RHSA-2026:63387
Vulnerability from csaf_redhat - Published: 2026-09-03 23:00 - Updated: 2026-09-04 02:03A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's concrete_artifact_manager.py constructs git clone commands without a '--' (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs 'ansible-galaxy collection install' with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
A flaw was found in ruby-jwt, a Ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard. A remote attacker can exploit this vulnerability by crafting a malicious token that is accepted due to an empty key being used in the HMAC (Hash-based Message Authentication Code) digest calculation during token verification. This allows the attacker to bypass authentication and integrity checks, potentially leading to unauthorized access or data manipulation.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before the entire body is received. This leaves trailing data to be processed incorrectly, potentially enabling an attacker to bypass security mechanisms or gain unauthorized access to resources.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch | — | ||
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit this to trigger a Denial of Service (DoS) in the client application, making it unavailable.
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 | — |
Vendor Fix
fix
Workaround
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
|
| Unresolved product id: 9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch | — |
Workaround
|
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new release is now available for Red Hat Satellite 6.17 for RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)\n\n* jackson-core: Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494)\n\n* AIOHTTP: Denial of Service via malformed HTTP responses (CVE-2026-69244)\n\n* AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() (CVE-2026-34993)\n\n* AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade (CVE-2026-69243)\n\n* ruby-jwt: Authentication bypass due to empty key in HMAC verification (CVE-2026-45363)\n\n* Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections (CVE-2026-10051)\n\n* ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (CVE-2026-11332)\n\n* ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332) (CVE-2026-16493)\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nBug Fix(es):\n\n* Upgrades or Updates In Satellite 6.17 Are Causing Issues With evr Column Not Found, Preventing the Migration Scripts From Running (SAT-42127)\n\n* Issue when creating filter in content view using openssl package (SAT-45924)\n\n* Satellite 6.17 upgrade, foreman-installer reports errors in /var/log/dnf.rpm.log Selected scenario is DISABLED, can not continue (SAT-48680)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:63387",
"url": "https://access.redhat.com/errata/RHSA-2026:63387"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2484099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484099"
},
{
"category": "external",
"summary": "2485379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
},
{
"category": "external",
"summary": "2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "2499928",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499928"
},
{
"category": "external",
"summary": "2500739",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500739"
},
{
"category": "external",
"summary": "2503724",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503724"
},
{
"category": "external",
"summary": "2510825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510825"
},
{
"category": "external",
"summary": "2510831",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510831"
},
{
"category": "external",
"summary": "2511026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511026"
},
{
"category": "external",
"summary": "SAT-42127",
"url": "https://issues.redhat.com/browse/SAT-42127"
},
{
"category": "external",
"summary": "SAT-45924",
"url": "https://issues.redhat.com/browse/SAT-45924"
},
{
"category": "external",
"summary": "SAT-48680",
"url": "https://issues.redhat.com/browse/SAT-48680"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63387.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.17.11 Async Update",
"tracking": {
"current_release_date": "2026-09-04T02:03:44+00:00",
"generator": {
"date": "2026-09-04T02:03:44+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:63387",
"initial_release_date": "2026-09-03T23:00:42+00:00",
"revision_history": [
{
"date": "2026-09-03T23:00:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-03T23:00:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-04T02:03:44+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.17::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.17::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.17::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_maintenance:6.17::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-0:3.14.0.20-1.el9sat.src",
"product": {
"name": "foreman-0:3.14.0.20-1.el9sat.src",
"product_id": "foreman-0:3.14.0.20-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.14.0.20-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.14.0.11-2.el9sat.src",
"product": {
"name": "foreman-installer-1:3.14.0.11-2.el9sat.src",
"product_id": "foreman-installer-1:3.14.0.11-2.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.14.0.11-2.el9sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openvox-server-0:8.15.2-1.el9sat.src",
"product": {
"name": "openvox-server-0:8.15.2-1.el9sat.src",
"product_id": "openvox-server-0:8.15.2-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvox-server@8.15.2-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"product": {
"name": "python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"product_id": "python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-aiohappyeyeballs@2.7.1-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-aiohttp-0:3.14.3-1.el9pc.src",
"product": {
"name": "python-aiohttp-0:3.14.3-1.el9pc.src",
"product_id": "python-aiohttp-0:3.14.3-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-aiohttp@3.14.3-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-aiosignal-0:1.4.0-1.el9pc.src",
"product": {
"name": "python-aiosignal-0:1.4.0-1.el9pc.src",
"product_id": "python-aiosignal-0:1.4.0-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-aiosignal@1.4.0-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-pulpcore-0:3.63.21-3.el9pc.src",
"product": {
"name": "python-pulpcore-0:3.63.21-3.el9pc.src",
"product_id": "python-pulpcore-0:3.63.21-3.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-pulpcore@3.63.21-3.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python-yarl-0:1.18.3-1.el9pc.src",
"product": {
"name": "python-yarl-0:1.18.3-1.el9pc.src",
"product_id": "python-yarl-0:1.18.3-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-yarl@1.18.3-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"product": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"product_id": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-jwt@2.10.3-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.16.0.19-1.el9sat.src",
