Synopsis
Important: Satellite 6 Client Update
Type/Severity
Security Advisory: Important
Red Hat Lightspeed patch analysis
Identify and remediate systems affected by this advisory.
View affected systems
Topic
Updated Satellite Client packages that fix several bugs are now available for
Red Hat Satellite.
Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Description
Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments.
Security Fix(es):
- foreman_ygg_worker: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
- yggdrasil: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
- foreman_ygg_worker: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)
- yggdrasil: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)
- foreman_ygg_worker: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
- yggdrasil: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
- foreman_ygg_worker: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)
- yggdrasil: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)
- foreman_ygg_worker: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)
- yggdrasil: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)
- foreman_ygg_worker: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
- yggdrasil: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258
Affected Products
-
Red Hat Enterprise Linux for x86_64 10 x86_64
-
Red Hat Enterprise Linux for x86_64 9 x86_64
-
Red Hat Enterprise Linux for x86_64 8 x86_64
-
Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
-
Red Hat Enterprise Linux for IBM z Systems 10 s390x
-
Red Hat Enterprise Linux for IBM z Systems 9 s390x
-
Red Hat Enterprise Linux for IBM z Systems 8 s390x
-
Red Hat Enterprise Linux for Power, little endian 10 ppc64le
-
Red Hat Enterprise Linux for Power, little endian 9 ppc64le
-
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
-
Red Hat Enterprise Linux for ARM 64 10 aarch64
-
Red Hat Enterprise Linux for ARM 64 9 aarch64
-
Red Hat Enterprise Linux for ARM 64 8 aarch64
Fixes
(none)
Note:
More recent versions of these packages may be available.
Click a package name for more details.
Red Hat Enterprise Linux for x86_64 10
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el10sat.src.rpm
|
SHA-256: 63e28445ed58a105ff76007979cd2d85f7bbc38deb6132afe1e4b7fe3223b364 |
|
openvox-agent-8.31.1-1.el10sat.src.rpm
|
SHA-256: 218fdffd5f3237ed8ab2615e6c2d3e8e0788aaeb2cf182b06ae592197c280166 |
| x86_64 |
|
foreman_ygg_worker-0.3.3-3.el10sat.x86_64.rpm
|
SHA-256: 01af15216b43a046fa5a46b0b0e9692302675537c32c246bc4e462a062243116 |
|
openvox-agent-8.31.1-1.el10sat.x86_64.rpm
|
SHA-256: b9d0de2d88dfdc9792222304230d616bf0d04f9b39108f565aaae6917ccbc830 |
Red Hat Enterprise Linux for x86_64 9
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el9sat.src.rpm
|
SHA-256: 936a5647d85a4325a9b475c59c47c3b64d4261f715f071af42dcb46cbc128e16 |
|
openvox-agent-8.31.1-1.el9sat.src.rpm
|
SHA-256: 4b60013dfbedb38339f26811df29262d161eb2c8c7dbcb3b30b3e3c4aac53ebe |
|
yggdrasil-0.2.3-5.el9sat.src.rpm
|
SHA-256: c27ce36aaba2f995f74aee0c586657d0312685c3c4771ff2c9c2b2c60e2608a6 |
| x86_64 |
|
foreman_ygg_worker-0.3.3-3.el9sat.x86_64.rpm
|
SHA-256: 85a436f24755fc143a69df9c8c001ced11d143a2c91bb7413909f26ec07c2e81 |
