RHSA-2025:19721 - Security Advisory

Topic

A new release is now available for Red Hat Satellite 6.18 for RHEL 9.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

Description

Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.

Security Fix(es):

• foreman: OS command injection via ct_location and fcct_location parameters (CVE-2025-10622)

Users of Red Hat Satellite are advised to upgrade to these updated
packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For detailed instructions how to apply this update, refer to:

https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/updating_red_hat_satellite/index

Affected Products

• Red Hat Satellite 6.18 x86_64
• Red Hat Satellite Capsule 6.18 x86_64
• Red Hat Enterprise Linux for x86_64 9 x86_64

Fixes

• BZ - 2396020 - CVE-2025-10622 foreman: OS command injection via ct_location and fcct_location parameters
• SAT-11875 - Create option for default repository mirroring behavior
• SAT-15682 - Document status/execution API endpoint in hosts
• SAT-18422 - Update the Hypervisor last_checkin once the same still around and reporting
• SAT-18815 - ACS refresh causes out-of-memory errors
• SAT-20253 - job templates are missing the correct org/loc after import with hammer
• SAT-20700 - Show upgrade links under Administer > Upgrade
• SAT-21126 - Capsule sync gets stuck forever after specific connection issues
• SAT-21129 - Satellite removes users from groups if the membership uses uniqueMember
• SAT-21543 - The value of "--foreman-foreman-url" option is not honored as the value of foreman_url in Satellite settings.
• SAT-21841 - Incorrect information/data is populated in the 'Content' tab within Satellite WebUI -> Infrastructure -> Capsules' page
• SAT-22589 - hammer command with csv option generates few fields in json format
• SAT-22655 - Filter in content host page not working properly
• SAT-22998 - pulpcore-content does not validate content of downloaded on-demand artifacts before delivering them to clients
• SAT-23121 - pulpcore related SELinux denials
• SAT-23671 - host_enc macro fails to process data when using image based provisioning
• SAT-24007 - Add unset feature in set release version bulk action on the content host
• SAT-24175 - HTTP proxy whose URL is an IPv6 address (not a hostname resolving to an IPv6) does not work
• SAT-25184 - If banner message is too lengthy white block appears and cuts off footer message
• SAT-25333 - container_gateway on capsules returns success for login attempts with no username/password informed
• SAT-25438 - pulpcore core_progressreport table gets out of sync with core_task table with no easy/recommended way to clean it up
• SAT-25439 - hammer task list shows extra syntax/tags for repository and CV related tasks
• SAT-25805 - Katello host form hooks get attached multiple times
• SAT-25968 - Hammer command of module filter does not shows module-filter-id of modules.
• SAT-26013 - 'Manage Columns' does not appear on new Hosts Index page
• SAT-26487 - Can't delete hosts due to type null host statuses
• SAT-26559 - Incremental CCV updates all CV versions
• SAT-26877 - Create option for default repository mirroring behavior
• SAT-26905 - Remote execution with Ansible 2.16 - ANSIBLE_COLLECTIONS_PATHS deprecated
• SAT-27377 - Ensure host key cleanup of /usr/share/foreman-proxy/.ssh/known_hosts on the Satellite (or Capsule) server when first remote execution is using Ansible
• SAT-27474 - New job invocation detail page: reporting of the job status should not rely on the local browser time
• SAT-27937 - foreman-proxy lacks HSTS support
• SAT-28085 - Running OpenSCAP scan on Satellite 6.16 failed as :server: entry not updated by running Ansible Roles
• SAT-28214 - [Bug] - Preupgrade check with leapp is not invoked from Satellite WebUI when executed from All Hosts Page (New UI).
• SAT-28460 - "No hosts matched search, or action unauthorized for selected hosts" error comes while using the filter box in Content Host Errata Management in Satellite 6.15
• SAT-28485 - Reject start-at dates in the past when a job is scheduled
• SAT-28495 - Rolling Content Views
