Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-4324 (GCVE-0-2026-4324)
Vulnerability from cvelistv5 – Published: 2026-03-17 13:52 – Updated: 2026-03-26 23:10- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
| URL | Tags | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||
| Vendor | Product | Version | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 |
Unaffected:
0:3.14.0.14-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite_capsule:6.17::el9 cpe:/a:redhat:satellite:6.17::el9 cpe:/a:redhat:satellite_maintenance:6.17::el9 cpe:/a:redhat:satellite_utils:6.17::el9 |
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-4324",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-17T14:26:51.385589Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-17T14:26:57.579Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "foreman",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.14.0.14-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "libcomps",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.1.23-0.3.el9pc",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "python-brotli",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.2.0-0.1.el9pc",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "python-django",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.28-0.1.el9pc",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "python-pulp-container",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.22.3-1.el9pc",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "python-pulp-rpm",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.27.10-2.el9pc",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "rubygem-fog-kubevirt",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.5.1-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "rubygem-foreman_kubevirt",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.3-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "rubygem-katello",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.16.0.14-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "rubygem-rubyipmi",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.13.0-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "satellite",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:6.17.7-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.3-4.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "foreman",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.14.0.14-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "libcomps",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.1.23-0.3.el9pc",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "python-brotli",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.2.0-0.1.el9pc",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "python-django",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.28-0.1.el9pc",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "python-pulp-container",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:2.22.3-1.el9pc",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "python-pulp-rpm",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:3.27.10-2.el9pc",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "rubygem-fog-kubevirt",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.5.1-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "rubygem-foreman_kubevirt",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.3-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "rubygem-katello",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.16.0.14-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "rubygem-rubyipmi",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.13.0-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "satellite",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:6.17.7-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_capsule:6.17::el9",
"cpe:/a:redhat:satellite:6.17::el9",
"cpe:/a:redhat:satellite_maintenance:6.17::el9",
"cpe:/a:redhat:satellite_utils:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.3-4.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite_utils:6.18::el9",
"cpe:/a:redhat:satellite:6.18::el9",
"cpe:/a:redhat:satellite_capsule:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "rubygem-katello",
"product": "Red Hat Satellite 6.18 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.18.0.9-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite:el8/rubygem-katello",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
}
],
"datePublic": "2026-03-17T13:18:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Moderate"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-26T23:10:28.361Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2026:5968",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"name": "RHSA-2026:5970",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-4324"
},
{
"name": "RHBZ#2448349",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448349"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-17T12:28:40.127Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-03-17T13:18:00.000Z",
"value": "Made public."
}
],
"title": "Rubygem-katello: katello: denial of service and potential information disclosure via sql injection",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
}
],
"x_generator": {
"engine": "cvelib 1.8.0"
},
"x_redhatCweChain": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2026-4324",
"datePublished": "2026-03-17T13:52:14.756Z",
"dateReserved": "2026-03-17T12:30:29.903Z",
"dateUpdated": "2026-03-26T23:10:28.361Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2026-4324\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2026-03-17T14:16:19.777\",\"lastModified\":\"2026-03-27T00:16:23.800\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.\"},{\"lang\":\"es\",\"value\":\"Se encontr\u00f3 un defecto en el plugin Katello para Red Hat Satellite. Esta vulnerabilidad, causada por un saneamiento inadecuado de la entrada proporcionada por el usuario, permite a un atacante remoto inyectar comandos SQL arbitrarios en el par\u00e1metro sort_by del endpoint de la API /api/hosts/bootc_images. Esto puede conducir a una Denegaci\u00f3n de Servicio (DoS) al desencadenar errores en la base de datos, y potencialmente habilitar la inyecci\u00f3n SQL ciega basada en booleanos, lo que podr\u00eda permitir a un atacante extraer informaci\u00f3n sensible de la base de datos.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":2.8,\"impactScore\":2.5}]},\"weaknesses\":[{\"source\":\"secalert@redhat.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-89\"}]}],\"references\":[{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5968\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:5970\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-4324\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2448349\",\"source\":\"secalert@redhat.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-4324\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-17T14:26:51.385589Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-17T14:26:54.303Z\"}}], \"cna\": {\"title\": \"Rubygem-katello: katello: denial of service and potential information disclosure via sql injection\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Moderate\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.4, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"LOW\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.14.0.14-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"foreman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.1.23-0.3.el9pc\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libcomps\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.2.0-0.1.el9pc\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"python-brotli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.2.28-0.1.el9pc\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"python-django\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.22.3-1.el9pc\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"python-pulp-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.27.10-2.el9pc\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"python-pulp-rpm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.5.1-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rubygem-fog-kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.3-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rubygem-foreman_kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.16.0.14-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rubygem-katello\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.13.0-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rubygem-rubyipmi\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:6.17.7-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.3-4.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.14.0.14-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"foreman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.1.23-0.3.el9pc\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"libcomps\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.2.0-0.1.el9pc\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"python-brotli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.2.28-0.1.el9pc\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"python-django\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:2.22.3-1.el9pc\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"python-pulp-container\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:3.27.10-2.el9pc\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"python-pulp-rpm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.5.1-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rubygem-fog-kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.3-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rubygem-foreman_kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.16.0.14-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rubygem-katello\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.13.0-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rubygem-rubyipmi\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:6.17.7-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"satellite\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_capsule:6.17::el9\", \"cpe:/a:redhat:satellite:6.17::el9\", \"cpe:/a:redhat:satellite_maintenance:6.17::el9\", \"cpe:/a:redhat:satellite_utils:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.3-4.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite_utils:6.18::el9\", \"cpe:/a:redhat:satellite:6.18::el9\", \"cpe:/a:redhat:satellite_capsule:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.18.0.9-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rubygem-katello\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/rubygem-katello\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-17T12:28:40.127Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-17T13:18:00.000Z\", \"value\": \"Made public.\"}], \"datePublic\": \"2026-03-17T13:18:00.000Z\", \"references\": [{\"url\": \"https://access.redhat.com/errata/RHSA-2026:5968\", \"name\": \"RHSA-2026:5968\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:5970\", \"name\": \"RHSA-2026:5970\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/security/cve/CVE-2026-4324\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2448349\", \"name\": \"RHBZ#2448349\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-89\", \"description\": \"Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"shortName\": \"redhat\", \"dateUpdated\": \"2026-03-26T23:10:28.361Z\"}, \"x_redhatCweChain\": \"CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)\"}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-4324\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-03-26T23:10:28.361Z\", \"dateReserved\": \"2026-03-17T12:30:29.903Z\", \"assignerOrgId\": \"53f830b8-0a3f-465b-8143-3b8a9948e749\", \"datePublished\": \"2026-03-17T13:52:14.756Z\", \"assignerShortName\": \"redhat\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
FKIE_CVE-2026-4324
Vulnerability from fkie_nvd - Published: 2026-03-17 14:16 - Updated: 2026-03-27 00:16| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database."
