RHSA-2026:63385
Vulnerability from csaf_redhat - Published: 2026-09-03 23:00 - Updated: 2026-09-04 12:56Summary
Red Hat Security Advisory: Satellite 6.19.4 Async Update
Severity
Important
Notes
Topic: A new release is now available for Red Hat Satellite 6.19 for RHEL 9.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.
Details: Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.
Security Fix(es):
* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)
* ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332) (CVE-2026-16493)
* openvox-server: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)
* puppetserver: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)
* rubygem-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification (CVE-2026-45363)
* python-aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses (CVE-2026-69244)
* python-aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade (CVE-2026-69243)
* python-aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() (CVE-2026-34993)
* openvox-server: jackson-core: Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494)
* openvox-server: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections (CVE-2026-10051)
* python-gitpython: GitPython: Arbitrary File Overwrite via improper git option validation (CVE-2026-73624)
* python-gitpython: GitPython: Remote Code Execution via kwarg value smuggling (CVE-2026-73625)
* python-gitpython: GitPython: Information disclosure via environment variable expansion in URL handling (CVE-2026-73622)
* python-gitpython: GitPython: Remote Code Execution via malicious Git template (CVE-2026-73623)
* python-gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding (CVE-2026-73620)
* python-gitpython: GitPython: Arbitrary code execution via improper validation of clone options (CVE-2026-42284)
* python3.12-gitpython: GitPython: Arbitrary code execution via improper validation of clone options (CVE-2026-42284)
* python-gitpython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks (CVE-2026-42215)
* python3.12-gitpython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks (CVE-2026-42215)
* python-gitpython: GitPython: Arbitrary code execution via injected newlines in Git configuration (CVE-2026-44244)
* python3.12-gitpython: GitPython: Arbitrary code execution via injected newlines in Git configuration (CVE-2026-44244)
* python-gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names (CVE-2026-76222)
* python3.12-gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names (CVE-2026-76222)
* python-gitpython: GitPython: Remote Code Execution via malicious Git hooks (CVE-2026-76218)
* python3.12-gitpython: GitPython: Remote Code Execution via malicious Git hooks (CVE-2026-76218)
* python-gitpython: GitPython: Arbitrary command execution via crafted kwargs (CVE-2026-76220)
* python3.12-gitpython: GitPython: Arbitrary command execution via crafted kwargs (CVE-2026-76220)
* python-gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection (CVE-2026-76219)
* python3.12-gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection (CVE-2026-76219)
* python-gitpython: GitPython: Arbitrary code execution via config-name injection (CVE-2026-76221)
* python3.12-gitpython: GitPython: Arbitrary code execution via config-name injection (CVE-2026-76221)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.
5.3 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
7.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
81 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git clone commands without a '--' (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs 'ansible-galaxy collection install' with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.
7.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
Known not affected
81 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.
7.2 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
81 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments (kwargs) to functions such as Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(). This bypasses existing security checks designed to block dangerous Git options, enabling the execution of unauthorized commands.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython, a Python library for interacting with Git repositories. A remote attacker could exploit an input validation vulnerability in the `_clone()` function. By crafting a malicious string in the `multi_options` parameter, an attacker could bypass validation. This allows for the injection of arbitrary Git configurations, such as `core.hooksPath`, leading to the execution of attacker-controlled hooks and ultimately, arbitrary code execution during a clone operation.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython, a Python library used to interact with Git repositories. The `GitConfigParser.set_value()` function does not properly validate input for newlines. This vulnerability allows an attacker to inject malicious configuration settings, specifically the `core.hooksPath`, into a Git repository. Consequently, any Git operation that triggers hooks, such as committing or merging, could lead to arbitrary code execution from an attacker-controlled path.
7.3 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ruby-jwt, a Ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard. A remote attacker can exploit this vulnerability by crafting a malicious token that is accepted due to an empty key being used in the HMAC (Hash-based Message Authentication Code) digest calculation during token verification. This allows the attacker to bypass authentication and integrity checks, potentially leading to unauthorized access or data manipulation.
7.4 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Vendor Fix
fix
|
Known not affected
83 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Threats
Impact
Important
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Threats
Impact
Important
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before the entire body is received. This leaves trailing data to be processed incorrectly, potentially enabling an attacker to bypass security mechanisms or gain unauthorized access to resources.
7.0 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
Known not affected
81 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Threats
Impact
Moderate
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit this to trigger a Denial of Service (DoS) in the client application, making it unavailable.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
81 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the `IndexFile.checkout()` and `TagReference.create()` functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to overwrite arbitrary files with repository content or read sensitive files. This could result in significant data integrity and confidentiality impacts.
