Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
RHSA-2026:92860
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2026:92860
Import Source
https://security.access.redhat.com/data/osv/RHSA-2026:92860.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2026:92860
Upstream
CVE (17)
CVE-2026-111943
CVE-2026-18660
CVE-2026-19203
CVE-2026-56852
CVE-2026-59646
CVE-2026-63072
CVE-2026-63076
CVE-2026-68494
CVE-2026-68497
CVE-2026-78667
CVE-2026-78669
CVE-2026-84445
CVE-2026-8924
CVE-2026-89407
CVE-2026-89425
CVE-2026-94440
CVE-2026-97031
Related
GO (6)
GO-2026-5970
GO-2026-6607
GO-2026-6608
GO-2026-6609
GO-2026-6611
GO-2026-6809
Withdrawn
2026-11-14T13:00:38Z
Published
2026-11-13T18:48:48Z
Modified
2026-11-14T13:00:38Z
Severity
8.2 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
CVSS Calculator
Summary
Red Hat Security Advisory: Satellite 6.18 security update
Details
References
https://access.redhat.com/errata/RHSA-2026:92860
https://access.redhat.com/security/updates/classification/#important
https://bugzilla.redhat.com/show_bug.cgi?id=2496765
https://bugzilla.redhat.com/show_bug.cgi?id=2504233
https://bugzilla.redhat.com/show_bug.cgi?id=2510193
https://bugzilla.redhat.com/show_bug.cgi?id=2511026
https://bugzilla.redhat.com/show_bug.cgi?id=2517560
https://bugzilla.redhat.com/show_bug.cgi?id=2517561
https://bugzilla.redhat.com/show_bug.cgi?id=2529768
https://bugzilla.redhat.com/show_bug.cgi?id=2531964
https://bugzilla.redhat.com/show_bug.cgi?id=2533175
https://bugzilla.redhat.com/show_bug.cgi?id=2538720
https://bugzilla.redhat.com/show_bug.cgi?id=2539084
https://bugzilla.redhat.com/show_bug.cgi?id=2548334
https://bugzilla.redhat.com/show_bug.cgi?id=2548336
https://bugzilla.redhat.com/show_bug.cgi?id=2548341
https://bugzilla.redhat.com/show_bug.cgi?id=2548344
https://bugzilla.redhat.com/show_bug.cgi?id=2553134
https://bugzilla.redhat.com/show_bug.cgi?id=2556068
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92860.json
https://access.redhat.com/security/cve/CVE-2026-8924
https://www.cve.org/CVERecord?id=CVE-2026-8924
https://nvd.nist.gov/vuln/detail/CVE-2026-8924
https://curl.se/docs/CVE-2026-8924.html
https://curl.se/docs/CVE-2026-8924.json
https://hackerone.com/reports/3733905
https://access.redhat.com/security/cve/CVE-2026-18660
https://www.cve.org/CVERecord?id=CVE-2026-18660
https://nvd.nist.gov/vuln/detail/CVE-2026-18660
https://github.com/jetty/jetty.project/security/advisories/GHSA-7wfj-j486-mxrf
https://gitlab.eclipse.org/security/cve-assignment/-/work_items/212
https://access.redhat.com/security/cve/CVE-2026-19203
https://www.cve.org/CVERecord?id=CVE-2026-19203
https://nvd.nist.gov/vuln/detail/CVE-2026-19203
https://github.com/jetty/jetty.project/security/advisories/GHSA-xc35-c22g-239h
https://access.redhat.com/security/cve/CVE-2026-56852
https://www.cve.org/CVERecord?id=CVE-2026-56852
https://nvd.nist.gov/vuln/detail/CVE-2026-56852
https://go.dev/cl/794100
https://go.dev/issue/80142
https://pkg.go.dev/vuln/GO-2026-5970
https://access.redhat.com/security/cve/CVE-2026-59646
https://www.cve.org/CVERecord?id=CVE-2026-59646
https://nvd.nist.gov/vuln/detail/CVE-2026-59646
https://github.com/bcgit/bc-java/commit/2d98721e71bbd822ffa0f84e088eea645cf679fa
https://github.com/bcgit/bc-java/commit/2ea38942c7917f6d7ab4de93d8a5336d021df0d9
https://github.com/bcgit/bc-java/wiki/CVE-2026-59646
https://access.redhat.com/security/cve/CVE-2026-63072
https://www.cve.org/CVERecord?id=CVE-2026-63072
https://nvd.nist.gov/vuln/detail/CVE-2026-63072
https://openssl-library.org/news/secadv/20260825.txt
