Red Hat Satellite 6 client had an incomplete fix for CVE-2024-49761 in the puppet-agent component, which has been addressed by a new security update identified as CVE-2025-10990. The advisory indicates that updated packages are available to fix these bugs. The vulnerability is categorized under CWE-1333. The update is rated as having a moderate security impact. The vendor advisory recommends applying the updated packages after ensuring all previous errata are applied. The affected products include various Red Hat Enterprise Linux 8 and 9 variants and Extended Update Support versions. No CVSS score is provided for this vulnerability.

The vulnerability relates to an incomplete fix in the puppet-agent component of Red Hat Satellite, which could potentially allow security issues to persist if not updated. The security impact is rated as moderate by Red Hat Product Security. No known exploits in the wild have been reported. The vulnerability affects system management and provisioning capabilities, which could impact the secure configuration and maintenance of systems managed by Red Hat Satellite.

Red Hat has released updated puppet-agent packages that fully address the incomplete fix for CVE-2024-49761 (CVE-2025-10990). Users of Red Hat Satellite are advised to upgrade to these updated packages. Before applying this update, ensure all previously released errata relevant to the system have been applied. Detailed update instructions are available in the Red Hat Satellite documentation. No additional mitigation steps are indicated by the vendor advisory.