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
81 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython. This vulnerability allows a remote attacker to exfiltrate sensitive information, such as environment variables, by crafting malicious URLs. When these URLs are processed during Git operations like fetch or pull, the environment variables are expanded and transmitted to attacker-controlled hosts, leading to information disclosure.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython. An incomplete denylist in the `unsafe_git_clone_options` function fails to restrict the `--template` option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary command execution during clone operations.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Threats
Impact
Important
A flaw was found in GitPython. This vulnerability allows a remote attacker to overwrite arbitrary files on the system. By failing to properly validate git options passed to the `Diffable.diff` method, an attacker can supply a malicious output argument to write patch content to attacker-controlled file paths, leading to potential system compromise.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython. Attackers can bypass the `check_unsafe_options` guard by smuggling git options within single-character keyword argument (kwarg) values. This allows them to supply specially crafted option dictionaries to various GitPython methods, such as `clone_from` or `fetch`, leading to arbitrary code execution.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the `Repo.init` function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on the initialized repository, these hooks execute arbitrary code, leading to a complete compromise of the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython. This vulnerability allows an attacker to overwrite arbitrary files on the system. By injecting specific options into the `git read-tree` command through methods like `IndexFile.from_tree`, `IndexFile.reset`, and `IndexFile.merge_tree`, without proper option validation or argument separation, an attacker can cause the application to write a git-index blob to any attacker-controlled writable path, leading to data destruction.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython. A remote attacker can bypass the `check_unsafe_options` guard by combining a single-character keyword argument with `split_single_char_options=False`. This allows the attacker to supply a crafted dictionary of keyword arguments to guarded methods, such as `clone_from`, leading to arbitrary operating system command execution.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython. This vulnerability allows attackers to inject malicious configuration options by manipulating option names within the option-name validator. By injecting special characters, an attacker can forge arbitrary git-config directives, potentially leading to arbitrary code execution on the system when a git operation is performed.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
A flaw was found in GitPython where it fails to properly validate submodule names within .gitmodules files. A remote attacker could craft a malicious Git repository containing specially formed submodule names with directory traversal sequences. When GitPython processes these malicious submodule names during repository initialization, it could lead to the creation of attacker-controlled Git repositories at arbitrary locations on the filesystem, potentially impacting system integrity.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch | — |
Workaround
|
Threats
Impact
Important
References
154 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new release is now available for Red Hat Satellite 6.19 for RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)\n* ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332) (CVE-2026-16493)\n* openvox-server: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)\n* puppetserver: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)\n* rubygem-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification (CVE-2026-45363)\n* python-aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses (CVE-2026-69244)\n* python-aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade (CVE-2026-69243)\n* python-aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() (CVE-2026-34993)\n* openvox-server: jackson-core: Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494)\n* openvox-server: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections (CVE-2026-10051)\n* python-gitpython: GitPython: Arbitrary File Overwrite via improper git option validation (CVE-2026-73624)\n* python-gitpython: GitPython: Remote Code Execution via kwarg value smuggling (CVE-2026-73625)\n* python-gitpython: GitPython: Information disclosure via environment variable expansion in URL handling (CVE-2026-73622)\n* python-gitpython: GitPython: Remote Code Execution via malicious Git template (CVE-2026-73623)\n* python-gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding (CVE-2026-73620)\n* python-gitpython: GitPython: Arbitrary code execution via improper validation of clone options (CVE-2026-42284)\n* python3.12-gitpython: GitPython: Arbitrary code execution via improper validation of clone options (CVE-2026-42284)\n* python-gitpython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks (CVE-2026-42215)\n* python3.12-gitpython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks (CVE-2026-42215)\n* python-gitpython: GitPython: Arbitrary code execution via injected newlines in Git configuration (CVE-2026-44244)\n* python3.12-gitpython: GitPython: Arbitrary code execution via injected newlines in Git configuration (CVE-2026-44244)\n* python-gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names (CVE-2026-76222)\n* python3.12-gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names (CVE-2026-76222)\n* python-gitpython: GitPython: Remote Code Execution via malicious Git hooks (CVE-2026-76218)\n* python3.12-gitpython: GitPython: Remote Code Execution via malicious Git hooks (CVE-2026-76218)\n* python-gitpython: GitPython: Arbitrary command execution via crafted kwargs (CVE-2026-76220)\n* python3.12-gitpython: GitPython: Arbitrary command execution via crafted kwargs (CVE-2026-76220)\n* python-gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection (CVE-2026-76219)\n* python3.12-gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection (CVE-2026-76219)\n* python-gitpython: GitPython: Arbitrary code execution via config-name injection (CVE-2026-76221)\n* python3.12-gitpython: GitPython: Arbitrary code execution via config-name injection (CVE-2026-76221)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:63385",
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "SAT-45592",
"url": "https://issues.redhat.com/browse/SAT-45592"
},
{
"category": "external",
"summary": "SAT-46105",
"url": "https://issues.redhat.com/browse/SAT-46105"
},
{
"category": "external",
"summary": "SAT-48574",
"url": "https://issues.redhat.com/browse/SAT-48574"
},
{
"category": "external",
"summary": "SAT-48584",
"url": "https://issues.redhat.com/browse/SAT-48584"
},
{
"category": "external",
"summary": "SAT-48585",
"url": "https://issues.redhat.com/browse/SAT-48585"
},
{
"category": "external",
"summary": "SAT-48586",
"url": "https://issues.redhat.com/browse/SAT-48586"
},
{
"category": "external",
"summary": "SAT-48587",
"url": "https://issues.redhat.com/browse/SAT-48587"
},
{
"category": "external",
"summary": "SAT-48588",
"url": "https://issues.redhat.com/browse/SAT-48588"
},
{
"category": "external",
"summary": "SAT-48589",
"url": "https://issues.redhat.com/browse/SAT-48589"
},
{
"category": "external",
"summary": "SAT-48628",
"url": "https://issues.redhat.com/browse/SAT-48628"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63385.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.19.4 Async Update",
"tracking": {
"current_release_date": "2026-09-04T12:56:40+00:00",
"generator": {
"date": "2026-09-04T12:56:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:63385",
"initial_release_date": "2026-09-03T23:00:57+00:00",
"revision_history": [
{
"date": "2026-09-03T23:00:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-03T23:00:57+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-04T12:56:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.19::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.19::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-maintenance",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_maintenance:6.19::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.19::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9sat.src",
"product": {
"name": "ansible-core-1:2.16.19-1.el9sat.src",
"product_id": "ansible-core-1:2.16.19-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.18.0.10-1.el9sat.src",
"product": {
"name": "foreman-0:3.18.0.10-1.el9sat.src",
"product_id": "foreman-0:3.18.0.10-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.18.0.10-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.18.0.3-1.el9sat.src",
"product": {
"name": "foreman-installer-1:3.18.0.3-1.el9sat.src",
"product_id": "foreman-installer-1:3.18.0.3-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.18.0.3-1.el9sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openvox-agent-0:8.28.1-1.el9sat.src",
"product": {
"name": "openvox-agent-0:8.28.1-1.el9sat.src",
"product_id": "openvox-agent-0:8.28.1-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvox-agent@8.28.1-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "openvox-server-0:8.15.2-1.el9sat.src",
"product": {
"name": "openvox-server-0:8.15.2-1.el9sat.src",
"product_id": "openvox-server-0:8.15.2-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvox-server@8.15.2-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"product": {
