Red Hat Security AdvisoryRHSA-2026:50222
Satellite 6.17.10 Async Update
Released 2026-08-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.17 for RHEL 9 openvox-agent-8.24.1-3.el9sat, openvox-server-8.14.1-1.el9sat, python-pillow-12.3.0-1.el9pc +7
Fixes 10 records
Priority HIGH 74
In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funky-chunks.html * https://…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01305 · Published 2026-04-14 · Partial fix · 12.1.7, 12.0.33 +3 CWE-444
Priority HIGH 72
Pillow is a Python imaging library.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00518 · Published 2026-07-06 · Partial fix · 12.3.0 CWE-789
Priority HIGH 72
Pillow is a Python imaging library.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00522 · Published 2026-07-06 · Partial fix · 12.3.0 CWE-789
Priority HIGH 72
Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00757 · Published 2026-06-24 · Partial fix · 1.10.6, 2.14.3 CWE-674
Priority HIGH 72
Pillow is a Python imaging library.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00418 · Published 2026-07-06 · Partial fix · 12.3.0 CWE-789
Priority HIGH 72
Pillow is a Python imaging library.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0041 · Published 2026-07-06 · Partial fix · 12.3.0 CWE-789
Priority HIGH 68
PyJWT is a JSON Web Token implementation in Python.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00427 · Published 2026-05-28 · Partial fix · 2.13.0 CWE-287
Priority MEDIUM 52
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01499 · Published 2025-09-30 · Partial fix · 3.5.4, 3.4.3 +5 CWE-125
Priority LOW 19
A flaw was found in Katello's of Red Hat Satellite.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00223 · Published 2026-06-17 · Partial fix · 4.14.0.21-1.el8sat, 4.14.0.21-1.el9sat +4 CWE-862
Priority LOW 10
Nokogiri is an open source XML and HTML library for the Ruby programming language.
CVSS 4.0LOW 1.7· Network · No auth · No interaction · EPSS 0.00426 · Published 2026-06-25 · Partial fix · 1.19.4 CWE-416
THREATIST.IORead the docs