{ "document" : { "aggregate_severity" : { "namespace" : "https://access.redhat.com/security/updates/classification/", "text" : "Important" }, "category" : "csaf_security_advisory", "csaf_version" : "2.0", "distribution" : { "text" : "Copyright © Red Hat, Inc. All rights reserved.", "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "en", "notes" : [ { "category" : "summary", "text" : "An update is now available for Red Hat Satellite 6.16 for RHEL 8 and RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.", "title" : "Topic" }, { "category" : "general", "text" : "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* python-pillow: Pillow: Denial of Service via decompression bomb in FITS image processing (CVE-2026-40192)\n\n* yggdrasil-worker-forwarder: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n\n* dynflow-utils: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)\n\n* satellite:el8/yggdrasil-worker-forwarder: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n\n* yggdrasil-worker-forwarder: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)\n\n* yggdrasil-worker-forwarder: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* satellite:el8/yggdrasil-worker-forwarder: Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n\n* satellite:el8/yggdrasil-worker-forwarder: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n\n* satellite:el8/yggdrasil-worker-forwarder: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n\n* yggdrasil-worker-forwarder: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)\n\n* yggdrasil-worker-forwarder: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n\n* satellite:el8/yggdrasil-worker-forwarder: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n\n* satellite:el8/yggdrasil-worker-forwarder: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n\n* yggdrasil-worker-forwarder: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)\n\nBug Fix(es):\n\n* orphan cleanup triggers CapsuleContent::UpdateContentCounts regardless of automatic_content_count_updates setting (SAT-45906)\n\n* The custom repository fails to sync with the Capsule server, resulting in an error (SAT-44720)", "title" : "Details" }, { "category" : "legal_disclaimer", "text" : "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title" : "Terms of Use" } ], "publisher" : { "category" : "vendor", "contact_details" : "https://access.redhat.com/security/team/contact/", "issuing_authority" : "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name" : "Red Hat Product Security", "namespace" : "https://www.redhat.com" }, "references" : [ { "category" : "self", "summary" : "https://access.redhat.com/errata/RHSA-2026:27076", "url" : "https://access.redhat.com/errata/RHSA-2026:27076" }, { "category" : "external", "summary" : "https://access.redhat.com/security/updates/classification/#important", "url" : "https://access.redhat.com/security/updates/classification/#important" }, { "category" : "external", "summary" : "2418462", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2418462" }, { "category" : "external", "summary" : "2445356", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2445356" }, { "category" : "external", "summary" : "2449833", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2449833" }, { "category" : "external", "summary" : "2456333", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456333" }, { "category" : "external", "summary" : "2456336", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456336" }, { "category" : "external", "summary" : "2456338", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456338" }, { "category" : "external", "summary" : "2456339", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456339" }, { "category" : "external", "summary" : "2458856", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458856" }, { "category" : "external", "summary" : "SAT-44720", "url" : "https://issues.redhat.com/browse/SAT-44720" }, { "category" : "external", "summary" : "SAT-45906", "url" : "https://issues.redhat.com/browse/SAT-45906" }, { "category" : "self", "summary" : "Canonical URL", "url" : "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_27076.json" } ], "title" : "Red Hat Security Advisory: Satellite 6.16.9 Async Update", "tracking" : { "current_release_date" : "2026-06-20T04:27:42+00:00", "generator" : { "date" : "2026-06-20T04:27:42+00:00", "engine" : { "name" : "Red Hat SDEngine", "version" : "5.0.0" } }, "id" : "RHSA-2026:27076", "initial_release_date" : "2026-06-18T17:24:02+00:00", "revision_history" : [ { "date" : "2026-06-18T17:24:02+00:00", "number" : "1", "summary" : "Initial version" }, { "date" : "2026-06-18T17:24:02+00:00", "number" : "2", "summary" : "Last updated version" }, { "date" : "2026-06-20T04:27:42+00:00", "number" : "3", "summary" : "Last generated version" } ], "status" : "final", "version" : "3" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_name", "name" : "Red Hat Satellite 6.16 for RHEL 8", "product" : { "name" : "Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:satellite:6.16::el8" } } }, { "category" : "product_name", "name" : "Red Hat Satellite 6.16 for RHEL 8", "product" : { "name" : "Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:satellite_capsule:6.16::el8" } } }, { "category" : "product_name", "name" : "Red Hat Satellite 6.16 for RHEL 8", "product" : { "name" : "Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-maintenance", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:satellite_maintenance:6.16::el8" } } }, { "category" : "product_name", "name" : "Red Hat Satellite 6.16 for RHEL 8", "product" : { "name" : "Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-utils", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:satellite_utils:6.16::el8" } } }, { "category" : "product_name", "name" : "Red Hat Satellite 6.16 for RHEL 9", "product" : { "name" : "Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:satellite:6.16::el9" } } }, { "category" : "product_name", "name" : "Red Hat Satellite 6.16 for RHEL 9", "product" : { "name" : "Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:satellite_capsule:6.16::el9" } } }, { "category" : "product_name", "name" : "Red Hat Satellite 6.16 for RHEL 9", "product" : { "name" : "Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-maintenance", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:satellite_maintenance:6.16::el9" } } }, { "category" : "product_name", "name" : "Red Hat Satellite 6.16 for RHEL 9", "product" : { "name" : "Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-utils", "product_identification_helper" : { "cpe" : "cpe:/a:redhat:satellite_utils:6.16::el9" } } } ], "category" : "product_family", "name" : "Red Hat Satellite 6" }, { "branches" : [ { "category" : "product_version", "name" : "dynflow-utils-0:1.6.3-1.1.el8sat.src", "product" : { "name" : "dynflow-utils-0:1.6.3-1.1.el8sat.src", "product_id" : "dynflow-utils-0:1.6.3-1.1.el8sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/dynflow-utils@1.6.3-1.1.el8sat?arch=src" } } }, { "category" : "product_version", "name" : "python-pillow-0:12.2.0-1.el8pc.src", "product" : { "name" : "python-pillow-0:12.2.0-1.el8pc.src", "product_id" : "python-pillow-0:12.2.0-1.el8pc.