• SAT-28694 - Option to obfuscate hostnames in "Satellite WebUI >> Configure > Inventory Upload >> Obfuscate host names" does not obfuscate hosts
• SAT-29428 - Pulp content app never close Redis connections
• SAT-29574 - Installer loads plugins from /opt/puppetlabs/puppet/cache/lib/, breaking PostgreSQL config updates and thus upgrades from 6.15 to 6.16 (max_connections is not updated)
• SAT-29785 - OpenSCAP reports shown falsely as succeeded
• SAT-29942 - Select one errata in the host collection and click on 'Install Selected via remote execution ? customize first' install all available errata for the host collection
• SAT-30006 - Discovered Host Refresh Facts throws ERF50-0929 - undefined method 'escape' for URI module
• SAT-30122 - [review] Document rolling content views
• SAT-30123 - [review] Hammer support for rolling content views
• SAT-30221 - Unable to update or change a Host's content view using the redhat.satellite.host module on Satellite v6.16
• SAT-30370 - Support container content in load-balanced Capsules
• SAT-30471 - Documentation for redhat.satellite.registration_command is not clear that smart proxy means Capsule
• SAT-30594 - Virtual TPM option doesn't work with Image based provisioning method
• SAT-30838 - Template sync doesn't use proxy when ssh used
• SAT-30896 - Global registration template takes longer and failed when load balancer is unreachable.
• SAT-30897 - Incorrect description for search option in "hammer user registration-tokens invalidate-multiple"
• SAT-30899 - Add capsule URL as flatpak index endpoint
• SAT-30900 - Create a page with a table listing flatpak remotes in an organization.
• SAT-30901 - Add a create button and form to create flatpak remotes on the UI
• SAT-30902 - Add an edit button and an edit form on the table of remotes
• SAT-30903 - Add a scan action on the flatpak remote table
• SAT-30904 - Add a Remote details page with a table for scanned remote repositories
• SAT-30909 - Add mirror action with a small form that selects product to mirror into
• SAT-30915 - Remove version from environment wizard still makes you choose a replacement cv/lce even if it will be ignored
• SAT-30917 - Remove version from environment wizard doesn't enforce content source LCE rules
• SAT-30976 - Update to NodeJS 22
• SAT-30999 - XML file(s): filelists not found when trying to sync https://artifacts.elastic.co/packages/8.x/yum
• SAT-31026 - As a user I want to be able to change the owner of multiple hosts
• SAT-31028 - As a user I want to be able to change the repository sets of multiple hosts
• SAT-31029 - As a user I want to be able to dissociate multiple hosts
• SAT-31030 - As a user I want to be able to change the location and organization of multiple hosts
• SAT-31104 - CV with depsolving and filters on selected repos is broken at orhpan cleanup
• SAT-31137 - Unclear if CA has trust rules should be a warning or an error
• SAT-31194 - As a user I want to be able to see the virtual column on the new hosts UI
• SAT-31195 - The ram column on the new hosts page is not showing the memory correctly
• SAT-31224 - Packages wizard on new "All Hosts Page" removes host filter if hosts are re-sorted
• SAT-31226 - As a user, I can install transient packages on image mode hosts via REX
• SAT-31251 - Warn users that a package installed to an image mode host will be transient
• SAT-31357 - Mention dbus-launch prerequisite for Install flatpak app job template
• SAT-31360 - Assigning ?multiple CVs to a client fails with error 500 when allow_multiple_content_views setting is disabled
• SAT-31388 - Generating Job - Invocation Report in HTML output format is inappropriate in RedHat Satellite 6
• SAT-31392 - Need a way to disable weak ciphers for Mosquitto in installer level
• SAT-31397 - The "Refresh Counts" button for the Capsule fails to work after the lifecycle environment is removed and then re-added.
• SAT-31400 - Orphan cleanup fails with error "The repository version cannot be deleted because it (or its publications) are currently being used to distribute content"
• SAT-31411 - Often a cloned Satellite talks to production Satellite instead of itself
