RHSA-2026:5968
Vulnerability from csaf_redhat - Published: 2026-03-26 19:47 - Updated: 2026-04-03 08:05Summary
Red Hat Security Advisory: Satellite 6.18.4 Async Update
Severity
Important
Notes
Topic: A new release is now available for Red Hat Satellite 6.18 for RHEL 9.
Red Hat Product Security has rated this update as having a security impact
of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available for each vulnerability from
the CVE link(s) in the References section.
Details: Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.
Security Fix(es):
* yggdrasil-worker-forwarder: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)
* yggdrasil-worker-forwarder: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)
* yggdrasil-worker-forwarder: Unexpected session resumption in crypto/tls (CVE-2025-68121)
* rubygem-rubyipmi: Remote Code Execution in rubyipmi via malicious BMC username (CVE-2026-0980)
* rubygem-foreman_kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification (CVE-2026-1531)
* foreman: Foreman: Remote Code Execution via command injection in WebSocket proxy (CVE-2026-1961)
* rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection (CVE-2026-4324)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index
https://access.redhat.com/errata/RHSA-2026:5968
Workaround
Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index
https://access.redhat.com/errata/RHSA-2026:5968
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.
7.4 (High)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index
https://access.redhat.com/errata/RHSA-2026:5968
A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.
8.3 (High)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index
https://access.redhat.com/errata/RHSA-2026:5968
Workaround
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite and OpenShift, to perform a Man-in-the-Middle (MITM) attack. Such an attack could lead to the disclosure or alteration of sensitive information.
8.1 (High)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index
https://access.redhat.com/errata/RHSA-2026:5968
Workaround
To mitigate this issue, ensure that a Certificate Authority (CA) certificate is explicitly configured when setting up the connection to OpenShift in foreman_kubevirt. This will enable SSL verification and prevent Man-in-the-Middle attacks. Refer to the foreman_kubevirt documentation for specific instructions on configuring CA certificates. A restart or service reload may be required for the changes to take effect.
A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman's WebSocket proxy implementation. This vulnerability arises from the system's use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.
8.0 (High)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index
https://access.redhat.com/errata/RHSA-2026:5968
A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.
5.4 (Medium)
Vendor Fix
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
For detailed instructions how to apply this update, refer to:
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index
https://access.redhat.com/errata/RHSA-2026:5968
Workaround
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
References
Acknowledgments
Red Hat
Evgeni Golov
Houssam Sahli
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new release is now available for Red Hat Satellite 6.18 for RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact\nof Moderate. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available for each vulnerability from\nthe CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Satellite is a system management solution that allows organizations\nto configure and maintain their systems without the necessity to provide\npublic Internet access to their servers or other client systems. It\nperforms provisioning and configuration management of predefined standard\noperating environments.\n\nSecurity Fix(es):\n\n* yggdrasil-worker-forwarder: Memory exhaustion in query parameter parsing in net/url (CVE-2025-61726)\n* yggdrasil-worker-forwarder: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729)\n* yggdrasil-worker-forwarder: Unexpected session resumption in crypto/tls (CVE-2025-68121)\n* rubygem-rubyipmi: Remote Code Execution in rubyipmi via malicious BMC username (CVE-2026-0980)\n* rubygem-foreman_kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification (CVE-2026-1531)\n* foreman: Foreman: Remote Code Execution via command injection in WebSocket proxy (CVE-2026-1961)\n* rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection (CVE-2026-4324)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:5968",
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "SAT-41530",
"url": "https://issues.redhat.com/browse/SAT-41530"
},
{
"category": "external",
"summary": "SAT-42707",
"url": "https://issues.redhat.com/browse/SAT-42707"
},
{
"category": "external",
"summary": "SAT-42708",
"url": "https://issues.redhat.com/browse/SAT-42708"
},
{
"category": "external",
"summary": "SAT-42710",
"url": "https://issues.redhat.com/browse/SAT-42710"
},
{
"category": "external",
"summary": "SAT-42711",
"url": "https://issues.redhat.com/browse/SAT-42711"
},
{
"category": "external",
"summary": "SAT-42712",
"url": "https://issues.redhat.com/browse/SAT-42712"
},
{
"category": "external",
"summary": "SAT-42713",
"url": "https://issues.redhat.com/browse/SAT-42713"
},
{
"category": "external",
"summary": "SAT-42714",
"url": "https://issues.redhat.com/browse/SAT-42714"
},
{
"category": "external",
"summary": "SAT-42715",
"url": "https://issues.redhat.com/browse/SAT-42715"
},
{
"category": "external",
"summary": "SAT-42716",
"url": "https://issues.redhat.com/browse/SAT-42716"
},
{
"category": "external",
"summary": "SAT-42717",
"url": "https://issues.redhat.com/browse/SAT-42717"
},
{
"category": "external",
"summary": "SAT-42718",
"url": "https://issues.redhat.com/browse/SAT-42718"
},
{
"category": "external",
"summary": "SAT-43310",
"url": "https://issues.redhat.com/browse/SAT-43310"
},
{
"category": "external",
"summary": "SAT-43742",
"url": "https://issues.redhat.com/browse/SAT-43742"
},
{
"category": "external",
"summary": "SAT-43743",
"url": "https://issues.redhat.com/browse/SAT-43743"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5968.json"
}
],
"title": "Red Hat Security Advisory: Satellite 6.18.4 Async Update",
"tracking": {
"current_release_date": "2026-04-03T08:05:55+00:00",
"generator": {
"date": "2026-04-03T08:05:55+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.4"
}
},
"id": "RHSA-2026:5968",
"initial_release_date": "2026-03-26T19:47:53+00:00",
"revision_history": [
{
"date": "2026-03-26T19:47:53+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-03-26T19:47:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-04-03T08:05:55+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.18::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_capsule:6.18::el9"
}
}
},
{
"category": "product_name",
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product": {
