RHSA-2026:85249 - Security Advisory

Topic

Updated Satellite Client packages that fix several bugs are now available for
Red Hat Satellite.

Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.

Description

Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.

Security Fix(es):

• puppet-agent: heap buffer overflow in CMS key unwrapping (CVE-2026-63072)

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For detailed instructions how to apply this update, refer to:

https://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index

Affected Products

• Red Hat Enterprise Linux for x86_64 9 x86_64
• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.6 x86_64
• Red Hat Enterprise Linux Server - AUS 9.4 x86_64
• Red Hat Enterprise Linux Server - AUS 9.2 x86_64
• Red Hat Enterprise Linux Server - AUS 8.6 x86_64
• Red Hat Enterprise Linux Server - AUS 8.4 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Server - TUS 6 for RHEL 8.8 x86_64
• Red Hat Enterprise Linux Server - TUS 6 for RHEL 8.6 x86_64
• Red Hat Enterprise Linux for ARM 64 10 aarch64
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 6 for RHEL 9.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 6 for RHEL 9.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 6 for RHEL 9.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 6 for RHEL 9.2 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 6 for RHEL 8.8 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 6 for RHEL 8.6 x86_64

Fixes

• SAT-30237 - Ship and support OpenVox agent for EL 10 clients

CVEs

• CVE-2026-63072

References

• https://access.redhat.com/security/updates/classification/#moderate