"product": {
"name": "rubygem-katello-0:4.16.0.19-1.el9sat.src",
"product_id": "rubygem-katello-0:4.16.0.19-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.16.0.19-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.17.11-1.el9sat.src",
"product": {
"name": "satellite-0:6.17.11-1.el9sat.src",
"product_id": "satellite-0:6.17.11-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.17.11-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9sat.src",
"product": {
"name": "ansible-core-1:2.16.19-1.el9sat.src",
"product_id": "ansible-core-1:2.16.19-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9sat?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-pcp@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ovirt@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-redis@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-service-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-service-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-service-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-service@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"product": {
"name": "foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"product_id": "foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@3.14.0.20-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"product": {
"name": "foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"product_id": "foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.14.0.11-2.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"product": {
"name": "foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"product_id": "foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer-katello@3.14.0.11-2.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openvox-server-0:8.15.2-1.el9sat.noarch",
"product": {
"name": "openvox-server-0:8.15.2-1.el9sat.noarch",
"product_id": "openvox-server-0:8.15.2-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openvox-server@8.15.2-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"product": {
"name": "python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"product_id": "python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-aiohappyeyeballs@2.7.1-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"product": {
"name": "python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"product_id": "python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-aiosignal@1.4.0-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"product": {
"name": "python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"product_id": "python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-pulpcore@3.63.21-3.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"product": {
"name": "python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"product_id": "python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-yarl@1.18.3-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"product": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"product_id": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-jwt@2.10.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"product": {
"name": "rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"product_id": "rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.16.0.19-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.17.11-1.el9sat.noarch",
"product": {
"name": "satellite-capsule-0:6.17.11-1.el9sat.noarch",
"product_id": "satellite-capsule-0:6.17.11-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.17.11-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.17.11-1.el9sat.noarch",
"product": {
"name": "satellite-common-0:6.17.11-1.el9sat.noarch",
"product_id": "satellite-common-0:6.17.11-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.17.11-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"product": {
"name": "satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"product_id": "satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-obsolete-packages@6.17.11-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.17.11-1.el9sat.noarch",
"product": {
"name": "satellite-0:6.17.11-1.el9sat.noarch",
"product_id": "satellite-0:6.17.11-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.17.11-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.17.11-1.el9sat.noarch",
"product": {
"name": "satellite-cli-0:6.17.11-1.el9sat.noarch",
"product_id": "satellite-cli-0:6.17.11-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.17.11-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "ansible-core-1:2.16.19-1.el9sat.noarch",
"product": {
"name": "ansible-core-1:2.16.19-1.el9sat.noarch",
"product_id": "ansible-core-1:2.16.19-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-core@2.16.19-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "ansible-test-1:2.16.19-1.el9sat.noarch",
"product": {
"name": "ansible-test-1:2.16.19-1.el9sat.noarch",
"product_id": "ansible-test-1:2.16.19-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ansible-test@2.16.19-1.el9sat?arch=noarch\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"product": {
"name": "python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"product_id": "python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-aiohttp@3.14.3-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"product": {
"name": "python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"product_id": "python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-aiohttp-debugsource@3.14.3-1.el9pc?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"product": {
"name": "python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"product_id": "python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.11-aiohttp-debuginfo@3.14.3-1.el9pc?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-test-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch"
},
"product_reference": "ansible-test-1:2.16.19-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.14.0.20-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src"
},
"product_reference": "foreman-0:3.14.0.20-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.14.0.11-2.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.14.0.11-2.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src"
},
"product_reference": "foreman-installer-1:3.14.0.11-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.15.2-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch"
},
"product_reference": "openvox-server-0:8.15.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.15.2-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src"
},
"product_reference": "openvox-server-0:8.15.2-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-aiohappyeyeballs-0:2.7.1-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src"
},
"product_reference": "python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-aiohttp-0:3.14.3-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src"
},
