Red Hat Security Advisory

RHSA-2026:85249

Satellite 6 Client Update

Released 2026-10-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Satellite Client 6 for RHEL 10 openvox-agent-8.30.0-1.el10sat
Satellite Client 6 for RHEL 7 openvox-agent-8.30.0-1.el7sat
Satellite Client 6 for RHEL 8 openvox-agent-8.30.0-1.el8sat
Satellite Client 6 for RHEL 9 openvox-agent-8.30.0-1.el9sat

Fixes 1 record

TI-2026-45026 CVE-2026-63072 · GHSA-wp5f-6q39-q2f4

Heap Buffer Overflow in CMS Key Unwrapping

MEDIUM 41

Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00916 Published 2026-08-25 Partial fix · 4.0.2, 3.6.4 +4 CWE-787