|
openvox-agent-8.31.1-1.el9sat.x86_64.rpm
|
SHA-256: 4f9584ca43a2d5fb21391be852e9d3c2ec4288dd03f83d1aae80730c87089fe0 |
|
yggdrasil-0.2.3-5.el9sat.x86_64.rpm
|
SHA-256: f3fae386b8efd49002c7c02d9f24a6a2f5f64c66a9aee3aca06658f8712e6e18 |
Red Hat Enterprise Linux for x86_64 8
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el8sat.src.rpm
|
SHA-256: 5c41ece06058a7d15a7bae9eca55459e93d87e7bf4288df592436c8c840d303f |
|
openvox-agent-8.31.1-1.el8sat.src.rpm
|
SHA-256: 2614d6d45d97eb0022844ed2a78baf842c6bc6e7cc860b3eba915870cf3cbd1d |
|
yggdrasil-0.2.3-5.el8sat.src.rpm
|
SHA-256: 1222acda5e1ab40e917602b08be7b98033e08e58f026b77f2521b982939e4c51 |
| x86_64 |
|
foreman_ygg_worker-0.3.3-3.el8sat.x86_64.rpm
|
SHA-256: 2e327df0dcd29376e5402f6fc569876dfa694c080ed6a9a116e11e68e2b91f50 |
|
openvox-agent-8.31.1-1.el8sat.x86_64.rpm
|
SHA-256: 5f3adf59692a289d0d71a76cb2cc9f42456fa5de7a10f51e76fb1cbe6599cf58 |
|
yggdrasil-0.2.3-5.el8sat.x86_64.rpm
|
SHA-256: 91defa3d9dbafb37baee5767da16b3afc9fbc34e3ba9274c03019d079e9c3fd2 |
Red Hat Enterprise Linux Server - Extended Life Cycle Support 7
| SRPM |
|
openvox-agent-8.31.1-1.el7sat.src.rpm
|
SHA-256: 0e2c8c1ef3a516ce1ecf33afe8f3d69008c25b366aebe7d6744f34c06721170b |
| x86_64 |
|
openvox-agent-8.31.1-1.el7sat.x86_64.rpm
|
SHA-256: 706af8c5deca3e450613eec892bd9ccd1d513367c5cb7f0e3cf74366c5e16eac |
Red Hat Enterprise Linux for IBM z Systems 10
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el10sat.src.rpm
|
SHA-256: 63e28445ed58a105ff76007979cd2d85f7bbc38deb6132afe1e4b7fe3223b364 |
| s390x |
|
foreman_ygg_worker-0.3.3-3.el10sat.s390x.rpm
|
SHA-256: 676c13b5bfce21cd8abdd4a36613279ad30e4248bd708437e2b0883400de63e5 |
Red Hat Enterprise Linux for IBM z Systems 9
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el9sat.src.rpm
|
SHA-256: 936a5647d85a4325a9b475c59c47c3b64d4261f715f071af42dcb46cbc128e16 |
|
yggdrasil-0.2.3-5.el9sat.src.rpm
|
SHA-256: c27ce36aaba2f995f74aee0c586657d0312685c3c4771ff2c9c2b2c60e2608a6 |
| s390x |
|
foreman_ygg_worker-0.3.3-3.el9sat.s390x.rpm
|
SHA-256: 920a47fb993a64bfc720ccecd203d3fcd662e75d2abccaee991f06bd656111bf |
|
yggdrasil-0.2.3-5.el9sat.s390x.rpm
|
SHA-256: b0439835ef8ff72b3a396e3659108386c95edef1afb7cb29552711e466a0ff75 |
Red Hat Enterprise Linux for IBM z Systems 8
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el8sat.src.rpm
|
SHA-256: 5c41ece06058a7d15a7bae9eca55459e93d87e7bf4288df592436c8c840d303f |
|
yggdrasil-0.2.3-5.el8sat.src.rpm
|
SHA-256: 1222acda5e1ab40e917602b08be7b98033e08e58f026b77f2521b982939e4c51 |
| s390x |
|
foreman_ygg_worker-0.3.3-3.el8sat.s390x.rpm
|
SHA-256: ea60ab472dd052941a84fbb13d8a3946c54944740199ccc923dafb5d77b6567d |
|
yggdrasil-0.2.3-5.el8sat.s390x.rpm
|
SHA-256: e5287c848846c79e368fda3ceba8f4fb4dc4f174ec6688a11cbd096093736623 |
Red Hat Enterprise Linux for Power, little endian 10
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el10sat.src.rpm
|
SHA-256: 63e28445ed58a105ff76007979cd2d85f7bbc38deb6132afe1e4b7fe3223b364 |
| ppc64le |
|
foreman_ygg_worker-0.3.3-3.el10sat.ppc64le.rpm
|
SHA-256: 316f3d010b9d19ee2c8e6abd1092af2ba05e8629cac3c0081eab65883b240b8c |
Red Hat Enterprise Linux for Power, little endian 9
