Red Hat Security AdvisoryRHSA-2026:34365
Satellite 6.19.2 Async Update
Released 2026-07-01 · Red Hat rating Important · View on Red Hat →
Fixes 13 records
Priority HIGH 74
mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote `factoryClassLocation` values, by which code can be downl…
CVSS 4.0HIGH 8.9· Network · High privileges · No interaction · EPSS 0.00977 · Published 2026-02-25 · Partial fix · 0.4.0 CWE-74
Priority HIGH 68
PyJWT is a JSON Web Token implementation in Python.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00427 · Published 2026-05-28 · Partial fix · 2.13.0 CWE-287
Priority MEDIUM 45
Pillow is a Python imaging library.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00671 · Published 2026-04-15 · Partial fix · 12.2.0 CWE-400
Priority MEDIUM 42
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00346 · Published 2026-04-08 · Partial fix · 1.26.2 CWE-295
Priority MEDIUM 41
A flaw was found in Foreman.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00555 · Published 2026-07-01 · Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-266
Priority MEDIUM 40
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00632 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-770
Priority MEDIUM 40
During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00626 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-770
Priority MEDIUM 40
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00827 · Published 2026-03-06 · Partial fix · 1.25.8, 1.26.1 CWE-425
Priority LOW 39
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00361 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-295
Priority LOW 30
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00297 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-59
Priority LOW 29
A flaw was found in foreman.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00445 · Published 2026-07-01 · Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639
Priority LOW 29
A flaw was found in Foreman.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00431 · Published 2026-07-01 · Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639
Priority LOW 20
A flaw was found in Foreman.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0038 · Published 2026-07-01 · Partial fix · 3.12.0.17-1.el8sat, 3.12.0.17-1.el9sat +3 CWE-639
THREATIST.IORead the docs