"name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"product_id": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pulpcore-obsolete-packages@1.3.1-5.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"product": {
"name": "python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"product_id": "python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.3-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.59-1.el9pc.src",
"product": {
"name": "python3.12-gitpython-0:3.1.59-1.el9pc.src",
"product_id": "python3.12-gitpython-0:3.1.59-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.59-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"product": {
"name": "python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"product_id": "python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.85.28-2.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"product": {
"name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"product_id": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@13.2.11-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"product": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"product_id": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-jwt@2.10.3-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.20.0.8-1.el9sat.src",
"product": {
"name": "rubygem-katello-0:4.20.0.8-1.el9sat.src",
"product_id": "rubygem-katello-0:4.20.0.8-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.20.0.8-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"product": {
"name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"product_id": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-smart_proxy_remote_execution_ssh@1.0.3-2.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.19.4-1.el9sat.src",
"product": {
"name": "satellite-0:6.19.4-1.el9sat.src",
"product_id": "satellite-0:6.19.4-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.19.4-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-lifecycle-0:6.19.0-2.el9sat.src",
"product": {
"name": "satellite-lifecycle-0:6.19.0-2.el9sat.src",
"product_id": "satellite-lifecycle-0:6.19.0-2.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-lifecycle@6.19.0-2.el9sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9sat.noarch",
"product": {
"name": "ansible-core-1:2.16.19-1.el9sat.noarch",
"product_id": "ansible-core-1:2.16.19-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ansible-test-1:2.16.19-1.el9sat.noarch",
"product": {
"name": "ansible-test-1:2.16.19-1.el9sat.noarch",
"product_id": "ansible-test-1:2.16.19-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-test@2.16.19-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-pcp@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-redis@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-service-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-service-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-service-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-service@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"product": {
"name": "foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"product_id": "foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@3.18.0.10-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"product": {
"name": "foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"product_id": "foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.18.0.3-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"product": {
"name": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"product_id": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer-katello@3.18.0.3-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openvox-server-0:8.15.2-1.el9sat.noarch",
"product": {
"name": "openvox-server-0:8.15.2-1.el9sat.noarch",
"product_id": "openvox-server-0:8.15.2-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvox-server@8.15.2-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"product": {
"name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"product_id": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/pulpcore-obsolete-packages@1.3.1-5.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"product": {
"name": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"product_id": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-gitpython@3.1.59-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"product": {
"name": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"product_id": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.85.28-2.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"product": {
"name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"product_id": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@13.2.11-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"product": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"product_id": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-jwt@2.10.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"product": {
"name": "rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"product_id": "rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.20.0.8-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"product": {
"name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"product_id": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-smart_proxy_remote_execution_ssh@1.0.3-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.19.4-1.el9sat.noarch",
"product": {
"name": "satellite-capsule-0:6.19.4-1.el9sat.noarch",
"product_id": "satellite-capsule-0:6.19.4-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.19.4-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.19.4-1.el9sat.noarch",
"product": {
"name": "satellite-common-0:6.19.4-1.el9sat.noarch",
"product_id": "satellite-common-0:6.19.4-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.19.4-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"product": {
"name": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"product_id": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-obsolete-packages@6.19.4-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.19.4-1.el9sat.noarch",
"product": {
"name": "satellite-cli-0:6.19.4-1.el9sat.noarch",
"product_id": "satellite-cli-0:6.19.4-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.19.4-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.19.4-1.el9sat.noarch",
"product": {
"name": "satellite-0:6.19.4-1.el9sat.noarch",
"product_id": "satellite-0:6.19.4-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.19.4-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"product": {
"name": "satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"product_id": "satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-lifecycle@6.19.0-2.el9sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "openvox-agent-0:8.28.1-1.el9sat.x86_64",
"product": {
"name": "openvox-agent-0:8.28.1-1.el9sat.x86_64",
"product_id": "openvox-agent-0:8.28.1-1.el9sat.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvox-agent@8.28.1-1.el9sat?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"product": {
"name": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"product_id": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp@3.14.3-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"product": {
"name": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"product_id": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debugsource@3.14.3-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"product": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"product_id": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-aiohttp-debuginfo@3.14.3-1.el9pc?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-test-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch"
},
"product_reference": "ansible-test-1:2.16.19-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.18.0.10-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src"
},
"product_reference": "foreman-0:3.18.0.10-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.18.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.18.0.3-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src"
},
"product_reference": "foreman-installer-1:3.18.0.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-agent-0:8.28.1-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src"
},
"product_reference": "openvox-agent-0:8.28.1-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-agent-0:8.28.1-1.el9sat.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64"
},
"product_reference": "openvox-agent-0:8.28.1-1.el9sat.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.15.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch"
},
"product_reference": "openvox-server-0:8.15.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.15.2-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src"
},
"product_reference": "openvox-server-0:8.15.2-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch"
},
"product_reference": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src"
},
"product_reference": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.3-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src"
},
"product_reference": "python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch"
},
"product_reference": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.59-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src"
},
"product_reference": "python3.12-gitpython-0:3.1.59-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.85.28-2.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src"
},
"product_reference": "python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch"
},
"product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src"
},
"product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.19.4-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src"
},