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python-pillow@12.2.0-1.el8pc?arch=src" } } }, { "category" : "product_version", "name" : "python-pulp-ansible-1:0.21.10-4.el8pc.src", "product" : { "name" : "python-pulp-ansible-1:0.21.10-4.el8pc.src", "product_id" : "python-pulp-ansible-1:0.21.10-4.el8pc.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python-pulp-ansible@0.21.10-4.el8pc?arch=src&epoch=1" } } }, { "category" : "product_version", "name" : "python-pulp-rpm-0:3.26.8-1.el8pc.src", "product" : { "name" : "python-pulp-rpm-0:3.26.8-1.el8pc.src", "product_id" : "python-pulp-rpm-0:3.26.8-1.el8pc.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python-pulp-rpm@3.26.8-1.el8pc?arch=src" } } }, { "category" : "product_version", "name" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "product" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "product_id" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/rubygem-foreman_maintain@1.7.14-1.el8sat?arch=src&epoch=1" } } }, { "category" : "product_version", "name" : "rubygem-katello-0:4.14.0.20-1.el8sat.src", "product" : { "name" : "rubygem-katello-0:4.14.0.20-1.el8sat.src", "product_id" : "rubygem-katello-0:4.14.0.20-1.el8sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/rubygem-katello@4.14.0.20-1.el8sat?arch=src" } } }, { "category" : "product_version", "name" : "satellite-0:6.16.9-1.el8sat.src", "product" : { "name" : "satellite-0:6.16.9-1.el8sat.src", "product_id" : "satellite-0:6.16.9-1.el8sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite@6.16.9-1.el8sat?arch=src" } } }, { "category" : "product_version", "name" : "satellite-lifecycle-0:6.16.0-3.el8sat.src", "product" : { "name" : "satellite-lifecycle-0:6.16.0-3.el8sat.src", "product_id" : "satellite-lifecycle-0:6.16.0-3.el8sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite-lifecycle@6.16.0-3.el8sat?arch=src" } } }, { "category" : "product_version", "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "product" : { "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "product_id" : "yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-5.el8sat?arch=src" } } }, { "category" : "product_version", "name" : "dynflow-utils-0:1.6.3-1.1.el9sat.src", "product" : { "name" : "dynflow-utils-0:1.6.3-1.1.el9sat.src", "product_id" : "dynflow-utils-0:1.6.3-1.1.el9sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/dynflow-utils@1.6.3-1.1.el9sat?arch=src" } } }, { "category" : "product_version", "name" : "python-pillow-0:12.2.0-1.el9pc.src", "product" : { "name" : "python-pillow-0:12.2.0-1.el9pc.src", "product_id" : "python-pillow-0:12.2.0-1.el9pc.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python-pillow@12.2.0-1.el9pc?arch=src" } } }, { "category" : "product_version", "name" : "python-pulp-ansible-1:0.21.10-4.el9pc.src", "product" : { "name" : "python-pulp-ansible-1:0.21.10-4.el9pc.src", "product_id" : "python-pulp-ansible-1:0.21.10-4.el9pc.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python-pulp-ansible@0.21.10-4.el9pc?arch=src&epoch=1" } } }, { "category" : "product_version", "name" : "python-pulp-rpm-0:3.26.8-1.el9pc.src", "product" : { "name" : "python-pulp-rpm-0:3.26.8-1.el9pc.src", "product_id" : "python-pulp-rpm-0:3.26.8-1.el9pc.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python-pulp-rpm@3.26.8-1.el9pc?arch=src" } } }, { "category" : "product_version", "name" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "product" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "product_id" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/rubygem-foreman_maintain@1.7.14-1.el9sat?arch=src&epoch=1" } } }, { "category" : "product_version", "name" : "rubygem-katello-0:4.14.0.20-1.el9sat.src", "product" : { "name" : "rubygem-katello-0:4.14.0.20-1.el9sat.src", "product_id" : "rubygem-katello-0:4.14.0.20-1.el9sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/rubygem-katello@4.14.0.20-1.el9sat?arch=src" } } }, { "category" : "product_version", "name" : "satellite-0:6.16.9-1.el9sat.src", "product" : { "name" : "satellite-0:6.16.9-1.el9sat.src", "product_id" : "satellite-0:6.16.9-1.el9sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite@6.16.9-1.el9sat?arch=src" } } }, { "category" : "product_version", "name" : "satellite-lifecycle-0:6.16.0-3.el9sat.src", "product" : { "name" : "satellite-lifecycle-0:6.16.0-3.el9sat.src", "product_id" : "satellite-lifecycle-0:6.16.0-3.el9sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite-lifecycle@6.16.0-3.el9sat?arch=src" } } }, { "category" : "product_version", "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "product" : { "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "product_id" : "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-5.el9sat?arch=src" } } } ], "category" : "architecture", "name" : "src" }, { "branches" : [ { "category" : "product_version", "name" : "dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "product" : { "name" : "dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "product_id" : "dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/dynflow-utils@1.6.3-1.1.el8sat?arch=x86_64" } } }, { "category" : "product_version", "name" : "python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "product" : { "name" : "python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "product_id" : "python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python3.11-pillow@12.2.0-1.el8pc?arch=x86_64" } } }, { "category" : "product_version", "name" : "python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "product" : { "name" : "python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "product_id" : "python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python-pillow-debugsource@12.2.0-1.el8pc?arch=x86_64" } } }, { "category" : "product_version", "name" : "python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "product" : { "name" : "python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "product_id" : "python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python3.11-pillow-debuginfo@12.2.0-1.el8pc?arch=x86_64" } } }, { "category" : "product_version", "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "product" : { "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "product_id" : "yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-5.el8sat?arch=x86_64" } } }, { "category" : "product_version", "name" : "dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "product" : { "name" : "dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "product_id" : "dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/dynflow-utils@1.6.3-1.1.el9sat?arch=x86_64" } } }, { "category" : "product_version", "name" : "python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "product" : { "name" : "python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "product_id" : "python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python3.11-pillow@12.2.0-1.el9pc?arch=x86_64" } } }, { "category" : "product_version", "name" : "python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "product" : { "name" : "python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "product_id" : "python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python-pillow-debugsource@12.2.0-1.el9pc?arch=x86_64" } } }, { "category" : "product_version", "name" : "python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "product" : { "name" : "python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "product_id" : "python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python3.11-pillow-debuginfo@12.2.0-1.el9pc?arch=x86_64" } } }, { "category" : "product_version", "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64", "product" : { "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64", "product_id" : "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-5.el9sat?arch=x86_64" } } } ], "category" : "architecture", "name" : "x86_64" }, { "branches" : [ { "category" : "product_version", "name" : "python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "product" : { "name" : "python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "product_id" : "python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python3.11-pulp-ansible@0.21.10-4.el8pc?arch=noarch&epoch=1" } } }, { "category" : "product_version", "name" : "python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "product" : { "name" : "python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "product_id" : "python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python3.11-pulp-rpm@3.26.8-1.el8pc?arch=noarch" } } }, { "category" : "product_version", "name" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "product" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "product_id" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/rubygem-foreman_maintain@1.7.14-1.el8sat?arch=noarch&epoch=1" } } }, { "category" : "product_version", "name" : "rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "product" : { "name" : "rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "product_id" : "rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/rubygem-katello@4.14.0.20-1.el8sat?arch=noarch" } } }, { "category" : "product_version", "name" : "satellite-capsule-0:6.16.9-1.el8sat.noarch", "product" : { "name" : "satellite-capsule-0:6.16.9-1.el8sat.noarch", "product_id" : "satellite-capsule-0:6.16.9-1.el8sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite-capsule@6.16.9-1.el8sat?arch=noarch" } } }, { "category" : "product_version", "name" : "satellite-common-0:6.16.9-1.el8sat.noarch", "product" : { "name" : "satellite-common-0:6.16.9-1.el8sat.noarch", "product_id" : "satellite-common-0:6.16.9-1.el8sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite-common@6.16.9-1.el8sat?arch=noarch" } } }, { "category" : "product_version", "name" : "satellite-0:6.16.9-1.el8sat.noarch", "product" : { "name" : "satellite-0:6.16.9-1.el8sat.noarch", "product_id" : "satellite-0:6.16.9-1.el8sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite@6.16.9-1.el8sat?arch=noarch" } } }, { "category" : "product_version", "name" : "satellite-cli-0:6.16.9-1.el8sat.noarch", "product" : { "name" : "satellite-cli-0:6.16.9-1.el8sat.noarch", "product_id" : "satellite-cli-0:6.16.9-1.el8sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite-cli@6.16.9-1.el8sat?arch=noarch" } } }, { "category" : "product_version", "name" : "satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "product" : { "name" : "satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "product_id" : "satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite-lifecycle@6.16.0-3.el8sat?arch=noarch" } } }, { "category" : "product_version", "name" : "python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "product" : { "name" : "python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "product_id" : "python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python3.11-pulp-ansible@0.21.10-4.el9pc?arch=noarch&epoch=1" } } }, { "category" : "product_version", "name" : "python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "product" : { "name" : "python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "product_id" : "python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/python3.11-pulp-rpm@3.26.8-1.el9pc?arch=noarch" } } }, { "category" : "product_version", "name" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "product" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "product_id" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/rubygem-foreman_maintain@1.7.14-1.el9sat?arch=noarch&epoch=1" } } }, { "category" : "product_version", "name" : "rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "product" : { "name" : "rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "product_id" : "rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/rubygem-katello@4.14.0.20-1.el9sat?arch=noarch" } } }, { "category" : "product_version", "name" : "satellite-capsule-0:6.16.9-1.el9sat.noarch", "product" : { "name" : "satellite-capsule-0:6.16.9-1.el9sat.noarch", "product_id" : "satellite-capsule-0:6.16.9-1.el9sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite-capsule@6.16.9-1.el9sat?arch=noarch" } } }, { "category" : "product_version", "name" : "satellite-common-0:6.16.9-1.el9sat.noarch", "product" : { "name" : "satellite-common-0:6