• SAT-31421 - There's an unwanted "|" in Edit Capsules page of Satellite 6.17
• SAT-31424 - Typo in the name of Capsule sync tasks e.g. Sync Repository on Capsule(ies)
• SAT-31449 - post_Script field is not executed for ansible remote job in satellite 6.15
• SAT-31467 - Give customers an option with the rh_cloud plugin to submit the minimal amount of data needed for Subscription reporting
• SAT-31561 - [review] Organization-label can break container image sync
• SAT-31578 - Create documentation procedure for UI Flatpak experience
• SAT-31580 - As a user, I can install transient packages via REX Ansible
• SAT-31655 - Insufficient Page Authorization
• SAT-31763 - Restore of 6.16 w/ upgraded remote DB fails to drop evr extension
• SAT-31806 - Syncing rolling content views to smart proxies does not update proxy content counts
• SAT-31807 - Disallow adding container push repositories to rolling content views
• SAT-31827 - Missing "Product Host Count" column in Hammer CLI subscription list output
• SAT-31842 - Satellite should include mmx64.efi into the full bootdisks
• SAT-31859 - Kerberos support for Ansible Modules
• SAT-31966 - Unable to find images in Azure image galleries
• SAT-31979 - The custom repository fails to sync with the Capsule server, resulting in an error.
• SAT-31997 - As Satellite user I want package profile upload to trigger host-specific inventory reports
• SAT-32223 - Add Ansible Check Mode Support to Job Template
• SAT-32437 - New Host UI Bulk wizards fail to render with PF5
• SAT-32464 - PF5 issue: Bad icon spacing
• SAT-32471 - Can't select columns in ManageColumns tree view
• SAT-32491 - Flatpak Support for Provisioning: Implement Certificate-Based Authentication for Container Content on Satellite
• SAT-32561 - PF5 issue: Host status icons out of alignment
• SAT-32574 - Hosts assigned to multiple Candlepin environments can't access repos in Library environment if it's not ordered first
• SAT-32611 - Katello repositories API adds organizations to the response
• SAT-32615 - download_debug_certificate doesn't accept org label
• SAT-32622 - Cannot update "Unprotected" field on repositories
• SAT-32667 - When importing content in disconnected Satellite in syncable format via hammer, hammer content-import list is empty
• SAT-32697 - The "Leapp preupgrade report" tab on job invocations UI page disappears
• SAT-32710 - subscription-manager environments --set raises Forbidden error until the user is Admin
• SAT-32715 - Incremental repository export fails on syncable content unless --format syncable is passed
• SAT-33154 - AVC denials on /run/pulpcore-api.sock with Pulpcore 3.73
• SAT-33189 - undefined method '#ip' for NilClass when trying to generate "Ansible - Ansible Inventory" report in Satellite 6.16 or later
• SAT-33242 - Satellite allows host build submission even when kickstart template validation fails due to custom snippets
• SAT-33243 - hammer insights inventory sync raises an ISE
• SAT-33248 - Ansible Collection compatible with Ansible 2.19
• SAT-33254 - Global Registration: As a user, I can easily setup certs in the /etc/containers/certs.d/hostname/ directory
• SAT-33255 - As a registered host, I don't need to podman login to access container repositories on satellite server.
• SAT-33256 - As a registered host, I don't need to podman login to access flatpak index on satellite server.
• SAT-33257 - As a registered host, I can only access podman content in my content view environment(s) on satellite server.
• SAT-33258 - As a registered host, I can only access flatpak content in my content view environment(s) on satellite server.
• SAT-33259 - Implement Certificate-Based Authentication for Container Content on Capsule
• SAT-33260 - As a registered host, I don't need to podman login to access container repositories on the capsule.
• SAT-33261 - As a registered host, I don't need to podman login to access flatpak index on the capsule.
• SAT-33306 - Patternfly 4 to 5 small bugs list
• SAT-33371 - The 'Download Utility' dropdown under 'Register Host' is not functioning.
• SAT-33407 - Repo removal from a rolling CV does not trigger the Capsule sync