"product_reference": "satellite-0:6.19.4-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.19.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.19.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.18.0.10-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src"
},
"product_reference": "foreman-0:3.18.0.10-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.19.4-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src"
},
"product_reference": "satellite-0:6.19.4-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.19.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-test-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch"
},
"product_reference": "ansible-test-1:2.16.19-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.18.0.10-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src"
},
"product_reference": "foreman-0:3.18.0.10-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.18.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.18.0.3-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src"
},
"product_reference": "foreman-installer-1:3.18.0.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.18.0.10-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-agent-0:8.28.1-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src"
},
"product_reference": "openvox-agent-0:8.28.1-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-agent-0:8.28.1-1.el9sat.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64"
},
"product_reference": "openvox-agent-0:8.28.1-1.el9sat.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.15.2-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch"
},
"product_reference": "openvox-server-0:8.15.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.15.2-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
},
"product_reference": "openvox-server-0:8.15.2-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch"
},
"product_reference": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src"
},
"product_reference": "pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.3-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src"
},
"product_reference": "python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch"
},
"product_reference": "python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-gitpython-0:3.1.59-1.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
},
"product_reference": "python3.12-gitpython-0:3.1.59-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.85.28-2.el9pc.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src"
},
"product_reference": "python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src"
},
"product_reference": "rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.20.0.8-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch"
},
"product_reference": "rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.20.0.8-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src"
},
"product_reference": "rubygem-katello-0:4.20.0.8-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch"
},
"product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src"
},
"product_reference": "rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch"
},
"product_reference": "satellite-0:6.19.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.19.4-1.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src"
},
"product_reference": "satellite-0:6.19.4-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.19.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.19.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-lifecycle-0:6.19.0-2.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch"
},
"product_reference": "satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-lifecycle-0:6.19.0-2.el9sat.src as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src"
},
"product_reference": "satellite-lifecycle-0:6.19.0-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch as a component of Red Hat Satellite 6.19 for RHEL 9",
"product_id": "9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-10051",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-07-14T10:01:09.470495+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499928"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This information disclosure flaw in Eclipse Jetty allows HTTP/1.1 trailers from a previous request to be retained and subsequently exposed to other requests sharing the same connection. This could lead to unintended disclosure of sensitive information in Red Hat products utilizing Jetty, such as Red Hat AMQ and Enterprise Application Platform, particularly when connection reuse is active and trailers contain confidential data. The confidentiality impact is considered low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10051"
},
{
"category": "external",
"summary": "RHBZ#2499928",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499928"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10051"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119"
}
],
"release_date": "2026-07-14T08:44:38.233000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections"
},
{
"acknowledgments": [
{
"names": [
"Tommaso Bona"
]
}
],
"cve": "CVE-2026-11332",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-04-14T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485379"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role\u0027s meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Conditions for Exploitation: Successful exploitation requires user interaction, specifically tricking a victim into installing a maliciously crafted Ansible role (or a role with a malicious dependency) using the ansible-galaxy role install command.\n\nBroad Impact: While user interaction is required, the potential impact is highly severe. Successfully injecting the malicious arguments allows a remote attacker to achieve arbitrary code execution on the machine running the Ansible command, leading to a full compromise of the user\u0027s environment and system integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11332"
},
{
"category": "external",
"summary": "RHBZ#2485379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332"
},
{
"category": "external",
"summary": "https://github.com/ansible/ansible",
"url": "https://github.com/ansible/ansible"
}
],
"release_date": "2026-06-05T07:12:55.739000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution"
},
{
"acknowledgments": [
{
"names": [
"Ta Duc Thien"
],
"organization": "NTCS"
}
],
"cve": "CVE-2026-16493",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-07-21T11:19:29.854000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503724"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core\u0027s concrete_artifact_manager.py constructs git clone commands without a \u0027--\u0027 (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs \u0027ansible-galaxy collection install\u0027 with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has assessed this vulnerability as Important because it allows arbitrary command execution when a user installs a collection from a crafted git source. The vulnerability exists because the fix for CVE-2026-11332 (RHSA-2026:42078, RHSA-2026:42079, RHSA-2026:42080, published 2026-07-20) only addressed the role install path in lib/ansible/utils/galaxy.py but did not apply the same \u0027--\u0027 end-of-options separator to the collection install path in lib/ansible/galaxy/collection/concrete_artifact_manager.py. All versions of ansible-core that support collection installation from git sources are affected. Users who install collections exclusively from Ansible Galaxy or Automation Hub (HTTPS sources) are not exposed to this specific flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16493"
},
{
"category": "external",
"summary": "RHBZ#2503724",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503724"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16493",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16493"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16493",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16493"
}
],
"release_date": "2026-07-21T16:32:48.105000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "The following practices would help for avoiding exposure and mitigate this flaw:\n\n1. Do not install Ansible collections from untrusted or unverified git sources. Only install collections from trusted sources such as Ansible Galaxy (https://galaxy.ansible.com), Red Hat Automation Hub (https://console.redhat.com/ansible/automation-hub), or verified internal repositories using HTTPS URLs.\n\n2. Carefully inspect any requirements.yml files before running \u0027ansible-galaxy collection install -r requirements.yml\u0027. Verify that all collection sources use legitimate HTTPS URLs and do not contain git+ prefixed URIs with suspicious characters (especially values starting with \u0027-\u0027).\n\n3. Ensure your system\u0027s git version is 2.12 or later, which disables the ext:: transport by default. While this does not fully prevent exploitation (the -ccore.sshCommand technique bypasses transport restrictions), it eliminates one of the exploitation vectors.\n\n4. Restrict the GIT_ALLOW_PROTOCOL environment variable to only necessary protocols (e.g. https, ssh) and never include \u0027ext\u0027 unless absolutely required.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332)"
},
{
"cve": "CVE-2026-34993",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-02T20:01:12.690409+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484099"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in AIOHTTP, a Python asynchronous HTTP framework, due to potential arbitrary code execution. The vulnerability arises when applications load untrusted input into the `CookieJar.load()` function. Exploitation requires an application to be configured to process attacker-controlled files, which is not a default or common scenario in most Red Hat product deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34993"