.16.9-1.el9sat.noarch", "product_id" : "satellite-common-0:6.16.9-1.el9sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite-common@6.16.9-1.el9sat?arch=noarch" } } }, { "category" : "product_version", "name" : "satellite-0:6.16.9-1.el9sat.noarch", "product" : { "name" : "satellite-0:6.16.9-1.el9sat.noarch", "product_id" : "satellite-0:6.16.9-1.el9sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite@6.16.9-1.el9sat?arch=noarch" } } }, { "category" : "product_version", "name" : "satellite-cli-0:6.16.9-1.el9sat.noarch", "product" : { "name" : "satellite-cli-0:6.16.9-1.el9sat.noarch", "product_id" : "satellite-cli-0:6.16.9-1.el9sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite-cli@6.16.9-1.el9sat?arch=noarch" } } }, { "category" : "product_version", "name" : "satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "product" : { "name" : "satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "product_id" : "satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "product_identification_helper" : { "purl" : "pkg:rpm/redhat/satellite-lifecycle@6.16.0-3.el9sat?arch=noarch" } } } ], "category" : "architecture", "name" : "noarch" } ], "category" : "vendor", "name" : "Red Hat" } ], "relationships" : [ { "category" : "default_component_of", "full_product_name" : { "name" : "dynflow-utils-0:1.6.3-1.1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src" }, "product_reference" : "dynflow-utils-0:1.6.3-1.1.el8sat.src", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "dynflow-utils-0:1.6.3-1.1.el8sat.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64" }, "product_reference" : "dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pillow-0:12.2.0-1.el8pc.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src" }, "product_reference" : "python-pillow-0:12.2.0-1.el8pc.src", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64" }, "product_reference" : "python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pulp-ansible-1:0.21.10-4.el8pc.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src" }, "product_reference" : "python-pulp-ansible-1:0.21.10-4.el8pc.src", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pulp-rpm-0:3.26.8-1.el8pc.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src" }, "product_reference" : "python-pulp-rpm-0:3.26.8-1.el8pc.src", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pillow-0:12.2.0-1.el8pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64" }, "product_reference" : "python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64" }, "product_reference" : "python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch" }, "product_reference" : "python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch" }, "product_reference" : "python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src" }, "product_reference" : "satellite-0:6.16.9-1.el8sat.src", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-capsule-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-capsule-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-cli-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-cli-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-common-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-common-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-maintenance" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "relates_to_product_reference" : "8Base-satellite-6.16-maintenance" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-utils" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src" }, "product_reference" : "satellite-0:6.16.9-1.el8sat.src", "relates_to_product_reference" : "8Base-satellite-6.16-utils" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-capsule-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-capsule-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-utils" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-cli-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-cli-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-utils" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-common-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-common-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16-utils" }, { "category" : "default_component_of", "full_product_name" : { "name" : "dynflow-utils-0:1.6.3-1.1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src" }, "product_reference" : "dynflow-utils-0:1.6.3-1.1.el8sat.src", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "dynflow-utils-0:1.6.3-1.1.el8sat.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64" }, "product_reference" : "dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pillow-0:12.2.0-1.el8pc.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src" }, "product_reference" : "python-pillow-0:12.2.0-1.el8pc.src", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64" }, "product_reference" : "python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pulp-ansible-1:0.21.10-4.el8pc.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src" }, "product_reference" : "python-pulp-ansible-1:0.21.10-4.el8pc.src", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pulp-rpm-0:3.26.8-1.el8pc.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src" }, "product_reference" : "python-pulp-rpm-0:3.26.8-1.el8pc.src", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pillow-0:12.2.0-1.el8pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64" }, "product_reference" : "python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64" }, "product_reference" : "python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch" }, "product_reference" : "python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch" }, "product_reference" : "python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-katello-0:4.14.0.20-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch" }, "product_reference" : "rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-katello-0:4.14.0.20-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src" }, "product_reference" : "rubygem-katello-0:4.14.0.20-1.el8sat.src", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src" }, "product_reference" : "satellite-0:6.16.9-1.el8sat.src", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-capsule-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-capsule-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-cli-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-cli-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-common-0:6.16.9-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch" }, "product_reference" : "satellite-common-0:6.16.9-1.