},
{
"lang": "es",
"value": "Se encontr\u00f3 un defecto en el plugin Katello para Red Hat Satellite. Esta vulnerabilidad, causada por un saneamiento inadecuado de la entrada proporcionada por el usuario, permite a un atacante remoto inyectar comandos SQL arbitrarios en el par\u00e1metro sort_by del endpoint de la API /api/hosts/bootc_images. Esto puede conducir a una Denegaci\u00f3n de Servicio (DoS) al desencadenar errores en la base de datos, y potencialmente habilitar la inyecci\u00f3n SQL ciega basada en booleanos, lo que podr\u00eda permitir a un atacante extraer informaci\u00f3n sensible de la base de datos."
}
],
"id": "CVE-2026-4324",
"lastModified": "2026-03-27T00:16:23.800",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 2.5,
"source": "secalert@redhat.com",
"type": "Secondary"
}
]
},
"published": "2026-03-17T14:16:19.777",
"references": [
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"source": "secalert@redhat.com",
"url": "https://access.redhat.com/security/cve/CVE-2026-4324"
},
{
"source": "secalert@redhat.com",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448349"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-89"
}
],
"source": "secalert@redhat.com",
"type": "Secondary"
}
]
}
RHSA-2026:5968
Vulnerability from csaf_redhat - Published: 2026-03-26 19:47 - Updated: 2026-03-30 14:49A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.
A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.
A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite and OpenShift, to perform a Man-in-the-Middle (MITM) attack. Such an attack could lead to the disclosure or alteration of sensitive information.
A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.
A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new release is now available for Red Hat Satellite 6.18 for RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* yggdrasil-worker-forwarder: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)\n* yggdrasil-worker-forwarder: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n* yggdrasil-worker-forwarder: Unexpected session resumption in crypto/tls (CVE-2025-68121)\n* rubygem-rubyipmi: Remote Code Execution in rubyipmi via malicious BMC username (CVE-2026-0980)\n* rubygem-foreman_kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification (CVE-2026-1531)\n* foreman: Foreman: Remote Code Execution via command injection in WebSocket proxy (CVE-2026-1961)\n* rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection (CVE-2026-4324)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:5968",
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "SAT-41530",
"url": "https://issues.redhat.com/browse/SAT-41530"
},
{
"category": "external",
"summary": "SAT-42707",
"url": "https://issues.redhat.com/browse/SAT-42707"
},
{
"category": "external",
"summary": "SAT-42708",
"url": "https://issues.redhat.com/browse/SAT-42708"
},
{
"category": "external",
"summary": "SAT-42710",
"url": "https://issues.redhat.com/browse/SAT-42710"
},
{
"category": "external",
"summary": "SAT-42711",
"url": "https://issues.redhat.com/browse/SAT-42711"
},
{
"category": "external",
"summary": "SAT-42712",
"url": "https://issues.redhat.com/browse/SAT-42712"
},
{
"category": "external",
"summary": "SAT-42713",
"url": "https://issues.redhat.com/browse/SAT-42713"
},
{
"category": "external",
"summary": "SAT-42714",
"url": "https://issues.redhat.com/browse/SAT-42714"
},
{
"category": "external",
"summary": "SAT-42715",
"url": "https://issues.redhat.com/browse/SAT-42715"
},
{
"category": "external",
"summary": "SAT-42716",
"url": "https://issues.redhat.com/browse/SAT-42716"
},
{
"category": "external",
"summary": "SAT-42717",
"url": "https://issues.redhat.com/browse/SAT-42717"
},
{
"category": "external",
"summary": "SAT-42718",
"url": "https://issues.redhat.com/browse/SAT-42718"
},
{
"category": "external",
"summary": "SAT-43310",
"url": "https://issues.redhat.com/browse/SAT-43310"
},
{
"category": "external",
"summary": "SAT-43742",
"url": "https://issues.redhat.com/browse/SAT-43742"
},
{
"category": "external",
"summary": "SAT-43743",
"url": "https://issues.redhat.com/browse/SAT-43743"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5968.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.18.4 Async Update",
"tracking": {
"current_release_date": "2026-03-30T14:49:18+00:00",
"generator": {
"date": "2026-03-30T14:49:18+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.4"
}
},
"id": "RHSA-2026:5968",
"initial_release_date": "2026-03-26T19:47:53+00:00",
"revision_history": [
{
"date": "2026-03-26T19:47:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-03-26T19:47:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-03-30T14:49:18+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.18::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.18::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.18::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-0:3.16.0.12-1.el9sat.src",
"product": {
"name": "foreman-0:3.16.0.12-1.el9sat.src",
"product_id": "foreman-0:3.16.0.12-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.16.0.12-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.16.0.6-1.el9sat.src",
"product": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.src",
"product_id": "foreman-installer-1:3.16.0.6-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.16.0.6-1.el9sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-0:4.2.29-1.el9pc.src",
"product": {
"name": "python3.12-django-0:4.2.29-1.el9pc.src",
"product_id": "python3.12-django-0:4.2.29-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django@4.2.29-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"product": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"product_id": "python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.24.5-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"product": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"product_id": "python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.73.26-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"product": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"product_id": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-rpm@3.29.9-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"product": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"product_id": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_kubevirt@0.4.3-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.src",
"product": {
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.src",
"product_id": "rubygem-katello-0:4.18.0.9-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.18.0.9-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"product": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"product_id": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rubyipmi@0.13.0-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.18.4-2.el9sat.src",
"product": {
"name": "satellite-0:6.18.4-2.el9sat.src",
"product_id": "satellite-0:6.18.4-2.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.18.4-2.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"product": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"product_id": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-4.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"product": {
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"product_id": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@12.2.17-1.el9sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-pcp@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-redis@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-service@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"product": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"product_id": "foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.16.0.6-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"product": {
"name": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"product_id": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer-katello@3.16.0.6-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-0:4.2.29-1.el9pc.noarch",
"product": {
"name": "python3.12-django-0:4.2.29-1.el9pc.noarch",
"product_id": "python3.12-django-0:4.2.29-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django@4.2.29-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"product": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"product_id": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.24.5-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"product": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"product_id": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.73.26-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"product": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"product_id": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-rpm@3.29.9-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"product": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"product_id": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_kubevirt@0.4.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"product": {
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"product_id": "rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.18.0.9-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"product": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"product_id": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rubyipmi@0.13.0-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"product": {