},
{
"category": "external",
"summary": "RHBZ#2484099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34993",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34993"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00",
"url": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8"
}
],
"release_date": "2026-06-02T18:29:15.847000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Applications using AIOHTTP that are configured to load untrusted files via the `CookieJar.load()` function should implement input sanitization prior to loading. This prevents the injection of malicious code.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()"
},
{
"cve": "CVE-2026-42215",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-05-07T19:01:30.789237+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467802"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython, a Python library used to interact with Git repositories. This vulnerability allows an attacker to achieve arbitrary command execution by providing specially crafted arguments (kwargs) to functions such as Repo.clone_from(), Remote.fetch(), Remote.pull(), or Remote.push(). This bypasses existing security checks designed to block dangerous Git options, enabling the execution of unauthorized commands.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important arbitrary command execution flaw in GitPython, a library utilized across several Red Hat products. The vulnerability arises from an incomplete security check that allows specially crafted Python keyword arguments, such as `upload_pack` or `receive_pack`, to bypass intended safeguards against dangerous Git options. This bypass enables an attacker to execute arbitrary commands on systems where applications process untrusted input through GitPython\u0027s repository interaction functions, potentially leading to system compromise, credential theft, or unauthorized data modification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42215"
},
{
"category": "external",
"summary": "RHBZ#2467802",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467802"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42215",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42215"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42215",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42215"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47",
"url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4"
}
],
"release_date": "2026-05-07T18:17:03.194000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks"
},
{
"cve": "CVE-2026-42284",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-05-07T19:01:23.592356+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467800"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython, a Python library for interacting with Git repositories. A remote attacker could exploit an input validation vulnerability in the `_clone()` function. By crafting a malicious string in the `multi_options` parameter, an attacker could bypass validation. This allows for the injection of arbitrary Git configurations, such as `core.hooksPath`, leading to the execution of attacker-controlled hooks and ultimately, arbitrary code execution during a clone operation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GitPython: GitPython: Arbitrary code execution via improper validation of clone options",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in GitPython allows for arbitrary code execution during Git clone operations within Red Hat products that utilize the library. The flaw stems from insufficient validation of user-supplied input to the `_clone()` function, enabling an attacker to inject malicious Git configurations, such as `core.hooksPath`, and execute arbitrary code. Exploitation requires an application to process untrusted input through GitPython\u0027s cloning functionalities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42284"
},
{
"category": "external",
"summary": "RHBZ#2467800",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467800"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42284",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42284"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42284",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42284"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47",
"url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.47"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485"
}
],
"release_date": "2026-05-07T18:19:20.129000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "GitPython: GitPython: Arbitrary code execution via improper validation of clone options"
},
{
"cve": "CVE-2026-44244",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-05-07T19:01:36.732863+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467804"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython, a Python library used to interact with Git repositories. The `GitConfigParser.set_value()` function does not properly validate input for newlines. This vulnerability allows an attacker to inject malicious configuration settings, specifically the `core.hooksPath`, into a Git repository. Consequently, any Git operation that triggers hooks, such as committing or merging, could lead to arbitrary code execution from an attacker-controlled path.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GitPython: GitPython: Arbitrary code execution via injected newlines in Git configuration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in GitPython that allows for arbitrary code execution. By injecting newlines into Git configuration values, an attacker can manipulate the `core.hooksPath` to execute malicious scripts during standard Git operations. This poses a significant risk in environments where applications process unvalidated user input when interacting with Git repositories, potentially leading to persistent repository configuration poisoning.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44244"
},
{
"category": "external",
"summary": "RHBZ#2467804",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467804"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44244"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44244",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44244"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49",
"url": "https://github.com/gitpython-developers/GitPython/releases/tag/3.1.49"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-v87r-6q3f-2j67"
}
],
"release_date": "2026-05-07T18:22:39.704000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications that use GitPython and process untrusted input for Git configuration values must implement robust input validation and sanitization. This prevents the injection of newlines that could manipulate `core.hooksPath` and lead to arbitrary code execution. Additionally, ensure that applications interacting with Git repositories operate with the principle of least privilege to limit the potential impact of any successful exploitation.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "GitPython: GitPython: Arbitrary code execution via injected newlines in Git configuration"
},
{
"cve": "CVE-2026-45363",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-07-14T22:03:23.419937+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500739"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ruby-jwt, a Ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard. A remote attacker can exploit this vulnerability by crafting a malicious token that is accepted due to an empty key being used in the HMAC (Hash-based Message Authentication Code) digest calculation during token verification. This allows the attacker to bypass authentication and integrity checks, potentially leading to unauthorized access or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45363"
},
{
"category": "external",
"summary": "RHBZ#2500739",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500739"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45363",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45363"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45363",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45363"
},
{
"category": "external",
"summary": "https://github.com/jwt/ruby-jwt/commit/9820020869ad147b941e49d96ab8beba35532964",
"url": "https://github.com/jwt/ruby-jwt/commit/9820020869ad147b941e49d96ab8beba35532964"
},
{
"category": "external",
"summary": "https://github.com/jwt/ruby-jwt/commit/db560b769a07bd9724e77ff505011ac01872106f",
"url": "https://github.com/jwt/ruby-jwt/commit/db560b769a07bd9724e77ff505011ac01872106f"
},
{
"category": "external",
"summary": "https://github.com/jwt/ruby-jwt/releases/tag/v2.10.3",
"url": "https://github.com/jwt/ruby-jwt/releases/tag/v2.10.3"
},
{
"category": "external",
"summary": "https://github.com/jwt/ruby-jwt/releases/tag/v3.2.0",
"url": "https://github.com/jwt/ruby-jwt/releases/tag/v3.2.0"
},
{
"category": "external",
"summary": "https://github.com/jwt/ruby-jwt/security/advisories/GHSA-c32j-vqhx-rx3x",
"url": "https://github.com/jwt/ruby-jwt/security/advisories/GHSA-c32j-vqhx-rx3x"
}
],
"release_date": "2026-07-14T21:32:26.676000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification"
},
{
"cve": "CVE-2026-54512",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-23T22:01:49.821346+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `jackson-databind` is rated as Important. While it describes a potential bypass of the PolymorphicTypeValidator leading to arbitrary code execution, exploitation requires an attacker to already possess administrative privileges, specifically the `manage-realm` role. This flaw does not enable privilege escalation, as it does not grant additional capabilities beyond those inherently available to an existing administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54512"
},
{
