async Update",
"evidence": "osv:RHSA-2025:9838",
"products": [
{
"name": {
"value": "cjson",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.7.18-1.el8sat",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cjson-debuginfo",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.7.18-1.el8sat",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cjson-debugsource",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.7.18-1.el8sat",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cjson",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.7.18-1.el8sat",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cjson-debuginfo",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.7.18-1.el8sat",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "cjson-debugsource",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.7.18-1.el8sat",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python-sqlparse",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.5.0-1.el8pc",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python3.11-sqlparse",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.5.0-1.el8pc",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python-sqlparse",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.5.0-1.el8pc",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python3.11-sqlparse",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.5.0-1.el8pc",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "rubygem-rack",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.2.14-1.el8sat",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "rubygem-rack",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.2.14-1.el8sat",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "RHSA-2025:9838",
"aliases": [
"RHSA-2025:9838"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.7.18-1.el8sat"
}
]
}
],
"package": {
"name": "cjson",
"purl": "pkg:rpm/redhat/cjson",
"ecosystem": "Red Hat:satellite_capsule:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.7.18-1.el8sat"
}
]
}
],
"package": {
"name": "cjson-debuginfo",
"purl": "pkg:rpm/redhat/cjson-debuginfo",
"ecosystem": "Red Hat:satellite_capsule:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.7.18-1.el8sat"
}
]
}
],
"package": {
"name": "cjson-debugsource",
"purl": "pkg:rpm/redhat/cjson-debugsource",
"ecosystem": "Red Hat:satellite_capsule:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.7.18-1.el8sat"
}
]
}
],
"package": {
"name": "cjson",
"purl": "pkg:rpm/redhat/cjson",
"ecosystem": "Red Hat:satellite:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.7.18-1.el8sat"
}
]
}
],
"package": {
"name": "cjson-debuginfo",
"purl": "pkg:rpm/redhat/cjson-debuginfo",
"ecosystem": "Red Hat:satellite:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.7.18-1.el8sat"
}
]
}
],
"package": {
"name": "cjson-debugsource",
"purl": "pkg:rpm/redhat/cjson-debugsource",
"ecosystem": "Red Hat:satellite:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.5.0-1.el8pc"
}
]
}
],
"package": {
"name": "python-sqlparse",
"purl": "pkg:rpm/redhat/python-sqlparse",
"ecosystem": "Red Hat:satellite_capsule:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.5.0-1.el8pc"
}
]
}
],
"package": {
"name": "python3.11-sqlparse",
"purl": "pkg:rpm/redhat/python3.11-sqlparse",
"ecosystem": "Red Hat:satellite_capsule:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.5.0-1.el8pc"
}
]
}
],
"package": {
"name": "python-sqlparse",
"purl": "pkg:rpm/redhat/python-sqlparse",
"ecosystem": "Red Hat:satellite:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.5.0-1.el8pc"
}
]
}
],
"package": {
"name": "python3.11-sqlparse",
"purl": "pkg:rpm/redhat/python3.11-sqlparse",
"ecosystem": "Red Hat:satellite:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.2.14-1.el8sat"
}
]
}
],
"package": {
"name": "rubygem-rack",
"purl": "pkg:rpm/redhat/rubygem-rack",
"ecosystem": "Red Hat:satellite_capsule:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.2.14-1.el8sat"
}
]
}
],
"package": {
"name": "rubygem-rack",
"purl": "pkg:rpm/redhat/rubygem-rack",
"ecosystem": "Red Hat:satellite:6.15::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2025:9838.json"
}
}
],
"modified": "2026-10-17T10:08:17Z",
"provider": "osv",
"upstream": [
"CVE-2023-50471",
"CVE-2023-50472",
"CVE-2024-31755",
"CVE-2024-4340",
"CVE-2025-46727"
],
"references": [
"https://access.redhat.com/errata/RHSA-2025:9838",
"https://access.redhat.com/security/updates/classification/#moderate",
"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index",
"https://bugzilla.redhat.com/show_bug.cgi?id=2254641",
"https://bugzilla.redhat.com/show_bug.cgi?id=2254643",
"https://bugzilla.redhat.com/show_bug.cgi?id=2277268",
"https://bugzilla.redhat.com/show_bug.cgi?id=2278038",
"https://bugzilla.redhat.com/show_bug.cgi?id=2364966",
"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9838.json",
"https://access.redhat.com/security/cve/CVE-2023-50471",
"https://www.cve.org/CVERecord?id=CVE-2023-50471",
"https://nvd.nist.gov/vuln/detail/CVE-2023-50471",
"https://access.redhat.com/security/cve/CVE-2023-50472",
"https://www.cve.org/CVERecord?id=CVE-2023-50472",
"https://nvd.nist.gov/vuln/detail/CVE-2023-50472",
"https://access.redhat.com/security/cve/CVE-2024-4340",
"https://www.cve.org/CVERecord?id=CVE-2024-4340",
"https://nvd.nist.gov/vuln/detail/CVE-2024-4340",
"https://github.com/advisories/GHSA-2m57-hf25-phgg",
"https://access.redhat.com/security/cve/CVE-2024-31755",
"https://www.cve.org/CVERecord?id=CVE-2024-31755",
"https://nvd.nist.gov/vuln/detail/CVE-2024-31755",
"https://github.com/DaveGamble/cJSON/issues/839",
"https://github.com/advisories/GHSA-5g69-hr8r-x577",
"https://access.redhat.com/security/cve/CVE-2025-46727",
"https://www.cve.org/CVERecord?id=CVE-2025-46727",
"https://nvd.nist.gov/vuln/detail/CVE-2025-46727",
"https://github.com/rack/rack/commit/2bb5263b464b65ba4b648996a579dbd180d2b712",
"https://github.com/rack/rack/commit/3f5a4249118d09d199fe480466c8c6717e43b6e3",
"https://github.com/rack/rack/commit/cd6b70a1f2a1016b73dc906f924869f4902c2d74",
"https://github.com/rack/rack/security/advisories/GHSA-gjh7-p2fx-99vx"
]
},
"related_cves": [
{
"value": "CVE-2023-50471",
"evidence": "/upstream"
},
{
"value": "CVE-2023-50472",
"evidence": "/upstream"
},
{
"value": "CVE-2024-31755",
"evidence": "/upstream"
},
{
"value": "CVE-2024-4340",
"evidence": "/upstream"
},
{
"value": "CVE-2025-46727",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 352703,
"published_at": "2025-06-27T10:05:49+00:00"
}