"product_reference": "python-aiohttp-0:3.14.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-aiosignal-0:1.4.0-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src"
},
"product_reference": "python-aiosignal-0:1.4.0-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulpcore-0:3.63.21-3.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src"
},
"product_reference": "python-pulpcore-0:3.63.21-3.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-yarl-0:1.18.3-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src"
},
"product_reference": "python-yarl-0:1.18.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch"
},
"product_reference": "python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-aiosignal-0:1.4.0-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch"
},
"product_reference": "python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulpcore-0:3.63.21-3.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch"
},
"product_reference": "python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-yarl-0:1.18.3-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch"
},
"product_reference": "python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.11-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src"
},
"product_reference": "satellite-0:6.17.11-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.17.11-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.17.11-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.17.11-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.17.11-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-maintenance"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.14.0.20-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src"
},
"product_reference": "foreman-0:3.14.0.20-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.11-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src"
},
"product_reference": "satellite-0:6.17.11-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.17.11-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.17.11-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-core-1:2.16.19-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src"
},
"product_reference": "ansible-core-1:2.16.19-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ansible-test-1:2.16.19-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch"
},
"product_reference": "ansible-test-1:2.16.19-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.14.0.20-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src"
},
"product_reference": "foreman-0:3.14.0.20-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.14.0.11-2.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.14.0.11-2.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src"
},
"product_reference": "foreman-installer-1:3.14.0.11-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ovirt-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.15.2-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch"
},
"product_reference": "openvox-server-0:8.15.2-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openvox-server-0:8.15.2-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src"
},
"product_reference": "openvox-server-0:8.15.2-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-aiohappyeyeballs-0:2.7.1-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src"
},
"product_reference": "python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-aiohttp-0:3.14.3-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src"
},
"product_reference": "python-aiohttp-0:3.14.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-aiosignal-0:1.4.0-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src"
},
"product_reference": "python-aiosignal-0:1.4.0-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-pulpcore-0:3.63.21-3.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src"
},
"product_reference": "python-pulpcore-0:3.63.21-3.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-yarl-0:1.18.3-1.el9pc.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src"
},
"product_reference": "python-yarl-0:1.18.3-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch"
},
"product_reference": "python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64 as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
},
"product_reference": "python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-aiosignal-0:1.4.0-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch"
},
"product_reference": "python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-pulpcore-0:3.63.21-3.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch"
},
"product_reference": "python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.11-yarl-0:1.18.3-1.el9pc.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch"
},
"product_reference": "python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-jwt-0:2.10.3-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src"
},
"product_reference": "rubygem-jwt-0:2.10.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.16.0.19-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch"
},
"product_reference": "rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.16.0.19-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src"
},
"product_reference": "rubygem-katello-0:4.16.0.19-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.11-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch"
},
"product_reference": "satellite-0:6.17.11-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.17.11-1.el9sat.src as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src"
},
"product_reference": "satellite-0:6.17.11-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.17.11-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.17.11-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.17.11-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.17.11-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch as a component of Red Hat Satellite 6.17 for RHEL 9",
"product_id": "9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.17"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-10051",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-07-14T10:01:09.470495+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499928"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Eclipse Jetty. This vulnerability allows a remote attacker to cause the server to retain HTTP/1.1 request trailers from a prior connection. Consequently, subsequent requests made over the same connection may unintentionally disclose information by reporting the previously retained trailers, or a combination of previous and current request trailers.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate: This information disclosure flaw in Eclipse Jetty allows HTTP/1.1 trailers from a previous request to be retained and subsequently exposed to other requests sharing the same connection. This could lead to unintended disclosure of sensitive information in Red Hat products utilizing Jetty, such as Red Hat AMQ and Enterprise Application Platform, particularly when connection reuse is active and trailers contain confidential data. The confidentiality impact is considered low.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10051"