"category": "external",
"summary": "RHBZ#2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5",
"url": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5988",
"url": "https://github.com/FasterXML/jackson-databind/issues/5988"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"
}
],
"release_date": "2026-06-23T20:56:36.646000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass"
},
{
"cve": "CVE-2026-68494",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-04T15:01:53.631865+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2511026"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in `jackson-core`\u0027s asynchronous JSON parser. A remote, unauthenticated attacker can exploit an incomplete fix to bypass number length constraints, leading to unbounded memory accumulation and potential JVM heap exhaustion in reactive frameworks processing chunked JSON input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-68494"
},
{
"category": "external",
"summary": "RHBZ#2511026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511026"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-68494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd",
"url": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641",
"url": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8",
"url": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/pull/1611",
"url": "https://github.com/FasterXML/jackson-core/pull/1611"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9",
"url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-72hv-8253-57qq",
"url": "https://github.com/advisories/GHSA-72hv-8253-57qq"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18401",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18401"
}
],
"release_date": "2026-08-04T14:39:14.471000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser"
},
{
"cve": "CVE-2026-69243",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-08-03T22:02:56.444781+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510831"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before the entire body is received. This leaves trailing data to be processed incorrectly, potentially enabling an attacker to bypass security mechanisms or gain unauthorized access to resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate impact. This vulnerability in aiohttp\u0027s HTTP parser enables request smuggling when the server-side component handles WebSocket upgrade requests containing a body. An attacker could exploit an edge case during protocol switching, causing trailing data to be processed as subsequent requests or upgraded protocol data. This affects Red Hat products utilizing aiohttp in a server-side capacity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69243"
},
{
"category": "external",
"summary": "RHBZ#2510831",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510831"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69243"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",
"url": "https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/pull/13017",
"url": "https://github.com/aio-libs/aiohttp/pull/13017"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.2",
"url": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.2"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mfx4-hv73-q22v",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mfx4-hv73-q22v"
}
],
"release_date": "2026-08-03T20:45:43.406000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade"
},
{
"cve": "CVE-2026-69244",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-08-03T22:02:32.583060+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit this to trigger a Denial of Service (DoS) in the client application, making it unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important severity flaw in aiohttp that could lead to a denial of service in client applications. A remote, malicious HTTP server could send a specially crafted response, causing an out-of-bounds read in the aiohttp C response parser and resulting in the client application terminating unexpectedly.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69244"
},
{
"category": "external",
"summary": "RHBZ#2510825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69244"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69244",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69244"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d",
"url": "https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/pull/13223",
"url": "https://github.com/aio-libs/aiohttp/pull/13223"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3",
"url": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273"
}
],
"release_date": "2026-08-03T20:50:59.538000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses"
},
{
"cve": "CVE-2026-73620",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-08-13T11:53:07.982354+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515261"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the `IndexFile.checkout()` and `TagReference.create()` functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to overwrite arbitrary files with repository content or read sensitive files. This could result in significant data integrity and confidentiality impacts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in GitPython that allows an authenticated attacker to achieve arbitrary file overwrite and read capabilities. The vulnerability stems from insufficient validation of git options passed to `IndexFile.checkout()` and `TagReference.create()`, enabling attackers to manipulate repository content or access sensitive files. This impacts several Red Hat products, including Red Hat OpenStack Platform, Red Hat Satellite, and Red Hat Ansible Automation Platform.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73620"
},
{
"category": "external",
"summary": "RHBZ#2515261",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515261"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73620",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73620"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73620",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73620"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3f7w-8rr8-f37f"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-and-read",
"url": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-and-read"
}
],
"release_date": "2026-08-13T11:28:21.426000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gitpython: GitPython: Arbitrary file overwrite and read via unsafe git option forwarding"
},
{
"cve": "CVE-2026-73622",
"cwe": {
"id": "CWE-914",
"name": "Improper Control of Dynamically-Identified Variables"
},
"discovery_date": "2026-08-13T11:54:21.696489+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515269"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. This vulnerability allows a remote attacker to exfiltrate sensitive information, such as environment variables, by crafting malicious URLs. When these URLs are processed during Git operations like fetch or pull, the environment variables are expanded and transmitted to attacker-controlled hosts, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gitpython: GitPython: Information disclosure via environment variable expansion in URL handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in GitPython. It allows an attacker to exfiltrate sensitive environment variables from systems that use GitPython to create or add remote repositories from untrusted URLs. This occurs because environment variable expansion is not disabled in URL handling, leading to secrets being embedded in Git configuration and transmitted to attacker-controlled hosts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73622"
},
{
"category": "external",
"summary": "RHBZ#2515269",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515269"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73622",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73622"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73622",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73622"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2",
"url": "https://github.com/gitpython-developers/GitPython/commit/8ac5a30519b6f4af85398b9b9d7064ff4d452da2"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-94p4-4cq8-9g67"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-environment-variable-exfiltration-via-remote-add",
"url": "https://www.vulncheck.com/advisories/gitpython-before-environment-variable-exfiltration-via-remote-add"
}
],
"release_date": "2026-08-13T11:28:22.807000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gitpython: GitPython: Information disclosure via environment variable expansion in URL handling"
},
{
"cve": "CVE-2026-73623",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-08-13T11:55:15.280313+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515275"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. An incomplete denylist in the `unsafe_git_clone_options` function fails to restrict the `--template` option. This allows a remote attacker to supply a malicious Git template directory, leading to arbitrary command execution during clone operations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gitpython: GitPython: Remote Code Execution via malicious Git template",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important severity flaw in GitPython where an incomplete denylist in `unsafe_git_clone_options` allows remote code execution. An attacker can leverage the `--template` option to execute arbitrary commands during repository cloning by pointing to a directory containing malicious post-checkout hooks. This risk is present when applications using GitPython clone untrusted repositories.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73623"
},
{
"category": "external",