• SAT-33412 - As a user I would like to see recommendations for host details
• SAT-33413 - As a user I would like to see list of recommendations grouped by recommendation name
• SAT-33414 - As a user I would like to see the Recommendation Details and list of affected systems
• SAT-33455 - `grub.cfg` generated by Red Hat Satellite server causes boot issues during chainloading
• SAT-33475 - bulk_stop of foreman tasks must stop dynflow part as well
• SAT-33496 - Silent failure when triggering a CapsuleSync using a user without the manage_capsule_content permission
• SAT-33501 - rolling attribute missing from AK API response
• SAT-33817 - When creating a rolling content view with repository_ids no rolling repo clones are created
• SAT-34021 - Printing output in profile.d breaks upgrading to Red Hat Satellite 6.17 fails with PG::InsufficientPrivilege: ERROR: must be owner of extension evr
• SAT-34023 - As a user I want to manage cvemap.xml in Satellite
• SAT-34055 - Registering host with invalid hostgroup doesn't fail
• SAT-34089 - Flatpak - Install REX job run hangs for 10 minutes
• SAT-34090 - As an inventory upload user, hostnames and IP addresses are obfuscated correctly on my reports regardless of insights-client config
• SAT-34092 - Document new host obfuscation behavior
• SAT-34133 - Second container push set manifest size fields to -1, which breaks bootc
• SAT-34146 - Error when trying to set any subscription attributes for virt-who-* hosts.
• SAT-34147 - Fix the broken documentation link for Realm
• SAT-34224 - /etc/systemd/system/rhcd.service.d/proxy.conf uses network protocol for NO_PROXY declaration
• SAT-34231 - Upgrade to 6.18 fails due to incomplete obsoletes for python3.11 django packages
• SAT-34243 - When using foreman-rake command to reset the password, if the user is not a valid account, the same will be created with admin privileges
• SAT-34258 - Host registration shows no errors even when built submission fails at the end of Global Registration process
• SAT-34271 - Deadlock in Capsule sync of mupliple copies of same ansible collections repo
• SAT-34301 - Content view environments endpoint does not work well with FAM
• SAT-34510 - Update disconnected update documentation for how to update containers
• SAT-34546 - REX job template: As a user, I can easily setup certs in the /etc/containers/certs.d/hostname/ directory
• SAT-34564 - Notification cleanup fails by default since Sat6.16
• SAT-34592 - Manifest refresh fails in 6.17 due to empty Download policy for ISO repo
• SAT-34621 - Installer fails to add new import path when it's the same as the export path
• SAT-34649 - Errata page displays 'Apply Errata' even when one erratum is selected
• SAT-34713 - foreman-rake rh_cloud:hybridcloud_register task is broken
• SAT-34777 - RPM repository publish operations are slower than they could be due to inefficiencies
• SAT-34778 - FDI needs to be built on RHEL 9.6
• SAT-34857 - [Satellite 6] Ansible Satellite Collection repository (redhat.satellite.content_upload)
• SAT-34926 - Templates rendered with errors
• SAT-34977 - package_signing_fingerprint cannot be nil error after upgrade
• SAT-34995 - VMware compute profile - uninitialized constant Fog::Vsphere::Compute::ResourcePool
• SAT-35160 - Insights advisor conflict with container-tools
• SAT-35208 - Libvirt UUID field accepts invalid values during image creation
• SAT-35219 - After installing a package via the --transient flag on an image mode host, any template that uses bootc usr-overlay will fail to perform package actions
• SAT-35228 - Post 6.17 upgrade satellite is affected with high CPU usage and Actions::Katello::Applicability::Hosts::BulkGenerate tasks getting stuck
• SAT-35235 - The upgrade documentation linked under 'Administer ? Satellite Upgrade' directs to content that is not relevant to the current upgrade process.
• SAT-35244 - ansible-foreman_scap_client cannot transiently install openscap package
• SAT-35248 - Unable to modify the "Unprotected" field for custom repositories.
• SAT-35249 - Request to add the details about "Minimal Data collection" on Inventory Upload page and add documentation link.