"name": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"product_id": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.18.4-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"product": {
"name": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"product_id": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.18.4-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.18.4-2.el9sat.noarch",
"product": {
"name": "satellite-common-0:6.18.4-2.el9sat.noarch",
"product_id": "satellite-common-0:6.18.4-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.18.4-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"product": {
"name": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"product_id": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-obsolete-packages@6.18.4-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.18.4-2.el9sat.noarch",
"product": {
"name": "satellite-0:6.18.4-2.el9sat.noarch",
"product_id": "satellite-0:6.18.4-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.18.4-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"product": {
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"product_id": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@12.2.17-1.el9sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"product": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"product_id": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-4.el9sat?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src"
},
"product_reference": "foreman-installer-1:3.16.0.6-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-0:4.2.29-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch"
},
"product_reference": "python3.12-django-0:4.2.29-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-0:4.2.29-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src"
},
"product_reference": "python3.12-django-0:4.2.29-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch"
},
"product_reference": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src"
},
"product_reference": "python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch"
},
"product_reference": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src"
},
"product_reference": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src"
},
"product_reference": "python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src"
},
"product_reference": "foreman-installer-1:3.16.0.6-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-0:4.2.29-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch"
},
"product_reference": "python3.12-django-0:4.2.29-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-0:4.2.29-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src"
},
"product_reference": "python3.12-django-0:4.2.29-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch"
},
"product_reference": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src"
},
"product_reference": "python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch"
},
"product_reference": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src"
},
"product_reference": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src"
},
"product_reference": "python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src"
},
"product_reference": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src"
},
"product_reference": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch"
},
"product_reference": "rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src"
},
"product_reference": "rubygem-katello-0:4.18.0.9-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src"
},
"product_reference": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
},
"product_reference": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: Unexpected session resumption in crypto/tls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: Unexpected session resumption in crypto/tls"
},
{
"cve": "CVE-2026-0980",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-01-15T08:50:01.841000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2429874"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat Satellite because it requires the BMC component to be enabled and configured to use `ipmitool` as the IPMI implementation. An authenticated attacker with host creation or update permissions can exploit this by crafting a malicious BMC username. Exploitation is limited to environments meeting these specific configuration and permission requirements.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-0980"
},
{
"category": "external",
"summary": "RHBZ#2429874",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429874"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0980"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0980",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0980"
}
],
"release_date": "2020-01-15T08:08:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username"
},
{
"acknowledgments": [
{
"names": [
"Evgeni Golov"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-1531",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-01-28T12:50:13.269000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2433786"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite and OpenShift, to perform a Man-in-the-Middle (MITM) attack. Such an attack could lead to the disclosure or alteration of sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw in foreman_kubevirt where the default configuration for connecting to OpenShift disables SSL verification if a CA certificate is not explicitly provided. This insecure default allows a remote attacker to perform a Man-in-the-Middle attack by intercepting network traffic between Satellite and OpenShift, potentially leading to information disclosure or alteration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1531"
},
{
"category": "external",
"summary": "RHBZ#2433786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1531",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1531"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1531",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1531"
}
],
"release_date": "2026-01-28T12:34:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that a Certificate Authority (CA) certificate is explicitly configured when setting up the connection to OpenShift in foreman_kubevirt. This will enable SSL verification and prevent Man-in-the-Middle attacks. Refer to the foreman_kubevirt documentation for specific instructions on configuring CA certificates. A restart or service reload may be required for the changes to take effect.",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification"
},
{
"acknowledgments": [
{
"names": [
"Houssam Sahli"
]
}
],
"cve": "CVE-2026-1961",
"discovery_date": "2026-02-05T10:40:57.141000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437036"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman\u0027s WebSocket proxy implementation. This vulnerability arises from the system\u0027s use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "forman: Foreman: Remote Code Execution via command injection in WebSocket proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue was rated as Important. Command injection vulnerability in Foreman\u0027s WebSocket proxy. Exploitation occurs when an administrator configures a malicious compute resource server and subsequently accesses its VM console functionality. Successful exploitation can lead to remote code execution on the Foreman server, potentially compromising sensitive credentials and the entire managed infrastructure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1961"
},
{
"category": "external",
"summary": "RHBZ#2437036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437036"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1961"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1961",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1961"
}
],
"release_date": "2026-03-26T12:30:45.446000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "forman: Foreman: Remote Code Execution via command injection in WebSocket proxy"
},
{
"cve": "CVE-2026-4324",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-03-17T12:28:40.127000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448349"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in the Katello plugin for Red Hat Satellite allows an attacker to inject arbitrary SQL commands into the `/api/hosts/bootc_images` API endpoint. By manipulating the `sort_by` parameter, an attacker could trigger database errors, cause a Denial of Service, or potentially perform Boolean-based Blind SQL injection. This affects Red Hat Satellite installations utilizing the Katello plugin.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4324"
},
{
"category": "external",
"summary": "RHBZ#2448349",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448349"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4324",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4324"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4324",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4324"
}
],
"release_date": "2026-03-17T13:18:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection"
}
]
}
RHSA-2026:5970
Vulnerability from csaf_redhat - Published: 2026-03-26 20:28 - Updated: 2026-03-27 11:23Scrapy are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of available memory. This occurs because brotli can achieve extremely high compression ratios for zero-filled data, leading to excessive memory consumption during decompression.