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-lifecycle-0:6.16.0-3.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch" }, "product_reference" : "satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-lifecycle-0:6.16.0-3.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src" }, "product_reference" : "satellite-lifecycle-0:6.16.0-3.el8sat.src", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src" }, "product_reference" : "yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 8", "product_id" : "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64" }, "product_reference" : "yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "relates_to_product_reference" : "8Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "dynflow-utils-0:1.6.3-1.1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src" }, "product_reference" : "dynflow-utils-0:1.6.3-1.1.el9sat.src", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "dynflow-utils-0:1.6.3-1.1.el9sat.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64" }, "product_reference" : "dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pillow-0:12.2.0-1.el9pc.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src" }, "product_reference" : "python-pillow-0:12.2.0-1.el9pc.src", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64" }, "product_reference" : "python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pulp-ansible-1:0.21.10-4.el9pc.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src" }, "product_reference" : "python-pulp-ansible-1:0.21.10-4.el9pc.src", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pulp-rpm-0:3.26.8-1.el9pc.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src" }, "product_reference" : "python-pulp-rpm-0:3.26.8-1.el9pc.src", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pillow-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64" }, "product_reference" : "python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64" }, "product_reference" : "python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch" }, "product_reference" : "python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch" }, "product_reference" : "python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src" }, "product_reference" : "satellite-0:6.16.9-1.el9sat.src", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-capsule-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-capsule-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-cli-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-cli-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-common-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-common-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-capsule" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-maintenance" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "relates_to_product_reference" : "9Base-satellite-6.16-maintenance" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-utils" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src" }, "product_reference" : "satellite-0:6.16.9-1.el9sat.src", "relates_to_product_reference" : "9Base-satellite-6.16-utils" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-capsule-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-capsule-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-utils" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-cli-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-cli-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-utils" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-common-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-common-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16-utils" }, { "category" : "default_component_of", "full_product_name" : { "name" : "dynflow-utils-0:1.6.3-1.1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src" }, "product_reference" : "dynflow-utils-0:1.6.3-1.1.el9sat.src", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "dynflow-utils-0:1.6.3-1.1.el9sat.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64" }, "product_reference" : "dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pillow-0:12.2.0-1.el9pc.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src" }, "product_reference" : "python-pillow-0:12.2.0-1.el9pc.src", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64" }, "product_reference" : "python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pulp-ansible-1:0.21.10-4.el9pc.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src" }, "product_reference" : "python-pulp-ansible-1:0.21.10-4.el9pc.src", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python-pulp-rpm-0:3.26.8-1.el9pc.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src" }, "product_reference" : "python-pulp-rpm-0:3.26.8-1.el9pc.src", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pillow-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64" }, "product_reference" : "python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64" }, "product_reference" : "python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch" }, "product_reference" : "python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch" }, "product_reference" : "python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src" }, "product_reference" : "rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-katello-0:4.14.0.20-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch" }, "product_reference" : "rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "rubygem-katello-0:4.14.0.20-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src" }, "product_reference" : "rubygem-katello-0:4.14.0.20-1.el9sat.src", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-0:6.16.9-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src" }, "product_reference" : "satellite-0:6.16.9-1.el9sat.src", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-capsule-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-capsule-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-cli-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-cli-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-common-0:6.16.9-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch" }, "product_reference" : "satellite-common-0:6.16.9-1.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-lifecycle-0:6.16.0-3.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch" }, "product_reference" : "satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "satellite-lifecycle-0:6.16.0-3.