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el9sat.src.rpm
|
SHA-256: 936a5647d85a4325a9b475c59c47c3b64d4261f715f071af42dcb46cbc128e16 |
|
yggdrasil-0.2.3-5.el9sat.src.rpm
|
SHA-256: c27ce36aaba2f995f74aee0c586657d0312685c3c4771ff2c9c2b2c60e2608a6 |
| ppc64le |
|
foreman_ygg_worker-0.3.3-3.el9sat.ppc64le.rpm
|
SHA-256: 5e265c90297d9bf516b62ccd53e4ef26b03b87a54af006a4785f97e04a61736a |
|
yggdrasil-0.2.3-5.el9sat.ppc64le.rpm
|
SHA-256: 3c066db8f18723463f5cccc26e4962a70f7d09985f10c375b8c857aaa79842c1 |
Red Hat Enterprise Linux for Power, little endian 8
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el8sat.src.rpm
|
SHA-256: 5c41ece06058a7d15a7bae9eca55459e93d87e7bf4288df592436c8c840d303f |
|
yggdrasil-0.2.3-5.el8sat.src.rpm
|
SHA-256: 1222acda5e1ab40e917602b08be7b98033e08e58f026b77f2521b982939e4c51 |
| ppc64le |
|
foreman_ygg_worker-0.3.3-3.el8sat.ppc64le.rpm
|
SHA-256: c4769fa70de410d1bdd6f297e489853f80df71e8b2ee0523debc0a46c03d5fdf |
|
yggdrasil-0.2.3-5.el8sat.ppc64le.rpm
|
SHA-256: e3111385dd720c7e6a608a906a4626cdff09137608f8899d44085bb7a4e9ba41 |
Red Hat Enterprise Linux for ARM 64 10
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el10sat.src.rpm
|
SHA-256: 63e28445ed58a105ff76007979cd2d85f7bbc38deb6132afe1e4b7fe3223b364 |
|
openvox-agent-8.31.1-1.el10sat.src.rpm
|
SHA-256: 218fdffd5f3237ed8ab2615e6c2d3e8e0788aaeb2cf182b06ae592197c280166 |
| aarch64 |
|
foreman_ygg_worker-0.3.3-3.el10sat.aarch64.rpm
|
SHA-256: 3f24b98a67fc961c4b90193803dd3bf8596fd987d24e09f7756253c816a22789 |
|
openvox-agent-8.31.1-1.el10sat.aarch64.rpm
|
SHA-256: 49a49048b93d80f59f356bcf82c6207284ab63cc2da7b9d4376bf22a8e431dde |
Red Hat Enterprise Linux for ARM 64 9
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el9sat.src.rpm
|
SHA-256: 936a5647d85a4325a9b475c59c47c3b64d4261f715f071af42dcb46cbc128e16 |
|
openvox-agent-8.31.1-1.el9sat.src.rpm
|
SHA-256: 4b60013dfbedb38339f26811df29262d161eb2c8c7dbcb3b30b3e3c4aac53ebe |
|
yggdrasil-0.2.3-5.el9sat.src.rpm
|
SHA-256: c27ce36aaba2f995f74aee0c586657d0312685c3c4771ff2c9c2b2c60e2608a6 |
| aarch64 |
|
foreman_ygg_worker-0.3.3-3.el9sat.aarch64.rpm
|
SHA-256: 4f33f08875b2d27d6af319f712e5c08ac8379f1df1bdf98d2b05ab79f21890b8 |
|
openvox-agent-8.31.1-1.el9sat.aarch64.rpm
|
SHA-256: 1d1136838cc2ac69c268a4bea222919c8d00edc49a224a749f736c8e19e5e38b |
|
yggdrasil-0.2.3-5.el9sat.aarch64.rpm
|
SHA-256: 08a35c6501068d55920cd2523041ff4f11e6bc51d876218f73aa094b75c1826a |
Red Hat Enterprise Linux for ARM 64 8
| SRPM |
|
foreman_ygg_worker-0.3.3-3.el8sat.src.rpm
|
SHA-256: 5c41ece06058a7d15a7bae9eca55459e93d87e7bf4288df592436c8c840d303f |
|
openvox-agent-8.31.1-1.el8sat.src.rpm
|
SHA-256: 2614d6d45d97eb0022844ed2a78baf842c6bc6e7cc860b3eba915870cf3cbd1d |
|
yggdrasil-0.2.3-5.el8sat.src.rpm
|
SHA-256: 1222acda5e1ab40e917602b08be7b98033e08e58f026b77f2521b982939e4c51 |
| aarch64 |
|
foreman_ygg_worker-0.3.3-3.el8sat.aarch64.rpm
|
SHA-256: b2f9738b5c4af24fad655b4aaa553809fcffd7921933a3069c784bdbfa1c7bb7 |
|
openvox-agent-8.31.1-1.el8sat.aarch64.rpm
|
SHA-256: 30c16f128ddb9be4f8e815fbfb217919d3c603cb6e1bd15044ccc585abb68460 |
|
yggdrasil-0.2.3-5.el8sat.aarch64.rpm
|
SHA-256: 668f2775967975d12bfa04720e41b47314fd542fcbdabbd512a519fef517b140 |