A flaw was found in Django. A remote attacker can exploit this vulnerability by sending a crafted request containing multiple duplicate headers to the ASGIRequest component. This can lead to a potential Denial of Service (DoS), making the affected system unavailable to legitimate users.
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.
A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.
A flaw was found in Django. A remote attacker could inject SQL commands by manipulating the band index parameter during raster lookups on `RasterField` (only implemented on PostGIS). This SQL injection vulnerability could lead to unauthorized information disclosure, data alteration, or denial of service.
A flaw was found in Django. A remote attacker can exploit this vulnerability by providing crafted inputs containing a large number of unmatched HTML end tags to the `django.utils.text.Truncator.chars()` and `Truncator.words()` methods (when `html=True`), or through the `truncatechars_html` and `truncatewords_html` template filters. This can lead to a denial-of-service (DoS) condition, making the application unavailable to legitimate users.
A flaw was found in Django. This vulnerability allows a remote attacker to perform SQL injection by using specially crafted control characters within column aliases. When these crafted aliases are passed through dictionary expansion to `QuerySet` methods like `annotate()` or `values()`, it can lead to the execution of arbitrary SQL commands. This could result in unauthorized access to sensitive data or modification of information within the database.
A flaw was found in Django. A remote attacker could exploit a SQL injection vulnerability in the `.QuerySet.order_by()` method. This occurs when column aliases containing periods are used, and the same alias is also present in `FilteredRelation` via a specially crafted dictionary. Successful exploitation could lead to unauthorized information disclosure or arbitrary code execution within the database.
A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.
A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite and OpenShift, to perform a Man-in-the-Middle (MITM) attack. Such an attack could lead to the disclosure or alteration of sensitive information.
A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.
A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.
| URL | Category | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new release is now available for Red Hat Satellite 6.17 for RHEL 9.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* python-django: Django: SQL Injection via crafted column aliases (CVE-2026-1287)\n\n* python-django: Django: SQL Injection via RasterField band index parameter (CVE-2026-1207)\n\n* python-django: Django: Denial of Service via crafted HTML inputs (CVE-2026-1285)\n\n* python-django: Django: SQL injection via crafted column aliases in QuerySet.order_by() (CVE-2026-1312)\n\n* python-django: Django: Denial of Service via crafted request with duplicate headers (CVE-2025-14550)\n\n* python-brotli: Brotli decompression bomb DoS in scrapy/scrapy (CVE-2025-6176)\n\n* rubygem-foreman_kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification (CVE-2026-1531)\n\n* rubygem-fog-kubevirt: fog-kubevirt: Man-in-the-Middle vulnerability due to disabled certificate validation (CVE-2026-1530)\n\n* rubygem-rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username (CVE-2026-0980)\n\n* foreman: Foreman: Remote Code Execution via command injection in WebSocket proxy (CVE-2026-1961)\n\n* yggdrasil-worker-forwarder: Unexpected session resumption in crypto/tls (CVE-2025-68121)\n\n* Katello: Denial of Service and potential information disclosure via SQL injection (CVE-2026-4324)\n\nBug Fix(es):\n\n* High memory usage of postgres processes on scaled Capsule (SAT-42871)\n\n* AttributeError: \u0027NoneType\u0027 object has no attribute \u0027_artifacts\u0027 when running pulpcore-container-handle-image-metadata in the post-upgrade step for Satellite 6.17 (SAT-42873)\n\n* Lifecycle Environment shows 2 Library options (SAT-42881)\n\n* Executing foreman-rake command in the satellite, prints warning \"W, [2025-08-28T14:25:04.030121 #11656] WARN -- : Scoped order is ignored, it\u0027s forced to be batch order.\" (SAT-42882)\n\n* Upgrade to Sat 6.16 does not cleanup Postgresql12 which is reported as security risk/vulnerability by the scanners on Sat 6.17 \u0026 6.18. (SAT-43118)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:5970",
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2408762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408762"
},
{
"category": "external",
"summary": "2429874",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429874"
},
{
"category": "external",
"summary": "2433784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433784"
},
{
"category": "external",
"summary": "2433786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433786"
},
{
"category": "external",
"summary": "2436338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436338"
},
{
"category": "external",
"summary": "2436339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436339"
},
{
"category": "external",
"summary": "2436340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436340"
},
{
"category": "external",
"summary": "2436341",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436341"
},
{
"category": "external",
"summary": "2436342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436342"
},
{
"category": "external",
"summary": "2437036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437036"
},
{
"category": "external",
"summary": "2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "2448349",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448349"
},
{
"category": "external",
"summary": "SAT-42871",
"url": "https://issues.redhat.com/browse/SAT-42871"
},
{
"category": "external",
"summary": "SAT-42873",
"url": "https://issues.redhat.com/browse/SAT-42873"
},
{
"category": "external",
"summary": "SAT-42881",
"url": "https://issues.redhat.com/browse/SAT-42881"
},
{
"category": "external",
"summary": "SAT-42882",
"url": "https://issues.redhat.com/browse/SAT-42882"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5970.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.17.7 Async Update",
"tracking": {
"current_release_date": "2026-03-27T11:23:09+00:00",
"generator": {
"date": "2026-03-27T11:23:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.4"
}
},
"id": "RHSA-2026:5970",
"initial_release_date": "2026-03-26T20:28:38+00:00",
"revision_history": [
{
"date": "2026-03-26T20:28:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-03-26T20:28:38+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-03-27T11:23:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.17::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.17::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.17::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_maintenance:6.17::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-0:3.14.0.14-1.el9sat.src",
"product": {
"name": "foreman-0:3.14.0.14-1.el9sat.src",
"product_id": "foreman-0:3.14.0.14-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.14.0.14-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "libcomps-0:0.1.23-0.3.el9pc.src",
"product": {
"name": "libcomps-0:0.1.23-0.3.el9pc.src",
"product_id": "libcomps-0:0.1.23-0.3.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcomps@0.1.23-0.3.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-brotli-0:1.2.0-0.1.el9pc.src",
"product": {
"name": "python-brotli-0:1.2.0-0.1.el9pc.src",
"product_id": "python-brotli-0:1.2.0-0.1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-brotli@1.2.0-0.1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-django-0:4.2.28-0.1.el9pc.src",
"product": {
"name": "python-django-0:4.2.28-0.1.el9pc.src",
"product_id": "python-django-0:4.2.28-0.1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-django@4.2.28-0.1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulp-container-0:2.22.3-1.el9pc.src",
"product": {
"name": "python-pulp-container-0:2.22.3-1.el9pc.src",
"product_id": "python-pulp-container-0:2.22.3-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-container@2.22.3-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulp-rpm-0:3.27.10-2.el9pc.src",
"product": {
"name": "python-pulp-rpm-0:3.27.10-2.el9pc.src",
"product_id": "python-pulp-rpm-0:3.27.10-2.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulp-rpm@3.27.10-2.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"product": {
