RHSA-2025:7624MediumCVSS 6.5

Red Hat Security Advisory: Satellite 6 Client Bug Fix Update

Published
May 14, 2025
Last Modified
August 4, 2026

🔗 CVE IDs covered (2)

CVE-2024-9355 →CVE-2024-45336 →

📋 Description

CVE-2024-9355 — golang-fips: Golang FIPS zeroed buffer CVE-2024-45336 — golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect

🎯 Affected products50

  • Satellite Client 6 for RHEL 10
  • Satellite Client 6 for RHEL 8
  • Satellite Client 6 for RHEL 9
  • foreman_scap_client_bash-0:0.2.0-2.el10sat.noarch as a component of Satellite Client 6 for RHEL 10
  • foreman_scap_client_bash-0:0.2.0-2.el10sat.src as a component of Satellite Client 6 for RHEL 10
  • foreman_scap_client_bash-0:0.2.0-2.el8sat.noarch as a component of Satellite Client 6 for RHEL 8
  • foreman_scap_client_bash-0:0.2.0-2.el8sat.src as a component of Satellite Client 6 for RHEL 8
  • foreman_scap_client_bash-0:0.2.0-2.el9sat.noarch as a component of Satellite Client 6 for RHEL 9
  • foreman_scap_client_bash-0:0.2.0-2.el9sat.src as a component of Satellite Client 6 for RHEL 9
  • foreman_ygg_migration-0:0.0.1-1.el10sat.aarch64 as a component of Satellite Client 6 for RHEL 10
  • foreman_ygg_migration-0:0.0.1-1.el10sat.ppc64le as a component of Satellite Client 6 for RHEL 10
  • foreman_ygg_migration-0:0.0.1-1.el10sat.s390x as a component of Satellite Client 6 for RHEL 10
  • foreman_ygg_migration-0:0.0.1-1.el10sat.src as a component of Satellite Client 6 for RHEL 10
  • foreman_ygg_migration-0:0.0.1-1.el10sat.x86_64 as a component of Satellite Client 6 for RHEL 10
  • foreman_ygg_worker-0:0.3.1-1.el10sat.aarch64 as a component of Satellite Client 6 for RHEL 10
  • foreman_ygg_worker-0:0.3.1-1.el10sat.ppc64le as a component of Satellite Client 6 for RHEL 10
  • foreman_ygg_worker-0:0.3.1-1.el10sat.s390x as a component of Satellite Client 6 for RHEL 10
  • foreman_ygg_worker-0:0.3.1-1.el10sat.src as a component of Satellite Client 6 for RHEL 10
  • foreman_ygg_worker-0:0.3.1-1.el10sat.x86_64 as a component of Satellite Client 6 for RHEL 10
  • foreman_ygg_worker-0:0.3.1-1.el8sat.aarch64 as a component of Satellite Client 6 for RHEL 8
  • foreman_ygg_worker-0:0.3.1-1.el8sat.ppc64le as a component of Satellite Client 6 for RHEL 8
  • foreman_ygg_worker-0:0.3.1-1.el8sat.s390x as a component of Satellite Client 6 for RHEL 8
  • foreman_ygg_worker-0:0.3.1-1.el8sat.src as a component of Satellite Client 6 for RHEL 8
  • foreman_ygg_worker-0:0.3.1-1.el8sat.x86_64 as a component of Satellite Client 6 for RHEL 8
  • foreman_ygg_worker-0:0.3.1-1.el9sat.aarch64 as a component of Satellite Client 6 for RHEL 9
  • foreman_ygg_worker-0:0.3.1-1.el9sat.ppc64le as a component of Satellite Client 6 for RHEL 9
  • foreman_ygg_worker-0:0.3.1-1.el9sat.s390x as a component of Satellite Client 6 for RHEL 9
  • foreman_ygg_worker-0:0.3.1-1.el9sat.src as a component of Satellite Client 6 for RHEL 9
  • foreman_ygg_worker-0:0.3.1-1.el9sat.x86_64 as a component of Satellite Client 6 for RHEL 9
  • katello-host-tools-0:4.4.0-1.el10sat.noarch as a component of Satellite Client 6 for RHEL 10
  • +20 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.16/html/updating_red_hat_satellite/index Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)