"name": "Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite_utils:6.18::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite 6"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-0:3.16.0.12-1.el9sat.src",
"product": {
"name": "foreman-0:3.16.0.12-1.el9sat.src",
"product_id": "foreman-0:3.16.0.12-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.16.0.12-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.16.0.6-1.el9sat.src",
"product": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.src",
"product_id": "foreman-installer-1:3.16.0.6-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.16.0.6-1.el9sat?arch=src\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-0:4.2.29-1.el9pc.src",
"product": {
"name": "python3.12-django-0:4.2.29-1.el9pc.src",
"product_id": "python3.12-django-0:4.2.29-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django@4.2.29-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"product": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"product_id": "python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.24.5-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"product": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"product_id": "python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.73.26-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"product": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"product_id": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-rpm@3.29.9-1.el9pc?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"product": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"product_id": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_kubevirt@0.4.3-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.src",
"product": {
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.src",
"product_id": "rubygem-katello-0:4.18.0.9-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.18.0.9-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"product": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"product_id": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rubyipmi@0.13.0-1.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.18.4-2.el9sat.src",
"product": {
"name": "satellite-0:6.18.4-2.el9sat.src",
"product_id": "satellite-0:6.18.4-2.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.18.4-2.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"product": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"product_id": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-4.el9sat?arch=src"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"product": {
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"product_id": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@12.2.17-1.el9sat?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-cli@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-debug@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-pcp@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-dynflow-sidekiq@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-ec2@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-journald@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-libvirt@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-openstack@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-postgresql@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-redis@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-service@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-telemetry@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"product": {
"name": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"product_id": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-vmware@3.16.0.12-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"product": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"product_id": "foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer@3.16.0.6-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"product": {
"name": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"product_id": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/foreman-installer-katello@3.16.0.6-1.el9sat?arch=noarch\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "python3.12-django-0:4.2.29-1.el9pc.noarch",
"product": {
"name": "python3.12-django-0:4.2.29-1.el9pc.noarch",
"product_id": "python3.12-django-0:4.2.29-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-django@4.2.29-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"product": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"product_id": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-container@2.24.5-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"product": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"product_id": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulpcore@3.73.26-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"product": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"product_id": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python3.12-pulp-rpm@3.29.9-1.el9pc?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"product": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"product_id": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_kubevirt@0.4.3-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"product": {
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"product_id": "rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-katello@4.18.0.9-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"product": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"product_id": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-rubyipmi@0.13.0-1.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"product": {
"name": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"product_id": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-cli@6.18.4-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"product": {
"name": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"product_id": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-capsule@6.18.4-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-common-0:6.18.4-2.el9sat.noarch",
"product": {
"name": "satellite-common-0:6.18.4-2.el9sat.noarch",
"product_id": "satellite-common-0:6.18.4-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-common@6.18.4-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"product": {
"name": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"product_id": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite-obsolete-packages@6.18.4-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "satellite-0:6.18.4-2.el9sat.noarch",
"product": {
"name": "satellite-0:6.18.4-2.el9sat.noarch",
"product_id": "satellite-0:6.18.4-2.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/satellite@6.18.4-2.el9sat?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"product": {