"name": "rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"product_id": "rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-fog-kubevirt@1.5.1-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"product": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"product_id": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_kubevirt@0.4.3-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"product": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"product_id": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rubyipmi@0.13.0-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.17.7-1.el9sat.src",
"product": {
"name": "satellite-0:6.17.7-1.el9sat.src",
"product_id": "satellite-0:6.17.7-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.17.7-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"product": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"product_id": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-4.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.16.0.14-1.el9sat.src",
"product": {
"name": "rubygem-katello-0:4.16.0.14-1.el9sat.src",
"product_id": "rubygem-katello-0:4.16.0.14-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.16.0.14-1.el9sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-pcp@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ovirt@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-redis@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-service-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-service-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-service-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-service@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"product": {
"name": "foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"product_id": "foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@3.14.0.14-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"product": {
"name": "python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"product_id": "python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-django@4.2.28-0.1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"product": {
"name": "python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"product_id": "python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-pulp-container@2.22.3-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"product": {
"name": "python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"product_id": "python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-pulp-rpm@3.27.10-2.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"product": {
"name": "rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"product_id": "rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-fog-kubevirt@1.5.1-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"product": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"product_id": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_kubevirt@0.4.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"product": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"product_id": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rubyipmi@0.13.0-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.17.7-1.el9sat.noarch",
"product": {
"name": "satellite-capsule-0:6.17.7-1.el9sat.noarch",
"product_id": "satellite-capsule-0:6.17.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.17.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.17.7-1.el9sat.noarch",
"product": {
"name": "satellite-common-0:6.17.7-1.el9sat.noarch",
"product_id": "satellite-common-0:6.17.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.17.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"product": {
"name": "satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"product_id": "satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-obsolete-packages@6.17.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.17.7-1.el9sat.noarch",
"product": {
"name": "satellite-0:6.17.7-1.el9sat.noarch",
"product_id": "satellite-0:6.17.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.17.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.17.7-1.el9sat.noarch",
"product": {
"name": "satellite-cli-0:6.17.7-1.el9sat.noarch",
"product_id": "satellite-cli-0:6.17.7-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.17.7-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"product": {
"name": "rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"product_id": "rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.16.0.14-1.el9sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libcomps-0:0.1.23-0.3.el9pc.x86_64",
"product": {
"name": "libcomps-0:0.1.23-0.3.el9pc.x86_64",
"product_id": "libcomps-0:0.1.23-0.3.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcomps@0.1.23-0.3.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"product": {
"name": "python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"product_id": "python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libcomps@0.1.23-0.3.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"product": {
"name": "python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"product_id": "python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-libcomps@0.1.23-0.3.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"product": {
"name": "libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"product_id": "libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcomps-debugsource@0.1.23-0.3.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"product": {
"name": "libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"product_id": "libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/libcomps-debuginfo@0.1.23-0.3.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"product": {
"name": "python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"product_id": "python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3-libcomps-debuginfo@0.1.23-0.3.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"product": {
"name": "python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"product_id": "python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-libcomps-debuginfo@0.1.23-0.3.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"product": {
"name": "python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"product_id": "python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-brotli@1.2.0-0.1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"product": {
"name": "python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"product_id": "python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-brotli-debugsource@1.2.0-0.1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"product": {
"name": "python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"product_id": "python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-brotli-debuginfo@1.2.0-0.1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"product": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"product_id": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-4.el9sat?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.14.0.14-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src"
},
"product_reference": "foreman-0:3.14.0.14-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-0:0.1.23-0.3.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src"
},
"product_reference": "libcomps-0:0.1.23-0.3.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "libcomps-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-brotli-0:1.2.0-0.1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src"
},
"product_reference": "python-brotli-0:1.2.0-0.1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64"
},
"product_reference": "python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-django-0:4.2.28-0.1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src"
},
"product_reference": "python-django-0:4.2.28-0.1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-container-0:2.22.3-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src"
},
"product_reference": "python-pulp-container-0:2.22.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-rpm-0:3.27.10-2.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src"
},
"product_reference": "python-pulp-rpm-0:3.27.10-2.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libcomps-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64"
},
"product_reference": "python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64"
},
"product_reference": "python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-django-0:4.2.28-0.1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch"
},
"product_reference": "python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulp-container-0:2.22.3-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch"
},
"product_reference": "python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch"
},
"product_reference": "python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.7-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src"
},
"product_reference": "satellite-0:6.17.7-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-0:0.1.23-0.3.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src"
