RHSA-2026:14835 - Security Advisory

Topic

A new release is now available for Red Hat Satellite 6.18 for RHEL 9.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

Description

Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.

Security Fix(es):

• python3.12-django: Django: SQL Injection via crafted column aliases

(CVE-2026-1287)

• python3.12-django: Django: SQL Injection via RasterField band index

parameter (CVE-2026-1207)

• python3.12-django: Django: SQL injection via crafted column aliases in

QuerySet.order_by() (CVE-2026-1312)

• python3.12-django: Django: Denial of Service via crafted HTML inputs

(CVE-2026-1285)

• python3.12-django: Django: Denial of Service via crafted request with

duplicate headers (CVE-2025-14550)

• python3.12-markdown: markdown: Denial of Service via malformed

HTML-like sequences (CVE-2025-69534)

• python3.12-pyOpenSSL: pyOpenSSL: DTLS cookie callback buffer overflow

(CVE-2026-27459)

• rubygem-activesupport: Active Support: Denial of Service via large

scientific notation strings (CVE-2026-33176)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For detailed instructions how to apply this update, refer to:

https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index

Affected Products

• Red Hat Satellite 6.18 x86_64
• Red Hat Satellite Capsule 6.18 x86_64
• Red Hat Enterprise Linux for x86_64 9 x86_64

Fixes

• SAT-37836 - Impossible to generate registration command via REST API in isolated networks managed by external capsules
• SAT-43946 - Satellite manifest consumer profile cert and key found in satellite client rhsm cache
• SAT-43947 - Ability to change Log Level for IoP core engine through satellite-installer
• SAT-43948 - Ability to change Log Level for IoP related services through satellite-installer
• SAT-43949 - The hammer command executes successfully on Satellite 6.17, but it fails on Satellite 6.18.
• SAT-43950 - BIOS info is not populated in All hosts page and in Host Details tab
• SAT-43951 - Puppet fact parser can't create OS entry blocking Satellite leapp upgrades
• SAT-43952 - Revoking registry token does not prevent access to registry
• SAT-43953 - Revoking registry token does not prevent access to registry
• SAT-43954 - After update to 6.17 "Login delegation logout URL" fails to redirect to external auth source
• SAT-43955 - All communication should happen only over https during global registration execution
• SAT-43956 - Search is cleared when using bottom pagination on All Hosts page
• SAT-43958 - Non-admin users on Satellite with viewer role, unable to see the hostgroup.
• SAT-43959 - Find what we can add to foreman-maintain report generate for rh_cloud
• SAT-43960 - Content > Subscriptions stuck in loading state if organization GET ends with 403
• SAT-43962 - Proxy password shown in clear text in the Overview page of Virt-who Configuration
• SAT-43963 - Executing the 'katello::clean_backend_objects' rake task takes a long time to complete
• SAT-44062 - Use certs for primary identification for hosts on katello registry
• SAT-44760 - Flatpak registry static index returns 500 after pulpcore 3.85.15 upgrade (set not JSON serializable)
• SAT-44761 - Concurrent registration fails with "PG::UniqueViolation: ERROR: duplicate key value violates unique constraint \"index_operatingsystems_on_title\"
• SAT-44762 - [regression] Unable to access Compute Resource in Satellite6

CVEs

• CVE-2025-14550
• CVE-2025-69534
• CVE-2026-1207
• CVE-2026-1285
• CVE-2026-1287
• CVE-2026-1312
• CVE-2026-27459
• CVE-2026-33176

References

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index