},
{
"category": "external",
"summary": "RHBZ#2499928",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499928"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10051",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10051"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10051"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119",
"url": "https://gitlab.eclipse.org/security/cve-assignment/-/work_items/119"
}
],
"release_date": "2026-07-14T08:44:38.233000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:42+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63387"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections"
},
{
"acknowledgments": [
{
"names": [
"Tommaso Bona"
]
}
],
"cve": "CVE-2026-11332",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-04-14T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2485379"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role\u0027s meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git configuration flags through the src field. This allows arbitrary code execution on the machine of a user who installs the role via ansible-galaxy role install.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Conditions for Exploitation: Successful exploitation requires user interaction, specifically tricking a victim into installing a maliciously crafted Ansible role (or a role with a malicious dependency) using the ansible-galaxy role install command.\n\nBroad Impact: While user interaction is required, the potential impact is highly severe. Successfully injecting the malicious arguments allows a remote attacker to achieve arbitrary code execution on the machine running the Ansible command, leading to a full compromise of the user\u0027s environment and system integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11332"
},
{
"category": "external",
"summary": "RHBZ#2485379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485379"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11332",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11332"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11332"
},
{
"category": "external",
"summary": "https://github.com/ansible/ansible",
"url": "https://github.com/ansible/ansible"
}
],
"release_date": "2026-06-05T07:12:55.739000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:42+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63387"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution"
},
{
"acknowledgments": [
{
"names": [
"Ta Duc Thien"
],
"organization": "NTCS"
}
],
"cve": "CVE-2026-16493",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-07-21T11:19:29.854000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503724"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core\u0027s concrete_artifact_manager.py constructs git clone commands without a \u0027--\u0027 (end-of-options) separator before user-supplied URLs when installing collections from git sources. An attacker who provides a crafted collection source URI containing git argument injection payloads can achieve arbitrary command execution when a user runs \u0027ansible-galaxy collection install\u0027 with the malicious source. This is an incomplete fix for CVE-2026-11332, which hardened the role install path but missed the equivalent collection install code path.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332)",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has assessed this vulnerability as Important because it allows arbitrary command execution when a user installs a collection from a crafted git source. The vulnerability exists because the fix for CVE-2026-11332 (RHSA-2026:42078, RHSA-2026:42079, RHSA-2026:42080, published 2026-07-20) only addressed the role install path in lib/ansible/utils/galaxy.py but did not apply the same \u0027--\u0027 end-of-options separator to the collection install path in lib/ansible/galaxy/collection/concrete_artifact_manager.py. All versions of ansible-core that support collection installation from git sources are affected. Users who install collections exclusively from Ansible Galaxy or Automation Hub (HTTPS sources) are not exposed to this specific flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16493"
},
{
"category": "external",
"summary": "RHBZ#2503724",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503724"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16493",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16493"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16493",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16493"
}
],
"release_date": "2026-07-21T16:32:48.105000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:42+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63387"
},
{
"category": "workaround",
"details": "The following practices would help for avoiding exposure and mitigate this flaw:\n\n1. Do not install Ansible collections from untrusted or unverified git sources. Only install collections from trusted sources such as Ansible Galaxy (https://galaxy.ansible.com), Red Hat Automation Hub (https://console.redhat.com/ansible/automation-hub), or verified internal repositories using HTTPS URLs.\n\n2. Carefully inspect any requirements.yml files before running \u0027ansible-galaxy collection install -r requirements.yml\u0027. Verify that all collection sources use legitimate HTTPS URLs and do not contain git+ prefixed URIs with suspicious characters (especially values starting with \u0027-\u0027).\n\n3. Ensure your system\u0027s git version is 2.12 or later, which disables the ext:: transport by default. While this does not fully prevent exploitation (the -ccore.sshCommand technique bypasses transport restrictions), it eliminates one of the exploitation vectors.\n\n4. Restrict the GIT_ALLOW_PROTOCOL environment variable to only necessary protocols (e.g. https, ssh) and never include \u0027ext\u0027 unless absolutely required.",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ansible-core: argument injection in ansible-galaxy collection install via git clone (incomplete fix for CVE-2026-11332)"
},
{
"cve": "CVE-2026-34993",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-02T20:01:12.690409+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484099"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework for asyncio and Python. An attacker could exploit this vulnerability by providing untrusted input to the `CookieJar.load()` function. This could potentially lead to arbitrary code execution, allowing the attacker to run malicious code on the affected system. This issue is most likely to occur in applications that allow attacker-controlled files to be loaded.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in AIOHTTP, a Python asynchronous HTTP framework, due to potential arbitrary code execution. The vulnerability arises when applications load untrusted input into the `CookieJar.load()` function. Exploitation requires an application to be configured to process attacker-controlled files, which is not a default or common scenario in most Red Hat product deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34993"