},
"product_reference": "libcomps-0:0.1.23-0.3.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "libcomps-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libcomps-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.14.0.14-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src"
},
"product_reference": "foreman-0:3.14.0.14-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.7-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src"
},
"product_reference": "satellite-0:6.17.7-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.14.0.14-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src"
},
"product_reference": "foreman-0:3.14.0.14-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.14.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-0:0.1.23-0.3.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src"
},
"product_reference": "libcomps-0:0.1.23-0.3.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "libcomps-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-brotli-0:1.2.0-0.1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src"
},
"product_reference": "python-brotli-0:1.2.0-0.1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64"
},
"product_reference": "python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-django-0:4.2.28-0.1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src"
},
"product_reference": "python-django-0:4.2.28-0.1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-container-0:2.22.3-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src"
},
"product_reference": "python-pulp-container-0:2.22.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulp-rpm-0:3.27.10-2.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src"
},
"product_reference": "python-pulp-rpm-0:3.27.10-2.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libcomps-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64"
},
"product_reference": "python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64"
},
"product_reference": "python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-django-0:4.2.28-0.1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch"
},
"product_reference": "python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64"
},
"product_reference": "python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulp-container-0:2.22.3-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch"
},
"product_reference": "python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch"
},
"product_reference": "python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch"
},
"product_reference": "rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src"
},
"product_reference": "rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src"
},
"product_reference": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.16.0.14-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch"
},
"product_reference": "rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.16.0.14-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src"
},
"product_reference": "rubygem-katello-0:4.16.0.14-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.7-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src"
},
"product_reference": "satellite-0:6.17.7-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src"
},
"product_reference": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
},
"product_reference": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-6176",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2025-10-31T01:00:56.408048+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2408762"
}
],
"notes": [
{
"category": "description",
"text": "Scrapy are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation. The protection mechanism against decompression bombs fails to mitigate the brotli variant, allowing remote servers to crash clients with less than 80GB of available memory. This occurs because brotli can achieve extremely high compression ratios for zero-filled data, leading to excessive memory consumption during decompression.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat products. The flaw in Scrapy\u0027s brotli decompression implementation allows remote attackers to trigger a denial of service by sending specially crafted brotli-compressed data. This can lead to excessive memory consumption and system instability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-6176"
},
{
"category": "external",
"summary": "RHBZ#2408762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2408762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-6176",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-6176"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-6176",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-6176"
},
{
"category": "external",
"summary": "https://huntr.com/bounties/2c26a886-5984-47ee-a421-0d5fe1344eb0",
"url": "https://huntr.com/bounties/2c26a886-5984-47ee-a421-0d5fe1344eb0"
}
],
"release_date": "2025-10-31T00:00:21.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Scrapy: python-scrapy: brotli: Python brotli decompression bomb DoS"
},
{
"cve": "CVE-2025-14550",
"cwe": {
"id": "CWE-167",
"name": "Improper Handling of Additional Special Element"
},
"discovery_date": "2026-02-03T15:01:12.970018+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2436341"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Django. A remote attacker can exploit this vulnerability by sending a crafted request containing multiple duplicate headers to the ASGIRequest component. This can lead to a potential Denial of Service (DoS), making the affected system unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Django: Django: Denial of Service via crafted request with duplicate headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This MODERATE impact denial-of-service flaw in Django affects Red Hat products utilizing the ASGIRequest component, such as Red Hat Ansible Automation Platform, Red Hat Discovery, and Red Hat Satellite. A remote attacker could send specially crafted requests containing duplicate headers, potentially rendering the affected system unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-14550"
},
{
"category": "external",
"summary": "RHBZ#2436341",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436341"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-14550",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14550"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14550",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14550"
},
{
"category": "external",
"summary": "https://docs.djangoproject.com/en/dev/releases/security/",
"url": "https://docs.djangoproject.com/en/dev/releases/security/"
},
{
"category": "external",
"summary": "https://groups.google.com/g/django-announce",
"url": "https://groups.google.com/g/django-announce"
},
{
"category": "external",
"summary": "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/",
"url": "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/"
}
],
"release_date": "2026-02-03T14:38:15.875000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Django: Django: Denial of Service via crafted request with duplicate headers"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: Unexpected session resumption in crypto/tls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: Unexpected session resumption in crypto/tls"
},
{
"cve": "CVE-2026-0980",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-01-15T08:50:01.841000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2429874"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat Satellite because it requires the BMC component to be enabled and configured to use `ipmitool` as the IPMI implementation. An authenticated attacker with host creation or update permissions can exploit this by crafting a malicious BMC username. Exploitation is limited to environments meeting these specific configuration and permission requirements.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-0980"
},
{
"category": "external",
"summary": "RHBZ#2429874",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429874"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0980"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0980",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0980"
}
],
"release_date": "2020-01-15T08:08:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username"
},
{