• SAT-35282 - Satellite 6.18 Upgrade check does not warn to login to the RedHat Registry when foreman-plugin-rh-cloud-enable-iop-advisor-engine is enabled
• SAT-35290 - Change the "users" config from dict to list in the Clouldinit default provisioning template
• SAT-35293 - Obfuscation in optional data collection mode is not honored randomly
• SAT-35303 - OpenSCAP remediations fail for image mode machines on atomic package manager use
• SAT-35304 - Unable to revert to default self-signed certificates after applying custom CA certs on satellite 6.18
• SAT-35327 - Fail to upgrade to Satellite 6.16 when Satellite has more than 520 users
• SAT-35343 - Change the name for "Optional data collection" setting on Inventory Upload page to "Analytics Data Collection"
• SAT-35395 - Insights Recommendation rule_id filter is not working for the suggested rules
• SAT-35461 - Restoring Red Hat Satellite 6 is impossible when the backup contains db duplicate issues.
• SAT-35489 - Clean duplicate erratum packages before bigint migration
• SAT-35513 - Content is not syncing and a 'pulp task error' is being encountered.
• SAT-35628 - Satellite shows incorrect host count when applying an erratum
• SAT-35651 - Discovery page fails with "too many redirects" when User role uses unrecognized search fields.
• SAT-35722 - Capsule sync: "Unable to update hosts ([RestClient::NotFound]: 404 Not Found) for Capsule"
• SAT-35868 - Add storage requirement for /var/lib/containers
• SAT-35876 - [DOC] Install advisor and vulnerability services
• SAT-35909 - Support delete action on the remote table row
• SAT-35922 - Few PF5 widgets have dynamic OUIA IDs on Contentview Page
• SAT-35946 - Foreman_rh_cloud plugin fails to forward requests with pipe symbol
• SAT-35983 - The repositories created under the product page shows a blank page
• SAT-35989 - Handle permissions correctly on flatpak UI + UX feedback
• SAT-35992 - JobInvocationHostTable doesnt load the template with auto reload
• SAT-35994 - Prevent unintentional password updates in empty edit forms
• SAT-35996 - Too long strings make text inputs in PF5 Settings overflow
• SAT-36007 - Total CVEs link on host index page redirects to invalid Vulnerabilities tab URL on host details page
• SAT-36015 - Readonly Setting shown as editable in new PF5 Settings
• SAT-36022 - replace react-ellipsis-with-tooltip
• SAT-36023 - job details page - add fallback to cancel error toast
• SAT-36030 - HTTP should be allowed on Flatpak remote creation and application name should be displayed for remote repository
• SAT-36031 - Incorrectly handled error when Setting field data validation fails: "Error updating setting: undefined"
• SAT-36032 - Remove "seeded" and "organization_id" from FP remote search bar proposals
• SAT-36033 - It's possible to fill in " " in Settings even though it's not valid. Then it shows as " ".
• SAT-36046 - In PF5 Settings, empty fields are not visually distinguished from fields with value "Empty"
• SAT-36047 - Navigate to Host's Vulnerabilties tab from CVE details page doesn't work
• SAT-36048 - Re-registering host with vulnerabilities shows duplicate entries on CVE details page
• SAT-36050 - Navigating to CVE details page from Vulnerabilities tab on host details page doesn't work
• SAT-36051 - Add remote detail actions to details page
• SAT-36061 - Navigation to Vulnerabilities tab on host details page often doesn't work
• SAT-36063 - fix job details rerun all button
• SAT-36064 - Pagination does not work on /template_syncs/result page
• SAT-36154 - Other errata types are not searchable using scoped errata search
• SAT-36158 - Host details content page does not display 'other' type errata
• SAT-36218 - Meaningless words "Value" in validation failed error message in new PF5 Settings
• SAT-36219 - In Settings, can't set correct value to "Tasks troubleshooting URL" but can set incorrect value
• SAT-36234 - Busy Satellite with no candlepin restart hits "database is not accepting commands" fatal error
• SAT-36259 - Repo discovery Registry Search Parameter Default:* (search all) can return incomplete results
• SAT-36284 - Configure Mosquitto to respect system level crypto-policies
