Red Hat Security Advisory

RHSA-2026:6291

General availability of the satellite/iop-advisor-backend-rhel9 container image

Released 2026-03-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-advisor-backend-rhel9

Fixes 5 records

TI-2026-01001 CVE-2026-1285 · GHSA-4rrr-2h4v-f3j9

Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods

MEDIUM 41

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01112 Published 2026-02-03 Partial fix · 6.0.2, 5.2.11 +1 CWE-407

TI-2025-13292 CVE-2025-14550 · GHSA-33mw-q7rj-mjwj

Potential denial-of-service vulnerability via repeated headers when using ASGI

MEDIUM 41

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01112 Published 2026-02-03 Partial fix · 6.0.2, 5.2.11 +2 CWE-407

TI-2026-00932 CVE-2026-1207 · GHSA-mwm9-4648-f68q

Potential SQL injection via raster lookups on PostGIS

LOW 39

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.12819 Published 2026-02-03 Partial fix · 6.0.2, 5.2.11 +1 CWE-89

TI-2026-01025 CVE-2026-1312 · GHSA-6426-9fv3-65x8

Potential SQL injection via QuerySet.order_by and FilteredRelation

LOW 26

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00897 Published 2026-02-03 Partial fix · 6.0.2, 5.2.11 +1 CWE-89

TI-2026-01003 CVE-2026-1287 · GHSA-gvg8-93h5-g6qq

Potential SQL injection in column aliases via control characters

LOW 26

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00843 Published 2026-02-03 Partial fix · 6.0.2, 5.2.11 +1 CWE-89