RHSA-2025:2399: candlepin Red Hat

CVSS: 6.3v3.1MediumPublished

Published 06-03-2025Last modified 16-10-2026

Open JSON

Vulnerability summary

RHSA-2025:2399 is a medium (CVSS 6.3) vulnerability in candlepin Red Hat.

Overall risk

25/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.3/10

010

Medium · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 3 · Downstream 0

CVE-2024-35195 CVE-2024-56326 CVE-2024-56374

Timeline

06-03-2025
PublishedVulnerability first disclosed.
16-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Satellite 6.16.3 Async Update

CVSS metrics

1 score · 1 source · 1 version

v3.16.3

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat45 products

candlepin< 0:4.4.21-1.el8sat | < 0:4.4.21-1.el9sat
candlepin-selinux< 0:4.4.21-1.el8sat | < 0:4.4.21-1.el9sat
foreman< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-cli< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-debug< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat

foreman-dynflow-sidekiq< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-ec2< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-installer< 1:3.12.0.4-2.el8sat | < 1:3.12.0.4-2.el9sat
foreman-installer-katello< 1:3.12.0.4-2.el8sat | < 1:3.12.0.4-2.el9sat
foreman-journald< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-libvirt< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-openstack< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-ovirt< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-pcp< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-postgresql< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-redis< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-service< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-telemetry< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
foreman-vmware< 0:3.12.0.6-1.el8sat | < 0:3.12.0.6-1.el9sat
python-django< 0:4.2.19-1.el8pc | < 0:4.2.19-1.el9pc
python-jinja2< 0:3.1.5-1.el8pc | < 0:3.1.5-1.el9pc
python-pulp-cli< 0:0.29.2-2.el8pc | < 0:0.29.2-2.el9pc
python-pulp-container< 0:2.20.5-1.el8pc | < 0:2.20.5-1.el9pc
python-pulp-glue< 0:0.29.2-2.el8pc | < 0:0.29.2-2.el9pc
python-pulpcore< 0:3.49.33-1.el8pc | < 0:3.49.33-1.el9pc
python-requests< 0:2.32.3-2.el8pc | < 0:2.32.3-2.el9pc
python3.11-django< 0:4.2.19-1.el8pc | < 0:4.2.19-1.el9pc
python3.11-jinja2< 0:3.1.5-1.el8pc | < 0:3.1.5-1.el9pc
python3.11-pulp-cli< 0:0.29.2-2.el8pc | < 0:0.29.2-2.el9pc
python3.11-pulp-container< 0:2.20.5-1.el8pc | < 0:2.20.5-1.el9pc
python3.11-pulp-glue< 0:0.29.2-2.el8pc | < 0:0.29.2-2.el9pc
python3.11-pulpcore< 0:3.49.33-1.el8pc | < 0:3.49.33-1.el9pc
python3.11-requests< 0:2.32.3-2.el8pc | < 0:2.32.3-2.el9pc
rubygem-foreman_ansible< 0:14.2.3-1.el8sat | < 0:14.2.3-1.el9sat
rubygem-foreman_maintain< 1:1.7.12-1.el8sat | < 1:1.7.12-1.el9sat
rubygem-foreman_openscap< 0:9.0.5-1.el8sat | < 0:9.0.5-1.el9sat
rubygem-foreman_remote_execution< 0:13.2.7-1.el8sat | < 0:13.2.7-1.el9sat
rubygem-foreman_remote_execution-cockpit< 0:13.2.7-1.el8sat | < 0:13.2.7-1.el9sat
rubygem-foreman_theme_satellite< 0:13.3.5-1.el8sat | < 0:13.3.5-1.el9sat
rubygem-katello< 0:4.14.0.8-1.el8sat | < 0:4.14.0.8-1.el9sat
satellite< 0:6.16.3-2.el8sat | < 0:6.16.3-2.el9sat
satellite-capsule< 0:6.16.3-2.el8sat | < 0:6.16.3-2.el9sat
satellite-cli< 0:6.16.3-2.el8sat | < 0:6.16.3-2.el9sat
satellite-common< 0:6.16.3-2.el8sat | < 0:6.16.3-2.el9sat
scap-security-guide-satellite< 0:1.0.0-1.el8sat | < 0:1.0.0-1.el9sat

Show all 45

1 vendor · 45 products

References

41 links

Show all 41 references

issues.redhat.com/browse/SAT-30294ARTICLE
issues.redhat.com/browse/SAT-30918ARTICLE
issues.redhat.com/browse/SAT-30934ARTICLE
issues.redhat.com/browse/SAT-30936ARTICLE
issues.redhat.com/browse/SAT-30937ARTICLE
issues.redhat.com/browse/SAT-30938ARTICLE
issues.redhat.com/browse/SAT-30939ARTICLE
issues.redhat.com/browse/SAT-30940ARTICLE
issues.redhat.com/browse/SAT-30941ARTICLE
issues.redhat.com/browse/SAT-30942ARTICLE
issues.redhat.com/browse/SAT-30954ARTICLE
issues.redhat.com/browse/SAT-30955ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2399.jsonAdvisory
access.redhat.com/security/cve/CVE-2024-35195REPORT
bugzilla.redhat.com/show_bug.cgi?id=2282114REPORT
www.cve.org/CVERecord?id=CVE-2024-35195Advisory
nvd.nist.gov/vuln/detail/CVE-2024-35195Advisory
github.com/psf/requests/security/advisories/GHSA-9wx4-h78v-vm56ARTICLE
access.redhat.com/security/cve/CVE-2024-56326REPORT
www.cve.org/CVERecord?id=CVE-2024-56326Advisory
nvd.nist.gov/vuln/detail/CVE-2024-56326Advisory
github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4ARTICLE
github.com/pallets/jinja/releases/tag/3.1.5ARTICLE
github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7hARTICLE
access.redhat.com/security/cve/CVE-2024-56374REPORT
www.cve.org/CVERecord?id=CVE-2024-56374Advisory
nvd.nist.gov/vuln/detail/CVE-2024-56374Advisory
www.openwall.com/lists/oss-security/2025/01/14/2ARTICLE
docs.djangoproject.com/en/dev/releases/security/ARTICLE
groups.google.com/g/django-announceARTICLE
www.djangoproject.com/weblog/2025/jan/14/security-releases/ARTICLE