Red Hat Security AdvisoryRHSA-2026:14835
Satellite 6.18.5 Async Update
Released 2026-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.18 for RHEL 9 python3.12-django-4.2.30-1.el9pc, python3.12-markdown-3.8.2-1.el9pc, python3.12-pyOpenSSL-26.0.0-2.el9pc +1
Fixes 8 records
Priority HIGH 72
Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00663 · Published 2026-03-05 · Partial fix · 3.8.1 CWE-400
Priority MEDIUM 41
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01112 · Published 2026-02-03 · Partial fix · 6.0.2, 5.2.11 +1 CWE-407
Priority MEDIUM 41
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01112 · Published 2026-02-03 · Partial fix · 6.0.2, 5.2.11 +2 CWE-407
Priority LOW 39
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.12819 · Published 2026-02-03 · Partial fix · 6.0.2, 5.2.11 +1 CWE-89
Priority LOW 37
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.00858 · Published 2026-03-23 · Partial fix · 8.1.2.1, 8.0.4.1 +1 CWE-400
Priority LOW 35
pyOpenSSL is a Python wrapper around the OpenSSL library.
CVSS 4.0HIGH 7.2· Network · No auth · No interaction · EPSS 0.00748 · Published 2026-03-17 · Partial fix · 26.0.0 CWE-120
Priority LOW 26
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00897 · Published 2026-02-03 · Partial fix · 6.0.2, 5.2.11 +1 CWE-89
Priority LOW 26
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00843 · Published 2026-02-03 · Partial fix · 6.0.2, 5.2.11 +1 CWE-89
THREATIST.IORead the docs