"cve": "CVE-2026-1207",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-02-03T15:00:58.388707+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2436338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Django. A remote attacker could inject SQL commands by manipulating the band index parameter during raster lookups on `RasterField` (only implemented on PostGIS). This SQL injection vulnerability could lead to unauthorized information disclosure, data alteration, or denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Django: Django: SQL Injection via RasterField band index parameter",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This IMPORTANT flaw affects Django\u0027s `RasterField` when utilized with PostGIS, allowing remote SQL injection via the band index parameter. Red Hat Ansible Automation Platform, Red Hat Discovery, Red Hat Satellite, Insights, and Ansible Services are impacted if configured to use Django with PostGIS `RasterField` lookups. Successful exploitation could lead to unauthorized data access, modification, or denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1207"
},
{
"category": "external",
"summary": "RHBZ#2436338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1207",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1207"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1207",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1207"
},
{
"category": "external",
"summary": "https://docs.djangoproject.com/en/dev/releases/security/",
"url": "https://docs.djangoproject.com/en/dev/releases/security/"
},
{
"category": "external",
"summary": "https://groups.google.com/g/django-announce",
"url": "https://groups.google.com/g/django-announce"
},
{
"category": "external",
"summary": "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/",
"url": "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/"
}
],
"release_date": "2026-02-03T14:35:33.721000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Django: Django: SQL Injection via RasterField band index parameter"
},
{
"cve": "CVE-2026-1285",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-02-03T15:01:06.283620+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2436340"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Django. A remote attacker can exploit this vulnerability by providing crafted inputs containing a large number of unmatched HTML end tags to the `django.utils.text.Truncator.chars()` and `Truncator.words()` methods (when `html=True`), or through the `truncatechars_html` and `truncatewords_html` template filters. This can lead to a denial-of-service (DoS) condition, making the application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Django: Django: Denial of Service via crafted HTML inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a MODERATE impact denial-of-service flaw in Django. Applications utilizing Django that process untrusted HTML inputs with a large number of unmatched end tags through the `Truncator.chars()` or `Truncator.words()` methods (with `html=True`), or the `truncatechars_html` and `truncatewords_html` template filters, may experience resource exhaustion. This can lead to the application becoming unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1285"
},
{
"category": "external",
"summary": "RHBZ#2436340",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436340"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1285"
},
{
"category": "external",
"summary": "https://docs.djangoproject.com/en/dev/releases/security/",
"url": "https://docs.djangoproject.com/en/dev/releases/security/"
},
{
"category": "external",
"summary": "https://groups.google.com/g/django-announce",
"url": "https://groups.google.com/g/django-announce"
},
{
"category": "external",
"summary": "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/",
"url": "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/"
}
],
"release_date": "2026-02-03T14:35:50.254000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications utilizing Django should avoid processing untrusted HTML content through the `django.utils.text.Truncator.chars()` and `Truncator.words()` methods with `html=True`, or the `truncatechars_html` and `truncatewords_html` template filters. Restrict the use of these functions to only trusted inputs where the HTML structure is controlled and validated.",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Django: Django: Denial of Service via crafted HTML inputs"
},
{
"cve": "CVE-2026-1287",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-02-03T15:01:03.441713+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2436339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Django. This vulnerability allows a remote attacker to perform SQL injection by using specially crafted control characters within column aliases. When these crafted aliases are passed through dictionary expansion to `QuerySet` methods like `annotate()` or `values()`, it can lead to the execution of arbitrary SQL commands. This could result in unauthorized access to sensitive data or modification of information within the database.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Django: Django: SQL Injection via crafted column aliases",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This IMPORTANT SQL injection flaw in Django allows a remote attacker to execute arbitrary SQL commands by crafting column aliases. This vulnerability affects Red Hat products that incorporate Django, such as Red Hat Ansible Automation Platform, Red Hat Discovery, Red Hat Satellite, Insights, and Ansible Services, potentially leading to unauthorized data access or modification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1287"
},
{
"category": "external",
"summary": "RHBZ#2436339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1287",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1287"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1287",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1287"
},
{
"category": "external",
"summary": "https://docs.djangoproject.com/en/dev/releases/security/",
"url": "https://docs.djangoproject.com/en/dev/releases/security/"
},
{
"category": "external",
"summary": "https://groups.google.com/g/django-announce",
"url": "https://groups.google.com/g/django-announce"
},
{
"category": "external",
"summary": "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/",
"url": "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/"
}
],
"release_date": "2026-02-03T14:36:03.630000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Django: Django: SQL Injection via crafted column aliases"
},
{
"cve": "CVE-2026-1312",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-02-03T15:01:18.274166+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2436342"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Django. A remote attacker could exploit a SQL injection vulnerability in the `.QuerySet.order_by()` method. This occurs when column aliases containing periods are used, and the same alias is also present in `FilteredRelation` via a specially crafted dictionary. Successful exploitation could lead to unauthorized information disclosure or arbitrary code execution within the database.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Django: Django: SQL injection via crafted column aliases in QuerySet.order_by()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This IMPORTANT vulnerability in Django allows for SQL injection within the `QuerySet.order_by()` method. A remote attacker could exploit this by providing crafted column aliases that include periods, specifically when used with `FilteredRelation`. Successful exploitation may result in unauthorized information disclosure or arbitrary code execution against the underlying database. This affects Red Hat products that integrate Django, such as Red Hat Ansible Automation Platform and Red Hat Satellite.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1312"
},
{
"category": "external",
"summary": "RHBZ#2436342",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436342"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1312",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1312"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1312",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1312"
},
{
"category": "external",
"summary": "https://docs.djangoproject.com/en/dev/releases/security/",
"url": "https://docs.djangoproject.com/en/dev/releases/security/"
},
{
"category": "external",
"summary": "https://groups.google.com/g/django-announce",
"url": "https://groups.google.com/g/django-announce"
},
{
"category": "external",
"summary": "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/",
"url": "https://www.djangoproject.com/weblog/2026/feb/03/security-releases/"
}
],
"release_date": "2026-02-03T14:36:23.257000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Django: Django: SQL injection via crafted column aliases in QuerySet.order_by()"
},
{
"acknowledgments": [
{
"names": [