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"product_id": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/rubygem-foreman_rh_cloud@12.2.17-1.el9sat?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"product": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"product_id": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/yggdrasil-worker-forwarder@0.0.3-4.el9sat?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src"
},
"product_reference": "foreman-installer-1:3.16.0.6-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-0:4.2.29-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch"
},
"product_reference": "python3.12-django-0:4.2.29-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-0:4.2.29-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src"
},
"product_reference": "python3.12-django-0:4.2.29-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch"
},
"product_reference": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src"
},
"product_reference": "python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch"
},
"product_reference": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src"
},
"product_reference": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src"
},
"product_reference": "python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-capsule"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18-utils"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-0:3.16.0.12-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src"
},
"product_reference": "foreman-0:3.16.0.12-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-cli-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-debug-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch"
},
"product_reference": "foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-1:3.16.0.6-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src"
},
"product_reference": "foreman-installer-1:3.16.0.6-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch"
},
"product_reference": "foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-journald-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-redis-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-service-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-service-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch"
},
"product_reference": "foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-0:4.2.29-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch"
},
"product_reference": "python3.12-django-0:4.2.29-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-django-0:4.2.29-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src"
},
"product_reference": "python3.12-django-0:4.2.29-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch"
},
"product_reference": "python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-container-0:2.24.5-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src"
},
"product_reference": "python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch"
},
"product_reference": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src"
},
"product_reference": "python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch"
},
"product_reference": "python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python3.12-pulpcore-0:3.73.26-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src"
},
"product_reference": "python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src"
},
"product_reference": "rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch"
},
"product_reference": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src"
},
"product_reference": "rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch"
},
"product_reference": "rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-katello-0:4.18.0.9-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src"
},
"product_reference": "rubygem-katello-0:4.18.0.9-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src"
},
"product_reference": "rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-0:6.18.4-2.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src"
},
"product_reference": "satellite-0:6.18.4-2.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-capsule-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-capsule-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-cli-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-cli-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-common-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-common-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
},
"product_reference": "satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src"
},
"product_reference": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"relates_to_product_reference": "9Base-satellite-6.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64 as a component of Red Hat Satellite 6.18 for RHEL 9",
"product_id": "9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
},
"product_reference": "yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64",
"relates_to_product_reference": "9Base-satellite-6.18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the returned Config, or uses Config.GetConfigForClient. This can cause a client to resume a session with a server that it would not have resumed with during the initial handshake, or cause a server to resume a session with a client that it would not have resumed with during the initial handshake.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: Unexpected session resumption in crypto/tls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: Unexpected session resumption in crypto/tls"
},
{
"cve": "CVE-2026-0980",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-01-15T08:50:01.841000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2429874"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite. An authenticated attacker with host creation or update permissions could exploit this vulnerability by crafting a malicious username for the BMC interface. This could lead to remote code execution (RCE) on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat Satellite because it requires the BMC component to be enabled and configured to use `ipmitool` as the IPMI implementation. An authenticated attacker with host creation or update permissions can exploit this by crafting a malicious BMC username. Exploitation is limited to environments meeting these specific configuration and permission requirements.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-0980"
},
{
"category": "external",
"summary": "RHBZ#2429874",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2429874"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-0980",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-0980"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-0980",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-0980"
}
],
"release_date": "2020-01-15T08:08:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username"
},
{
"acknowledgments": [
{
"names": [
"Evgeni Golov"
],
"organization": "Red Hat",
"summary": "This issue was discovered by Red Hat."
