Security
فارسی
All products

Red Hat Satellite 6/puppet-agent

Red Hat · Package
39 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
REXML has DoS condition when parsing malformed XML fileCVE-2025-58767 · GHSA-C2F4-JGMC-Q2R5 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundleLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator Red HatRubyGems Low Fix reported
URI gem has ReDoS vulnerabilityCVE-2023-36617 · GHSA-HWW2-5G85-429M Red Hat 3scale API Management Platform 2/3scale-amp2/system-rhel7Red Hat Enterprise Linux 8/ruby:3.0/ruby Red HatRubyGems Medium Fix reported
Ruby WEBrick read_headers method can lead to HTTP Request/Response SmugglingCVE-2025-6442 · GHSA-R995-Q44H-HR64 Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel8Logging Subsystem for Red Hat OpenShift/openshift-logging/fluentd-rhel9 Red HatRubyGems Medium Fix reported
puppetserver: openvox-agent: openvox-server: puppetserver: authenticated remote code execution via report event deserializationCVE-2026-115731 Red Hat Satellite 6/puppet-agentRed Hat Satellite 6/puppetserver Red Hat Critical No fix reported
curl: excessively long file name may lead to unknown HSTS statusCVE-2023-46219 Red Hat Satellite 6/puppet-agent Red Hat Medium No fix reported
curl: information disclosure by exploiting a mixed case flawCVE-2023-46218 Red Hat Satellite 6/puppet-agent Red Hat Medium No fix reported
libxml2: use-after-free in XMLReaderCVE-2024-25062 Red Hat Enterprise Linux 6/libxml2Red Hat Enterprise Linux 7/libxml2 Red Hat Medium No fix reported
openssl: Out-of-bounds read & write in RFC 3211 KEK UnwrapCVE-2025-9230 Multicluster Engine for Kubernetes/multicloud-operators-foundationMulticluster Engine for Kubernetes/multicluster-engine/hypershift-addon-rhel9-operator Red Hat Medium No fix reported
curl: curl: Cookie injection via malicious HTTP server using super cookiesCVE-2026-8924 Red Hat Enterprise Linux 6/curlRed Hat Enterprise Linux 7/curl Red Hat Medium No fix reported
resource_api: Puppet Core: Puppet Enterprise: Puppet resource_api: Cleartext storage of sensitive information due to improper flag preservationCVE-2026-8804 Red Hat OpenStack Platform 17.1/rubygem-puppet-resource_apiRed Hat Satellite 6/puppet-agent Red Hat Medium No fix reported
openssl: CMP indefinite cache growth of ExtraCertsCVE-2026-63074 Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9Red Hat Enterprise Linux 10/edk2 Red Hat Low No fix reported
openssl: excessive memory use buffering DTLS records for a future epochCVE-2026-54874 Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9Red Hat Enterprise Linux 10/edk2 Red Hat Low No fix reported
openssl: invalid pointer dereference in CMP server via crafted protectionAlgCVE-2026-63076 Red Hat JBoss Core Services/jbcs-httpd24-opensslRed Hat JBoss Core Services/jbcs-openssl-win6-x86_64.zip Red Hat Medium No fix reported
openssl: heap buffer overflow in CMS key unwrappingCVE-2026-63072 Red Hat Enterprise Linux 10/edk2Red Hat Enterprise Linux 7/ovmf Red Hat Medium No fix reported
openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()CVE-2026-75803 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 Red Hat Low No fix reported
curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attackCVE-2026-13608 Red Hat Enterprise Linux 10/curlRed Hat Satellite 6/openvox-agent Red Hat Low No fix reported
curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connectionsCVE-2026-18924 Confidential Compute Attestation/build-of-trustee/trustee-rhel9Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-payload-rhel9 Red Hat Low No fix reported
curl: curl: Public key pinning bypass allows unauthenticated connectionsCVE-2026-80230 Red Hat Enterprise Linux 10/curlRed Hat Enterprise Linux 8/curl Red Hat Low No fix reported
openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmissionCVE-2026-84782 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9Confidential Compute Attestation/agent-sandbox/agent-sandbox-router Red Hat High No fix reported
openssl: openssl: Denial of Service via excessive memory allocation in CRL distribution point processingCVE-2026-35189 Red Hat Developer Hub 1/rhdh/rhdh-hub-rhel9Red Hat Enterprise Linux 10/edk2 Red Hat Low No fix reported