"Evgeni Golov"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-1530",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-01-28T12:39:43.076000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2433784"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fog-kubevirt. This vulnerability allows a remote attacker to perform a Man-in-the-Middle (MITM) attack due to disabled certificate validation. This enables the attacker to intercept and potentially alter sensitive communications between Satellite and OpenShift, resulting in information disclosure and data integrity compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fog-kubevirt: fog-kubevirt: Man-in-the-Middle vulnerability due to disabled certificate validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw in fog-kubevirt, a component used by Red Hat Satellite for managing OpenShift Virtualization/KubeVirt. The vulnerability allows a Man-in-the-Middle (MITM) attack due to disabled certificate validation. An attacker capable of intercepting traffic between Satellite and OpenShift could exploit this to compromise sensitive communications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1530"
},
{
"category": "external",
"summary": "RHBZ#2433784",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433784"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1530",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1530"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1530",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1530"
}
],
"release_date": "2026-01-28T12:40:37.424000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fog-kubevirt: fog-kubevirt: Man-in-the-Middle vulnerability due to disabled certificate validation"
},
{
"acknowledgments": [
{
"names": [
"Evgeni Golov"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-1531",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-01-28T12:50:13.269000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2433786"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite and OpenShift, to perform a Man-in-the-Middle (MITM) attack. Such an attack could lead to the disclosure or alteration of sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw in foreman_kubevirt where the default configuration for connecting to OpenShift disables SSL verification if a CA certificate is not explicitly provided. This insecure default allows a remote attacker to perform a Man-in-the-Middle attack by intercepting network traffic between Satellite and OpenShift, potentially leading to information disclosure or alteration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1531"
},
{
"category": "external",
"summary": "RHBZ#2433786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1531",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1531"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1531",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1531"
}
],
"release_date": "2026-01-28T12:34:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that a Certificate Authority (CA) certificate is explicitly configured when setting up the connection to OpenShift in foreman_kubevirt. This will enable SSL verification and prevent Man-in-the-Middle attacks. Refer to the foreman_kubevirt documentation for specific instructions on configuring CA certificates. A restart or service reload may be required for the changes to take effect.",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification"
},
{
"acknowledgments": [
{
"names": [
"Houssam Sahli"
]
}
],
"cve": "CVE-2026-1961",
"discovery_date": "2026-02-05T10:40:57.141000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437036"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman\u0027s WebSocket proxy implementation. This vulnerability arises from the system\u0027s use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "forman: Foreman: Remote Code Execution via command injection in WebSocket proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue was rated as Important. Command injection vulnerability in Foreman\u0027s WebSocket proxy. Exploitation occurs when an administrator configures a malicious compute resource server and subsequently accesses its VM console functionality. Successful exploitation can lead to remote code execution on the Foreman server, potentially compromising sensitive credentials and the entire managed infrastructure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1961"
},
{
"category": "external",
"summary": "RHBZ#2437036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437036"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1961"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1961",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1961"
}
],
"release_date": "2026-03-26T12:30:45.446000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "forman: Foreman: Remote Code Execution via command injection in WebSocket proxy"
},
{
"cve": "CVE-2026-4324",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-03-17T12:28:40.127000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448349"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in the Katello plugin for Red Hat Satellite allows an attacker to inject arbitrary SQL commands into the `/api/hosts/bootc_images` API endpoint. By manipulating the `sort_by` parameter, an attacker could trigger database errors, cause a Denial of Service, or potentially perform Boolean-based Blind SQL injection. This affects Red Hat Satellite installations utilizing the Katello plugin.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4324"
},
{
"category": "external",
"summary": "RHBZ#2448349",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448349"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4324",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4324"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4324",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4324"
}
],
"release_date": "2026-03-17T13:18:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T20:28:38+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-capsule:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17-capsule:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17-maintenance:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.14-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.src",
"9Base-satellite-6.17:libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:libcomps-debugsource-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python-brotli-0:1.2.0-0.1.el9pc.src",
"9Base-satellite-6.17:python-brotli-debugsource-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python-django-0:4.2.28-0.1.el9pc.src",
"9Base-satellite-6.17:python-pulp-container-0:2.22.3-1.el9pc.src",
"9Base-satellite-6.17:python-pulp-rpm-0:3.27.10-2.el9pc.src",
"9Base-satellite-6.17:python3-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-brotli-debuginfo-0:1.2.0-0.1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-django-0:4.2.28-0.1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-libcomps-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-libcomps-debuginfo-0:0.1.23-0.3.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-pulp-container-0:2.22.3-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulp-rpm-0:3.27.10-2.el9pc.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-fog-kubevirt-0:1.5.1-1.el9sat.src",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.14-1.el9sat.src",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.7-1.el9sat.src",
"9Base-satellite-6.17:satellite-capsule-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-cli-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.7-1.el9sat.noarch",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.17:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection"
}
]
}
GHSA-FWJ4-6WGP-MPXM
Vulnerability from github – Published: 2026-03-17 15:36 – Updated: 2026-03-27 00:31A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.
{
"affected": [
{
"package": {
"ecosystem": "RubyGems",
"name": "katello"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.19.1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"aliases": [
"CVE-2026-4324"
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"github_reviewed": true,
"github_reviewed_at": "2026-03-18T17:25:29Z",
"nvd_published_at": "2026-03-17T14:16:19Z",
"severity": "MODERATE"
},
"details": "A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.",
"id": "GHSA-fwj4-6wgp-mpxm",
"modified": "2026-03-27T00:31:20Z",
"published": "2026-03-17T15:36:23Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4324"
},
{
"type": "WEB",
"url": "https://github.com/Katello/katello/commit/a0a793b08d4f0a897ee985d79a687ad043f99e57"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2026:5970"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2026-4324"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448349"
},
{
"type": "PACKAGE",
"url": "https://github.com/Katello/katello"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"type": "CVSS_V3"
}
],
"summary": "Katello: Denial of Service and potential information disclosure via SQL injection"
}
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.