Red Hat Security AdvisoryRHSA-2026:14874
Satellite 6.16.8 Async Update
Released 2026-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.16 for RHEL 8 candlepin-4.4.25-1.el8sat, candlepin-selinux-4.4.25-1.el8sat, python-markdown-3.8.2-1.el8pc +6
- Red Hat Satellite 6.16 for RHEL 9 candlepin-4.4.25-1.el9sat, candlepin-selinux-4.4.25-1.el9sat, python-markdown-3.8.2-1.el9pc +6
Fixes 5 records
Priority HIGH 74
mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote `factoryClassLocation` values, by which code can be downl…
CVSS 4.0HIGH 8.9· Network · High privileges · No interaction · EPSS 0.00977 · Published 2026-02-25 · Partial fix · 0.4.0 CWE-74
Priority HIGH 72
Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00663 · Published 2026-03-05 · Partial fix · 3.8.1 CWE-400
Priority MEDIUM 45
Pillow is a Python imaging library.
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.00403 · Published 2026-02-11 · Partial fix · 12.1.1 CWE-787
Priority LOW 37
Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.
CVSS 4.0MEDIUM 6.6· Network · No auth · No interaction · EPSS 0.00858 · Published 2026-03-23 · Partial fix · 8.1.2.1, 8.0.4.1 +1 CWE-400
Priority LOW 35
pyOpenSSL is a Python wrapper around the OpenSSL library.
CVSS 4.0HIGH 7.2· Network · No auth · No interaction · EPSS 0.00748 · Published 2026-03-17 · Partial fix · 26.0.0 CWE-120
THREATIST.IORead the docs