"summary": "RHBZ#2515275",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515275"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73623",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73623"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73623",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73623"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-6p8h-3wgx-97gf"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-template",
"url": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-template"
}
],
"release_date": "2026-08-13T11:28:23.477000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gitpython: GitPython: Remote Code Execution via malicious Git template"
},
{
"cve": "CVE-2026-73624",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-08-13T11:51:01.223720+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515243"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. This vulnerability allows a remote attacker to overwrite arbitrary files on the system. By failing to properly validate git options passed to the `Diffable.diff` method, an attacker can supply a malicious output argument to write patch content to attacker-controlled file paths, leading to potential system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gitpython: GitPython: Arbitrary File Overwrite via improper git option validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important arbitrary file overwrite vulnerability in GitPython\u0027s Diffable.diff method. It allows an attacker to write arbitrary content to chosen file paths at the process\u0027s privilege level by manipulating git options, which could lead to system compromise or privilege escalation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73624"
},
{
"category": "external",
"summary": "RHBZ#2515243",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515243"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73624",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73624"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73624",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73624"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-fjr4-x663-mwxc"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-diff",
"url": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-diff"
}
],
"release_date": "2026-08-13T11:28:24.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gitpython: GitPython: Arbitrary File Overwrite via improper git option validation"
},
{
"cve": "CVE-2026-73625",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-08-13T11:54:49.542600+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515272"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. Attackers can bypass the `check_unsafe_options` guard by smuggling git options within single-character keyword argument (kwarg) values. This allows them to supply specially crafted option dictionaries to various GitPython methods, such as `clone_from` or `fetch`, leading to arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gitpython: GitPython: Remote Code Execution via kwarg value smuggling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important remote code execution vulnerability in GitPython, affecting Red Hat products that utilize GitPython versions prior to 3.1.54. The flaw allows an attacker to bypass input sanitization by smuggling malicious Git options within single-character keyword arguments, leading to arbitrary command execution when GitPython methods process untrusted input. This poses a significant risk to the integrity and confidentiality of systems.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73625"
},
{
"category": "external",
"summary": "RHBZ#2515272",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515272"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73625"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-r9mr-m37c-5fr3"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-kwarg-value-smuggling",
"url": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-kwarg-value-smuggling"
}
],
"release_date": "2026-08-13T11:28:24.833000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gitpython: GitPython: Remote Code Execution via kwarg value smuggling"
},
{
"cve": "CVE-2026-76218",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-08-19T14:12:37.531853+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519603"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the `Repo.init` function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on the initialized repository, these hooks execute arbitrary code, leading to a complete compromise of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gitpython: GitPython: Remote Code Execution via malicious Git hooks",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "GitPython\u0027s Repo.init forwards an unvalidated template parameter, letting an attacker who controls that parameter point at a directory of malicious git hooks that execute on subsequent git operations (RCE), fixed in 3.1.58. Red Hat products that bundle GitPython use it as an internal build/automation-time dependency and do not expose the Repo.init template/options parameters to adversary-controlled input; the vulnerable parameter cannot be controlled by an attacker in these products, so they are marked not affected. GitPython as shipped in Red Hat OpenStack Platform 16.2 and 17.1 contains the vulnerable library code and retains its affected determination.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-76218"
},
{
"category": "external",
"summary": "RHBZ#2519603",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519603"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-76218",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76218"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76218",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76218"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-9rj7-rf2p-w77r"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-repo-init",
"url": "https://www.vulncheck.com/advisories/gitpython-before-remote-code-execution-via-repo-init"
}
],
"release_date": "2026-08-19T14:02:02.729000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Do not pass untrusted or attacker-influenced input as the template parameter (or other forwarded options) to GitPython\u0027s Repo.init. Upgrade to GitPython 3.1.58 or later, where the unsafe option forwarding is fixed.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gitpython: GitPython: Remote Code Execution via malicious Git hooks"
},
{
"cve": "CVE-2026-76219",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-08-19T14:12:07.494177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519597"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. This vulnerability allows an attacker to overwrite arbitrary files on the system. By injecting specific options into the `git read-tree` command through methods like `IndexFile.from_tree`, `IndexFile.reset`, and `IndexFile.merge_tree`, without proper option validation or argument separation, an attacker can cause the application to write a git-index blob to any attacker-controlled writable path, leading to data destruction.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "GitPython\u0027s IndexFile.from_tree, IndexFile.reset, and IndexFile.merge_tree append caller-influenced treeish strings to `git read-tree` without option validation or argument separation, letting an attacker who controls those arguments inject the `--index-output` option to overwrite arbitrary files at attacker-controlled writable paths (data destruction), fixed in 3.1.58. Red Hat products that bundle GitPython use it as an internal build/automation-time dependency and do not expose these IndexFile treeish arguments to adversary-controlled input; the vulnerable input cannot be controlled by an attacker in these products, so they are marked not affected. GitPython as shipped in Red Hat OpenStack Platform 16.2 and 17.1 contains the vulnerable library code and retains its affected determination.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-76219"
},
{
"category": "external",
"summary": "RHBZ#2519597",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519597"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-76219",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76219"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76219",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76219"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-read-tree",
"url": "https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-read-tree"
}
],
"release_date": "2026-08-19T14:02:03.425000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Do not pass untrusted or attacker-influenced treeish arguments to GitPython\u0027s IndexFile.from_tree, IndexFile.reset, or IndexFile.merge_tree. Upgrade to GitPython 3.1.58 or later, where option injection into `git read-tree` is fixed.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gitpython: GitPython: Arbitrary File Overwrite via `git read-tree` option injection"
},
{
"cve": "CVE-2026-76220",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-08-19T14:13:21.277967+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519610"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. A remote attacker can bypass the `check_unsafe_options` guard by combining a single-character keyword argument with `split_single_char_options=False`. This allows the attacker to supply a crafted dictionary of keyword arguments to guarded methods, such as `clone_from`, leading to arbitrary operating system command execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gitpython: GitPython: Arbitrary command execution via crafted kwargs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "GitPython\u0027s check_unsafe_options guard can be bypassed by combining a single-character keyword argument with split_single_char_options=False, letting an attacker who supplies a crafted kwargs dictionary to guarded methods such as clone_from emit a joined token parsed as `--upload-pack` and achieve arbitrary OS command execution even at the default allow_unsafe_options=False, fixed in 3.1.58. Red Hat products that bundle GitPython use it as an internal build/automation-time dependency and do not expose these method keyword arguments to adversary-controlled input; the vulnerable input cannot be controlled by an attacker in these products, so they are marked not affected. GitPython as shipped in Red Hat OpenStack Platform 16.2 and 17.1 contains the vulnerable library code and retains its affected determination.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-76220"