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" }, "product_reference" : "satellite-lifecycle-0:6.16.0-3.el9sat.src", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src" }, "product_reference" : "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "relates_to_product_reference" : "9Base-satellite-6.16" }, { "category" : "default_component_of", "full_product_name" : { "name" : "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64 as a component of Red Hat Satellite 6.16 for RHEL 9", "product_id" : "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" }, "product_reference" : "yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64", "relates_to_product_reference" : "9Base-satellite-6.16" } ] }, "vulnerabilities" : [ { "cve" : "CVE-2025-61729", "cwe" : { "id" : "CWE-1050", "name" : "Excessive Platform Resource Consumption within a Loop" }, "discovery_date" : "2025-12-02T20:01:45.330964+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2418462" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "known_not_affected" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2025-61729" }, { "category" : "external", "summary" : "RHBZ#2418462", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2418462" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2025-61729", "url" : "https://www.cve.org/CVERecord?id=CVE-2025-61729" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2025-61729", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2025-61729" }, { "category" : "external", "summary" : "https://go.dev/cl/725920", "url" : "https://go.dev/cl/725920" }, { "category" : "external", "summary" : "https://go.dev/issue/76445", "url" : "https://go.dev/issue/76445" }, { "category" : "external", "summary" : "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4", "url" : "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4" }, { "category" : "external", "summary" : "https://pkg.go.dev/vuln/GO-2025-4155", "url" : "https://pkg.go.dev/vuln/GO-2025-4155" } ], "release_date" : "2025-12-02T18:54:10.166000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-06-18T17:24:02+00:00", "details" : "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.16/html/updating_red_hat_satellite/index", "product_ids" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:27076" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate" }, { "cve" : "CVE-2026-25679", "cwe" : { "id" : "CWE-1286", "name" : "Improper Validation of Syntactic Correctness of Input" }, "discovery_date" : "2026-03-06T22:02:11.567841+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2445356" } ], "notes" : [ { "category" : "description", "text" : "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "net/url: Incorrect parsing of IPv6 host literals in net/url", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "known_not_affected" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-25679" }, { "category" : "external", "summary" : "RHBZ#2445356", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2445356" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-25679", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-25679" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-25679", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-25679" }, { "category" : "external", "summary" : "https://go.dev/cl/752180", "url" : "https://go.dev/cl/752180" }, { "category" : "external", "summary" : "https://go.dev/issue/77578", "url" : "https://go.dev/issue/77578" }, { "category" : "external", "summary" : "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk", "url" : "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk" }, { "category" : "external", "summary" : "https://pkg.go.dev/vuln/GO-2026-4601", "url" : "https://pkg.go.dev/vuln/GO-2026-4601" } ], "release_date" : "2026-03-06T21:28:14.211000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-06-18T17:24:02+00:00", "details" : "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.16/html/updating_red_hat_satellite/index", "product_ids" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:27076" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "net/url: Incorrect parsing of IPv6 host literals in net/url" }, { "cve" : "CVE-2026-32280", "cwe" : { "id" : "CWE-770", "name" : "Allocation of Resources Without Limits or Throttling" }, "discovery_date" : "2026-04-08T02:01:19.572351+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2456339" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "known_not_affected" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-32280" }, { "category" : "external", "summary" : "RHBZ#2456339", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456339" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-32280", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-32280" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32280", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32280" }, { "category" : "external", "summary" : "https://go.dev/cl/758320", "url" : "https://go.dev/cl/758320" }, { "category" : "external", "summary" : "https://go.dev/issue/78282", "url" : "https://go.dev/issue/78282" }, { "category" : "external", "summary" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "url" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU" }, { "category" : "external", "summary" : "https://pkg.go.dev/vuln/GO-2026-4947", "url" : "https://pkg.go.dev/vuln/GO-2026-4947" } ], "release_date" : "2026-04-08T01:06:58.595000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-06-18T17:24:02+00:00", "details" : "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.16/html/updating_red_hat_satellite/index", "product_ids" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:27076" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building" }, { "cve" : "CVE-2026-32281", "cwe" : { "id" : "CWE-1050", "name" : "Excessive Platform Resource Consumption within a