• SAT-36322 - [DOC] Mention view_products and edit_products permission requirement for mirroring flatpak remote repositories
• SAT-36363 - in job rerun always send job id to the host search
• SAT-36379 - Improving the example in the README file in the Compute Resource role
• SAT-36442 - Support changing the key-algorithm when connecting to ISC DHCP
• SAT-36515 - All Hosts page Recommendations column displays '-' for IoP hosts
• SAT-36518 - foreman_rh_cloud Ping does not appear in UI
• SAT-36532 - Long container push uploads result in authentication error
• SAT-36545 - RedHat Lightspeed fails to remediate hosts
• SAT-36721 - Host details kebab inconsistent ui
• SAT-36743 - Force flag requires param for content-override commands
• SAT-36779 - "Package Action - Script Default" template fails to render dnf/yum binary name for foreman host
• SAT-36783 - Cockpit fails if the connection or effective user password is set and uses wide characters
• SAT-36784 - advisor_on_prem_remediations_enabled value will no longer be accurate for 6.18
• SAT-37075 - [Doc] Satellite 6.18: hammer command to list flatpak remotes needs to be corrected.
• SAT-37076 - During the RHSM fact upload, the compute resource is missing (Image provisioning).
• SAT-37144 - Time Picker selection highlight is incorrect and ambiguous
• SAT-37154 - Total CVEs on host index page shows count as 1, even when there are no CVEs for host
• SAT-37160 - Update the Recommended Repositories page to change the Red Hat Satellite Capsule and Red Hat Satellite Maintenance repositories from version 6.17 to 6.18 for RHEL 9
• SAT-37282 - Error "Katello::Resources::Candlepin::Environment: 404 Not Found" When Deleting Rolling Content View
• SAT-37300 - Setting descriptions aren't translated anymore
• SAT-37341 - Incorrectly displayed kebab menu in Recent Jobs panel on Host page
• SAT-37345 - Missing host jobs in host details page
• SAT-37358 - Secrets are re-created every time in podman
• SAT-37361 - Cannot mirror Flatpak into default Red Hat products ? restricted to custom products only
• SAT-37365 - Hostname prefix(discovery_prefix) setting accepts invalid inputs
• SAT-37390 - In Settings, "Tasks troubleshooting URL" doesn't get validated to be URL
• SAT-37393 - Job wizard buttons are different sizes
• SAT-37394 - host registration rex button looks differently than the rest
• SAT-37395 - JS console error '502 Bad Gateway' when Total CVEs column is added to All Hosts in non-IoP setup
• SAT-37634 - Install procedure should indicate use of auth file when logging in with podman
• SAT-37636 - undefined method `name' when opening a compliance report
• SAT-37641 - Smart proxy sync can fail when host has no bound container repos
• SAT-37669 - Support changing the key-algorithm for locally deployed ISC DHCP
• SAT-37671 - Support changing the key-algorithm a remote deployed ISC DHCP
• SAT-37676 - Host details card kebabs bad UX
• SAT-37809 - Host details 'Total risks' card does not work with IoP
• SAT-37810 - 'Total risks' card dropdown not updated for PF5
• SAT-37817 - On an IoP-enabled system, Recommendations tab shows non-IoP component for unregistered RHEL hosts
• SAT-37928 - [RN] Deprecate the Legacy Content Host UI
• SAT-38105 - Calls to upstream Candlepin consumer fail when using stage manifest
• SAT-38185 - CardTemplate dropdown not updated for PF5
• SAT-38347 - After enabling iop on Satellite, it cannot be disabled.
• SAT-38691 - incremental exports broken when using destination server and no history id
• SAT-38707 - IoP services fail when fapolicyd is enabled
• SAT-38769 - Update of scap-security-guide-satelite-sources 0.1.78
• SAT-39135 - Dependency solved CV publishes fail
• SAT-39180 - Implement template validation checks when moving a host into build mode
• SAT-31185 - virt-who does not honour proxy settings.
• SAT-31947 - Update patternfly 3 to patternfly 5 in foreman core (3.15 scope)
• SAT-29736 - M2 - UI - Flatpak content support

CVEs

• CVE-2025-10622

References

• https://access.redhat.com/security/updates/classification/#important
• https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/updating_red_hat_satellite/index