},
{
"category": "external",
"summary": "RHBZ#2519610",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519610"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-76220",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76220"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76220",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76220"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-wvpp-8hx9-p66j"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-command-execution-via-split-single-char-options",
"url": "https://www.vulncheck.com/advisories/gitpython-before-command-execution-via-split-single-char-options"
}
],
"release_date": "2026-08-19T14:02:04.108000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Do not pass untrusted or attacker-influenced keyword arguments to GitPython\u0027s guarded methods such as clone_from, and do not set split_single_char_options=False on untrusted input. Upgrade to GitPython 3.1.58 or later, where the check_unsafe_options bypass is fixed.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gitpython: GitPython: Arbitrary command execution via crafted kwargs"
},
{
"cve": "CVE-2026-76221",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-08-19T14:12:02.928636+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519596"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. This vulnerability allows attackers to inject malicious configuration options by manipulating option names within the option-name validator. By injecting special characters, an attacker can forge arbitrary git-config directives, potentially leading to arbitrary code execution on the system when a git operation is performed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gitpython: GitPython: Arbitrary code execution via config-name injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "GitPython\u0027s option-name validator fails to neutralize equals signs, hash symbols, and whitespace in option names, letting an attacker who controls option names forge arbitrary git-config directives (e.g. `sshCommand = touch /tmp/RCE #`) that execute arbitrary commands via core.sshCommand or core.hooksPath on the next git operation, fixed in 3.1.58. Red Hat products that bundle GitPython use it as an internal build/automation-time dependency and do not expose git option names to adversary-controlled input; the vulnerable input cannot be controlled by an attacker in these products, so they are marked not affected. GitPython as shipped in Red Hat OpenStack Platform 16.2 and 17.1 contains the vulnerable library code and retains its affected determination.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-76221"
},
{
"category": "external",
"summary": "RHBZ#2519596",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519596"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-76221",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76221"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76221",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76221"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-jm78-9fvv-mhgr"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-config-injection-via-option-name",
"url": "https://www.vulncheck.com/advisories/gitpython-before-config-injection-via-option-name"
}
],
"release_date": "2026-08-19T14:02:04.795000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "Do not pass untrusted or attacker-influenced git option names to GitPython. Upgrade to GitPython 3.1.58 or later, where option-name (config) injection is fixed.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gitpython: GitPython: Arbitrary code execution via config-name injection"
},
{
"cve": "CVE-2026-76222",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-08-19T14:13:14.104704+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519609"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython where it fails to properly validate submodule names within .gitmodules files. A remote attacker could craft a malicious Git repository containing specially formed submodule names with directory traversal sequences. When GitPython processes these malicious submodule names during repository initialization, it could lead to the creation of attacker-controlled Git repositories at arbitrary locations on the filesystem, potentially impacting system integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "CVE-2026-76222 is a path-traversal flaw in GitPython submodule handling: cloning a malicious repository and initializing its submodules can create files or repositories outside the intended directory, because GitPython omits the suspicious-submodule-name guard that upstream core git enforces. Unlike the caller-gated GitPython option-forwarding flaws, this triggers during ordinary clone plus submodule initialization of an untrusted repository, so any Red Hat product that ships or bundles a vulnerable GitPython version is affected. Fixed in GitPython 3.1.58.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"known_not_affected": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-76222"
},
{
"category": "external",
"summary": "RHBZ#2519609",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519609"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-76222",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-76222"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-76222",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-76222"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hmq2-w58f-27jc",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-hmq2-w58f-27jc"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-path-traversal-via-gitmodules-submodule-name",
"url": "https://www.vulncheck.com/advisories/gitpython-before-path-traversal-via-gitmodules-submodule-name"
}
],
"release_date": "2026-08-19T14:02:05.596000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:57+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63385"
},
{
"category": "workaround",
"details": "There is no mitigation beyond not cloning or initializing git submodules from untrusted repositories. Upgrade to GitPython 3.1.58 or later when it becomes available.",
"product_ids": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19-capsule:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19-capsule:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19-capsule:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19-capsule:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-capsule:satellite-capsule-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-capsule:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19-utils:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19-utils:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.19:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-0:3.18.0.10-1.el9sat.src",
"9Base-satellite-6.19:foreman-cli-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-debug-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-dynflow-sidekiq-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-ec2-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-installer-1:3.18.0.3-1.el9sat.src",
"9Base-satellite-6.19:foreman-installer-katello-1:3.18.0.3-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-journald-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-libvirt-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-openstack-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-pcp-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-postgresql-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-redis-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-service-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-telemetry-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:foreman-vmware-0:3.18.0.10-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.src",
"9Base-satellite-6.19:openvox-agent-0:8.28.1-1.el9sat.x86_64",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.19:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.noarch",
"9Base-satellite-6.19:pulpcore-obsolete-packages-0:1.3.1-5.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.19:python3.12-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.noarch",
"9Base-satellite-6.19:python3.12-gitpython-0:3.1.59-1.el9pc.src",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.noarch",
"9Base-satellite-6.19:python3.12-pulpcore-0:3.85.28-2.el9pc.src",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-foreman_rh_cloud-0:13.2.11-1.el9sat.src",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.noarch",
"9Base-satellite-6.19:rubygem-katello-0:4.20.0.8-1.el9sat.src",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.noarch",
"9Base-satellite-6.19:rubygem-smart_proxy_remote_execution_ssh-0:1.0.3-2.el9sat.src",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-0:6.19.4-1.el9sat.src",
"9Base-satellite-6.19:satellite-cli-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-common-0:6.19.4-1.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.noarch",
"9Base-satellite-6.19:satellite-lifecycle-0:6.19.0-2.el9sat.src",
"9Base-satellite-6.19:satellite-obsolete-packages-0:6.19.4-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…