}
],
"cve": "CVE-2026-1531",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-01-28T12:50:13.269000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2433786"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in foreman_kubevirt. When configuring the connection to OpenShift, the system disables SSL verification if a Certificate Authority (CA) certificate is not explicitly set. This insecure default allows a remote attacker, capable of intercepting network traffic between Satellite and OpenShift, to perform a Man-in-the-Middle (MITM) attack. Such an attack could lead to the disclosure or alteration of sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw in foreman_kubevirt where the default configuration for connecting to OpenShift disables SSL verification if a CA certificate is not explicitly provided. This insecure default allows a remote attacker to perform a Man-in-the-Middle attack by intercepting network traffic between Satellite and OpenShift, potentially leading to information disclosure or alteration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1531"
},
{
"category": "external",
"summary": "RHBZ#2433786",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433786"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1531",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1531"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1531",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1531"
}
],
"release_date": "2026-01-28T12:34:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that a Certificate Authority (CA) certificate is explicitly configured when setting up the connection to OpenShift in foreman_kubevirt. This will enable SSL verification and prevent Man-in-the-Middle attacks. Refer to the foreman_kubevirt documentation for specific instructions on configuring CA certificates. A restart or service reload may be required for the changes to take effect.",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification"
},
{
"acknowledgments": [
{
"names": [
"Houssam Sahli"
]
}
],
"cve": "CVE-2026-1961",
"discovery_date": "2026-02-05T10:40:57.141000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437036"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Foreman. A remote attacker could exploit a command injection vulnerability in Foreman\u0027s WebSocket proxy implementation. This vulnerability arises from the system\u0027s use of unsanitized hostname values from compute resource providers when constructing shell commands. By operating a malicious compute resource server, an attacker could achieve remote code execution on the Foreman server when a user accesses VM VNC console functionality. This could lead to the compromise of sensitive credentials and the entire managed infrastructure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "forman: Foreman: Remote Code Execution via command injection in WebSocket proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue was rated as Important. Command injection vulnerability in Foreman\u0027s WebSocket proxy. Exploitation occurs when an administrator configures a malicious compute resource server and subsequently accesses its VM console functionality. Successful exploitation can lead to remote code execution on the Foreman server, potentially compromising sensitive credentials and the entire managed infrastructure.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-1961"
},
{
"category": "external",
"summary": "RHBZ#2437036",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437036"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-1961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-1961"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-1961",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-1961"
}
],
"release_date": "2026-03-26T12:30:45.446000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "forman: Foreman: Remote Code Execution via command injection in WebSocket proxy"
},
{
"cve": "CVE-2026-4324",
"cwe": {
"id": "CWE-89",
"name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
},
"discovery_date": "2026-03-17T12:28:40.127000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448349"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sort_by parameter of the /api/hosts/bootc_images API endpoint. This can lead to a Denial of Service (DoS) by triggering database errors, and potentially enable Boolean-based Blind SQL injection, which could allow an attacker to extract sensitive information from the database.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw in the Katello plugin for Red Hat Satellite allows an attacker to inject arbitrary SQL commands into the `/api/hosts/bootc_images` API endpoint. By manipulating the `sort_by` parameter, an attacker could trigger database errors, cause a Denial of Service, or potentially perform Boolean-based Blind SQL injection. This affects Red Hat Satellite installations utilizing the Katello plugin.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src"
],
"known_not_affected": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4324"
},
{
"category": "external",
"summary": "RHBZ#2448349",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448349"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4324",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4324"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4324",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4324"
}
],
"release_date": "2026-03-17T13:18:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-03-26T19:47:53+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor detailed instructions how to apply this update, refer to:\n\nhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index",
"product_ids": [
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:5968"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18-capsule:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18-capsule:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18-capsule:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-capsule:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-capsule:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18-utils:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18-utils:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18-utils:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-0:3.16.0.12-1.el9sat.src",
"9Base-satellite-6.18:foreman-cli-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-debug-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-ec2-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-installer-1:3.16.0.6-1.el9sat.src",
"9Base-satellite-6.18:foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-journald-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-libvirt-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-openstack-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-pcp-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-postgresql-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-redis-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-service-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-telemetry-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:foreman-vmware-0:3.16.0.12-1.el9sat.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-django-0:4.2.29-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-container-0:2.24.5-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulp-rpm-0:3.29.9-1.el9pc.src",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.noarch",
"9Base-satellite-6.18:python3.12-pulpcore-0:3.73.26-1.el9pc.src",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.src",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-katello-0:4.18.0.9-1.el9sat.src",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.noarch",
"9Base-satellite-6.18:rubygem-rubyipmi-0:0.13.0-1.el9sat.src",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-0:6.18.4-2.el9sat.src",
"9Base-satellite-6.18:satellite-capsule-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-cli-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-common-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:satellite-obsolete-packages-0:6.18.4-2.el9sat.noarch",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.src",
"9Base-satellite-6.18:yggdrasil-worker-forwarder-0:0.0.3-4.el9sat.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…