},
{
"category": "external",
"summary": "RHBZ#2484099",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484099"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34993",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34993"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34993"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00",
"url": "https://github.com/aio-libs/aiohttp/commit/dcf40f30637e8752c76781cf6703b5a236749a00"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jg22-mg44-37j8"
}
],
"release_date": "2026-06-02T18:29:15.847000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:42+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63387"
},
{
"category": "workaround",
"details": "Applications using AIOHTTP that are configured to load untrusted files via the `CookieJar.load()` function should implement input sanitization prior to loading. This prevents the injection of malicious code.",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load()"
},
{
"cve": "CVE-2026-45363",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-07-14T22:03:23.419937+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2500739"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ruby-jwt, a Ruby implementation of the RFC 7519 OAuth JSON Web Token (JWT) standard. A remote attacker can exploit this vulnerability by crafting a malicious token that is accepted due to an empty key being used in the HMAC (Hash-based Message Authentication Code) digest calculation during token verification. This allows the attacker to bypass authentication and integrity checks, potentially leading to unauthorized access or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45363"
},
{
"category": "external",
"summary": "RHBZ#2500739",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2500739"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45363",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45363"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45363",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45363"
},
{
"category": "external",
"summary": "https://github.com/jwt/ruby-jwt/commit/9820020869ad147b941e49d96ab8beba35532964",
"url": "https://github.com/jwt/ruby-jwt/commit/9820020869ad147b941e49d96ab8beba35532964"
},
{
"category": "external",
"summary": "https://github.com/jwt/ruby-jwt/commit/db560b769a07bd9724e77ff505011ac01872106f",
"url": "https://github.com/jwt/ruby-jwt/commit/db560b769a07bd9724e77ff505011ac01872106f"
},
{
"category": "external",
"summary": "https://github.com/jwt/ruby-jwt/releases/tag/v2.10.3",
"url": "https://github.com/jwt/ruby-jwt/releases/tag/v2.10.3"
},
{
"category": "external",
"summary": "https://github.com/jwt/ruby-jwt/releases/tag/v3.2.0",
"url": "https://github.com/jwt/ruby-jwt/releases/tag/v3.2.0"
},
{
"category": "external",
"summary": "https://github.com/jwt/ruby-jwt/security/advisories/GHSA-c32j-vqhx-rx3x",
"url": "https://github.com/jwt/ruby-jwt/security/advisories/GHSA-c32j-vqhx-rx3x"
}
],
"release_date": "2026-07-14T21:32:26.676000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:42+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63387"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ruby-jwt: ruby-jwt: Authentication bypass due to empty key in HMAC verification"
},
{
"cve": "CVE-2026-54512",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-23T22:01:49.821346+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `jackson-databind` is rated as Important. While it describes a potential bypass of the PolymorphicTypeValidator leading to arbitrary code execution, exploitation requires an attacker to already possess administrative privileges, specifically the `manage-realm` role. This flaw does not enable privilege escalation, as it does not grant additional capabilities beyond those inherently available to an existing administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54512"
},
{
"category": "external",
"summary": "RHBZ#2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5",
"url": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5988",
"url": "https://github.com/FasterXML/jackson-databind/issues/5988"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"
}
],
"release_date": "2026-06-23T20:56:36.646000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:42+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63387"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass"
},
{
"cve": "CVE-2026-68494",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-04T15:01:53.631865+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2511026"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This uncontrolled memory growth can lead to a denial of service (DoS) by exhausting the Java Virtual Machine (JVM) heap.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in `jackson-core`\u0027s asynchronous JSON parser. A remote, unauthenticated attacker can exploit an incomplete fix to bypass number length constraints, leading to unbounded memory accumulation and potential JVM heap exhaustion in reactive frameworks processing chunked JSON input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-68494"
},
{
"category": "external",
"summary": "RHBZ#2511026",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511026"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-68494",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-68494"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68494"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd",
"url": "https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641",
"url": "https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8",
"url": "https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/pull/1611",
"url": "https://github.com/FasterXML/jackson-core/pull/1611"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9",
"url": "https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-72hv-8253-57qq",
"url": "https://github.com/advisories/GHSA-72hv-8253-57qq"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-18401",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-18401"
}
],
"release_date": "2026-08-04T14:39:14.471000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:42+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63387"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser"
},
{
"cve": "CVE-2026-69243",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"discovery_date": "2026-08-03T22:02:56.444781+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510831"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability allows a remote attacker to perform HTTP request smuggling due to an edge case in the WebSocket upgrade procedure. When a WebSocket upgrade request includes a body, the parser may switch protocols before the entire body is received. This leaves trailing data to be processed incorrectly, potentially enabling an attacker to bypass security mechanisms or gain unauthorized access to resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Moderate impact. This vulnerability in aiohttp\u0027s HTTP parser enables request smuggling when the server-side component handles WebSocket upgrade requests containing a body. An attacker could exploit an edge case during protocol switching, causing trailing data to be processed as subsequent requests or upgraded protocol data. This affects Red Hat products utilizing aiohttp in a server-side capacity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69243"
