RHSA-2025:3491: Important: Satellite 6.15.5.2 Async Update
Important: Satellite 6.15.5.2 Async Update
Other sources
Red Hat Satellite is a system management solution that allows organizationsto configure and maintain their systems without the necessity to providepublic Internet access to their servers or other client systems. Itperforms provisioning and configuration management of predefined standardoperating environments.Security Fix(es): rubygem-graphql: Remote code execution when loading a crafted GraphQL schema (CVE-2025-27407) rubygem-rack: Local File Inclusion in Rack::Static (CVE-2025-27610) python-jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201) Users of Red Hat Satellite are advised to upgrade to these updatedpackages, which fix these bugs.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:3491?
RHSA-2025:3491 is classified as an important security advisory.
How do I fix RHSA-2025:3491?
To fix RHSA-2025:3491, update the affected packages to their latest versions specified in the advisory.
What systems are impacted by RHSA-2025:3491?
RHSA-2025:3491 affects systems running specific versions of Red Hat Satellite and its related packages.
What are the affected packages in RHSA-2025:3491?
The affected packages include python-jinja2, python-pulpcore, rubygem-graphql, rubygem-rack, and others related to Red Hat Satellite.
Is Red Hat Satellite the only product affected by RHSA-2025:3491?
No, RHSA-2025:3491 also affects Red Hat Satellite Capsule and Red Hat Enterprise Linux 8.