Loop" }, "discovery_date" : "2026-04-08T02:01:00.930989+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2456333" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "known_not_affected" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-32281" }, { "category" : "external", "summary" : "RHBZ#2456333", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456333" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-32281", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-32281" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32281", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32281" }, { "category" : "external", "summary" : "https://go.dev/cl/758061", "url" : "https://go.dev/cl/758061" }, { "category" : "external", "summary" : "https://go.dev/issue/78281", "url" : "https://go.dev/issue/78281" }, { "category" : "external", "summary" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "url" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU" }, { "category" : "external", "summary" : "https://pkg.go.dev/vuln/GO-2026-4946", "url" : "https://pkg.go.dev/vuln/GO-2026-4946" } ], "release_date" : "2026-04-08T01:06:58.354000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-06-18T17:24:02+00:00", "details" : "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.16/html/updating_red_hat_satellite/index", "product_ids" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:27076" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 5.9, "baseSeverity" : "MEDIUM", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Moderate" } ], "title" : "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation" }, { "cve" : "CVE-2026-32282", "cwe" : { "id" : "CWE-367", "name" : "Time-of-check Time-of-use (TOCTOU) Race Condition" }, "discovery_date" : "2026-04-08T02:01:12.683211+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2456336" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root", "title" : "Vulnerability summary" }, { "category" : "other", "text" : "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.", "title" : "Statement" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "known_not_affected" : [ "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-32282" }, { "category" : "external", "summary" : "RHBZ#2456336", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456336" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-32282", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-32282" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32282", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32282" }, { "category" : "external", "summary" : "https://go.dev/cl/763761", "url" : "https://go.dev/cl/763761" }, { "category" : "external", "summary" : "https://go.dev/issue/78293", "url" : "https://go.dev/issue/78293" }, { "category" : "external", "summary" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "url" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU" }, { "category" : "external", "summary" : "https://pkg.go.dev/vuln/GO-2026-4864", "url" : "https://pkg.go.dev/vuln/GO-2026-4864" } ], "release_date" : "2026-04-08T01:06:55.953000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-06-18T17:24:02+00:00", "details" : "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.16/html/updating_red_hat_satellite/index", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:27076" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "HIGH", "attackVector" : "LOCAL", "availabilityImpact" : "HIGH", "baseScore" : 7.8, "baseSeverity" : "HIGH", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "LOW", "scope" : "CHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "version" : "3.1" }, "products" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Moderate" } ], "title" : "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root" }, { "cve" : "CVE-2026-32283", "cwe" : { "id" : "CWE-764", "name" : "Multiple Locks of a Critical Resource" }, "discovery_date" : "2026-04-08T02:01:16.213799+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2456338" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "known_not_affected" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-32283" }, { "category" : "external", "summary" : "RHBZ#2456338", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2456338" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-32283", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-32283" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32283", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-32283" }, { "category" : "external", "summary" : "https://go.dev/cl/763767", "url" : "https://go.dev/cl/763767" }, { "category" : "external", "summary" : "https://go.dev/issue/78334", "url" : "https://go.dev/issue/78334" }, { "category" : "external", "summary" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU", "url" : "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU" }, { "category" : "external", "summary" : "https://pkg.go.dev/vuln/GO-2026-4870", "url" : "https://pkg.go.dev/vuln/GO-2026-4870" } ], "release_date" : "2026-04-08T01:06:57.670000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-06-18T17:24:02+00:00", "details" : "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.16/html/updating_red_hat_satellite/index", "product_ids" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:27076" } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages" }, { "cve" : "CVE-2026-33186", "cwe" : { "id" : "CWE-551", "name" : "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization" }, "discovery_date" : "2026-03-20T23:02:27.802640+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2449833" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "known_not_affected" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-33186" }, { "category" : "external", "summary" : "RHBZ#2449833", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2449833" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-33186", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-33186" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-33186", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-33186" }, { "category" : "external", "summary" : "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3", "url" : "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3" } ], "release_date" : "2026-03-20T22:23:32.147000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-06-18T17:24:02+00:00", "details" : "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.16/html/updating_red_hat_satellite/index", "product_ids" : [ "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:27076" }, { "category" : "workaround", "details" : "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "NONE", "baseScore" : 9.1, "baseSeverity" : "CRITICAL", "confidentialityImpact" : "HIGH", "integrityImpact" : "HIGH", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version" : "3.1" }, "products" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation" }, { "cve" : "CVE-2026-40192", "cwe" : { "id" : "CWE-409", "name" : "Improper Handling of Highly