},
{
"category": "external",
"summary": "RHBZ#2510831",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510831"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69243",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69243"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69243",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69243"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98",
"url": "https://github.com/aio-libs/aiohttp/commit/6ae358f0983c3f4d6f67692b2f8e65dc8e091c98"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/pull/13017",
"url": "https://github.com/aio-libs/aiohttp/pull/13017"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.2",
"url": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.2"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mfx4-hv73-q22v",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-mfx4-hv73-q22v"
}
],
"release_date": "2026-08-03T20:45:43.406000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:42+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63387"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade"
},
{
"cve": "CVE-2026-69244",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-08-03T22:02:32.583060+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2510825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit this to trigger a Denial of Service (DoS) in the client application, making it unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important severity flaw in aiohttp that could lead to a denial of service in client applications. A remote, malicious HTTP server could send a specially crafted response, causing an out-of-bounds read in the aiohttp C response parser and resulting in the client application terminating unexpectedly.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-69244"
},
{
"category": "external",
"summary": "RHBZ#2510825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2510825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-69244",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-69244"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-69244",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-69244"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d",
"url": "https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/pull/13223",
"url": "https://github.com/aio-libs/aiohttp/pull/13223"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3",
"url": "https://github.com/aio-libs/aiohttp/releases/tag/v3.14.3"
},
{
"category": "external",
"summary": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273",
"url": "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-cq5v-8q36-5273"
}
],
"release_date": "2026-08-03T20:50:59.538000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T23:00:42+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.17/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63387"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-capsule:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17-capsule:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17-capsule:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17-capsule:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17-capsule:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17-capsule:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17-capsule:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17-capsule:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17-capsule:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-capsule:satellite-capsule-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-capsule:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17-maintenance:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17-utils:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17-utils:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17-utils:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:ansible-core-1:2.16.19-1.el9sat.src",
"9Base-satellite-6.17:ansible-test-1:2.16.19-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-0:3.14.0.20-1.el9sat.src",
"9Base-satellite-6.17:foreman-cli-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-debug-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-dynflow-sidekiq-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ec2-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-installer-1:3.14.0.11-2.el9sat.src",
"9Base-satellite-6.17:foreman-installer-katello-1:3.14.0.11-2.el9sat.noarch",
"9Base-satellite-6.17:foreman-journald-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-libvirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-openstack-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-ovirt-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-pcp-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-postgresql-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-redis-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-service-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-telemetry-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:foreman-vmware-0:3.14.0.20-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.noarch",
"9Base-satellite-6.17:openvox-server-0:8.15.2-1.el9sat.src",
"9Base-satellite-6.17:python-aiohappyeyeballs-0:2.7.1-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-0:3.14.3-1.el9pc.src",
"9Base-satellite-6.17:python-aiohttp-debugsource-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python-aiosignal-0:1.4.0-1.el9pc.src",
"9Base-satellite-6.17:python-pulpcore-0:3.63.21-3.el9pc.src",
"9Base-satellite-6.17:python-yarl-0:1.18.3-1.el9pc.src",
"9Base-satellite-6.17:python3.11-aiohappyeyeballs-0:2.7.1-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-aiohttp-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiohttp-debuginfo-0:3.14.3-1.el9pc.x86_64",
"9Base-satellite-6.17:python3.11-aiosignal-0:1.4.0-1.el9pc.noarch",
"9Base-satellite-6.17:python3.11-pulpcore-0:3.63.21-3.el9pc.noarch",
"9Base-satellite-6.17:python3.11-yarl-0:1.18.3-1.el9pc.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-jwt-0:2.10.3-1.el9sat.src",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.noarch",
"9Base-satellite-6.17:rubygem-katello-0:4.16.0.19-1.el9sat.src",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-0:6.17.11-1.el9sat.src",
"9Base-satellite-6.17:satellite-cli-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-common-0:6.17.11-1.el9sat.noarch",
"9Base-satellite-6.17:satellite-obsolete-packages-0:6.17.11-1.el9sat.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.