Read the docs
Red Hat Security Advisory

RHSA-2026:74504

Satellite 6.18.10 Async Update

Released 2026-10-01 · Red Hat rating Critical · View on Red Hat →

Fixed in

Fixes 26 records

TI-2026-30536 CVE-2026-42215 · GHSA-rpm5-65cw-6hj4

GitPython: Command injection via Git options bypass

Priority HIGH 73

GitPython is a python library used to interact with Git repositories.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00749 Published 2026-05-07 Partial fix · 3.1.47 CWE-78
TI-2026-54691 CVE-2026-78679 · GHSA-3wxw-xv34-2frg

GitPython before 3.1.59 Arbitrary File Read via TagReference.create

Priority MEDIUM 64

GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe option guard.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00316 Published 2026-08-25 Partial fix · 3.1.59 CWE-73
TI-2026-59934 CVE-2026-87817 · GHSA-239g-whfq-7xj9

GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation

Priority MEDIUM 46

GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00419 Published 2026-09-09 Partial fix · 3.1.60 CWE-94
TI-2026-40993 CVE-2026-56853 · GHSA-xphw-4f88-5f39

Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http

Priority MEDIUM 40

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00568 Published 2026-08-13 Partial fix · 1.25.13, 1.26.6 +1 CWE-770
TI-2026-30787 CVE-2026-42504 · GHSA-h524-452v-82p9

Quadratic complexity in WordDecoder.DecodeHeader in mime

Priority MEDIUM 40

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0056 Published 2026-06-02 Partial fix · 1.25.11, 1.26.4 CWE-407
TI-2026-26189 CVE-2026-33818 · GHSA-xc2p-8ggw-6cr5

Enforce maximum recursion depth in encoding/asn1

Priority MEDIUM 40

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00568 Published 2026-08-13 Partial fix · 1.25.13, 1.26.6 +1 CWE-400
TI-2026-10760 CVE-2026-12542 · GHSA-79jg-9wx4-f5rr

Foreman: command injection in foreman-tail

Priority LOW 35

A flaw was found in Foreman.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00563 Published 2026-10-01 Partial fix · 3.12.0.23-1.el8sat, 3.12.0.23-1.el9sat +3 CWE-78
TI-2026-40998 CVE-2026-56860 · GHSA-25mv-j2qr-v5jq

Avoid quadratic complexity in resolvePath in net/url

Priority LOW 27

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0055 Published 2026-08-13 Partial fix · 1.25.13, 1.26.6 +1 CWE-407
TI-2026-40996 CVE-2026-56858 · GHSA-c974-w86c-vpfw

Fix Javascript regexp context tracking in html/template

Priority LOW 27

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0031 Published 2026-08-13 Partial fix · 1.25.13, 1.26.6 +1 CWE-79
TI-2026-55153 CVE-2026-79654 · GHSA-xqhp-pxqr-f7m6

Ketello: katello content view history api cross-organization authorization bypass

Priority LOW 20

A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specified by the user.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00381 Published 2026-08-26 Partial fix · 4.14.0.23-1.el8sat, 4.14.0.23-1.el9sat +3 CWE-639