Compressed Data (Data Amplification)" }, "discovery_date" : "2026-04-16T00:00:49.590876+00:00", "flags" : [ { "label" : "vulnerable_code_not_present", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "ids" : [ { "system_name" : "Red Hat Bugzilla ID", "text" : "2458856" } ], "notes" : [ { "category" : "description", "text" : "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library's failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.", "title" : "Vulnerability description" }, { "category" : "summary", "text" : "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing", "title" : "Vulnerability summary" }, { "category" : "general", "text" : "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title" : "CVSS score applicability" } ], "product_status" : { "fixed" : [ "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64" ], "known_not_affected" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] }, "references" : [ { "category" : "self", "summary" : "Canonical URL", "url" : "https://access.redhat.com/security/cve/CVE-2026-40192" }, { "category" : "external", "summary" : "RHBZ#2458856", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2458856" }, { "category" : "external", "summary" : "https://www.cve.org/CVERecord?id=CVE-2026-40192", "url" : "https://www.cve.org/CVERecord?id=CVE-2026-40192" }, { "category" : "external", "summary" : "https://nvd.nist.gov/vuln/detail/CVE-2026-40192", "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-40192" }, { "category" : "external", "summary" : "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628", "url" : "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628" }, { "category" : "external", "summary" : "https://github.com/python-pillow/Pillow/pull/9521", "url" : "https://github.com/python-pillow/Pillow/pull/9521" }, { "category" : "external", "summary" : "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j", "url" : "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j" }, { "category" : "external", "summary" : "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb", "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb" } ], "release_date" : "2026-04-15T22:53:56.147000+00:00", "remediations" : [ { "category" : "vendor_fix", "date" : "2026-06-18T17:24:02+00:00", "details" : "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.16/html/updating_red_hat_satellite/index", "product_ids" : [ "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64" ], "restart_required" : { "category" : "none" }, "url" : "https://access.redhat.com/errata/RHSA-2026:27076" }, { "category" : "workaround", "details" : "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "scores" : [ { "cvss_v3" : { "attackComplexity" : "LOW", "attackVector" : "NETWORK", "availabilityImpact" : "HIGH", "baseScore" : 7.5, "baseSeverity" : "HIGH", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "privilegesRequired" : "NONE", "scope" : "UNCHANGED", "userInteraction" : "NONE", "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version" : "3.1" }, "products" : [ "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.src", "8Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el8sat.x86_64", "8Base-satellite-6.16:python-pillow-0:12.2.0-1.el8pc.src", "8Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el8pc.src", "8Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el8pc.src", "8Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el8pc.x86_64", "8Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el8pc.noarch", "8Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el8pc.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el8sat.src", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.noarch", "8Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el8sat.src", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-0:6.16.9-1.el8sat.src", "8Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-cli-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-common-0:6.16.9-1.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.noarch", "8Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.src", "8Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el8sat.x86_64", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16-capsule:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16-capsule:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16-capsule:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16-capsule:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16-capsule:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16-capsule:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16-capsule:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-capsule:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-capsule:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-capsule:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16-maintenance:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16-utils:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16-utils:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.src", "9Base-satellite-6.16:dynflow-utils-0:1.6.3-1.1.el9sat.x86_64", "9Base-satellite-6.16:python-pillow-0:12.2.0-1.el9pc.src", "9Base-satellite-6.16:python-pillow-debugsource-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python-pulp-ansible-1:0.21.10-4.el9pc.src", "9Base-satellite-6.16:python-pulp-rpm-0:3.26.8-1.el9pc.src", "9Base-satellite-6.16:python3.11-pillow-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pillow-debuginfo-0:12.2.0-1.el9pc.x86_64", "9Base-satellite-6.16:python3.11-pulp-ansible-1:0.21.10-4.el9pc.noarch", "9Base-satellite-6.16:python3.11-pulp-rpm-0:3.26.8-1.el9pc.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-foreman_maintain-1:1.7.14-1.el9sat.src", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.noarch", "9Base-satellite-6.16:rubygem-katello-0:4.14.0.20-1.el9sat.src", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-0:6.16.9-1.el9sat.src", "9Base-satellite-6.16:satellite-capsule-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-cli-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-common-0:6.16.9-1.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.noarch", "9Base-satellite-6.16:satellite-lifecycle-0:6.16.0-3.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.src", "9Base-satellite-6.16:yggdrasil-worker-forwarder-0:0.0.3-5.el9sat.x86_64" ] } ], "threats" : [ { "category" : "impact", "details" : "Important" } ], "title" : "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing" } ] }