https://access.redhat.com/security/cve/CVE-2026-63076
https://www.cve.org/CVERecord?id=CVE-2026-63076
https://nvd.nist.gov/vuln/detail/CVE-2026-63076
https://access.redhat.com/security/cve/CVE-2026-68494
https://www.cve.org/CVERecord?id=CVE-2026-68494
https://nvd.nist.gov/vuln/detail/CVE-2026-68494
https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd
https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641
https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8
https://github.com/FasterXML/jackson-core/pull/1611
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9
https://github.com/advisories/GHSA-72hv-8253-57qq
https://www.cve.org/CVERecord?id=CVE-2026-18401
https://access.redhat.com/security/cve/CVE-2026-68497
https://www.cve.org/CVERecord?id=CVE-2026-68497
https://nvd.nist.gov/vuln/detail/CVE-2026-68497
https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd
https://github.com/FasterXML/jackson-databind/pull/6127
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7
https://access.redhat.com/security/cve/CVE-2026-78667
https://www.cve.org/CVERecord?id=CVE-2026-78667
https://nvd.nist.gov/vuln/detail/CVE-2026-78667
https://go.dev/cl/847309
https://go.dev/issue/81858
https://groups.google.com/g/golang-announce/c/U2fTuyDJznI
https://pkg.go.dev/vuln/GO-2026-6609
https://access.redhat.com/security/cve/CVE-2026-78669
https://www.cve.org/CVERecord?id=CVE-2026-78669
https://nvd.nist.gov/vuln/detail/CVE-2026-78669
https://go.dev/cl/847186
https://go.dev/cl/847308
https://go.dev/issue/81742
https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs
https://pkg.go.dev/vuln/GO-2026-6611
https://access.redhat.com/security/cve/CVE-2026-84445
https://www.cve.org/CVERecord?id=CVE-2026-84445
https://nvd.nist.gov/vuln/detail/CVE-2026-84445
https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7
https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4
https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f
https://github.com/grpc/grpc-go/issues/9354
https://github.com/grpc/grpc-go/pull/9365
https://github.com/grpc/grpc-go/pull/9366
https://github.com/grpc/grpc-go/pull/9367
https://github.com/grpc/grpc-go/releases/tag/v1.82.2
https://github.com/grpc/grpc-go/releases/tag/v1.83.2
https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj
https://access.redhat.com/security/cve/CVE-2026-89407
https://www.cve.org/CVERecord?id=CVE-2026-89407
https://nvd.nist.gov/vuln/detail/CVE-2026-89407
https://github.com/FasterXML/jackson-core/issues/1649
https://github.com/FasterXML/jackson-core/pull/1650
https://github.com/FasterXML/jackson-core/pull/1701
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89
https://access.redhat.com/security/cve/CVE-2026-89425
https://www.cve.org/CVERecord?id=CVE-2026-89425
https://nvd.nist.gov/vuln/detail/CVE-2026-89425
https://github.com/FasterXML/jackson-core/pull/1698
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf
https://access.redhat.com/security/cve/CVE-2026-94440
https://www.cve.org/CVERecord?id=CVE-2026-94440
https://nvd.nist.gov/vuln/detail/CVE-2026-94440
https://go.dev/cl/847307
https://go.dev/issue/81741
https://pkg.go.dev/vuln/GO-2026-6608
https://access.redhat.com/security/cve/CVE-2026-97031
https://www.cve.org/CVERecord?id=CVE-2026-97031
https://nvd.nist.gov/vuln/detail/CVE-2026-97031
https://go.dev/cl/847312
https://go.dev/issue/81855
https://pkg.go.dev/vuln/GO-2026-6607
https://access.redhat.com/security/cve/CVE-2026-111943
https://access.redhat.com/security/vulnerabilities/RHSB-2026-012
https://www.cve.org/CVERecord?id=CVE-2026-111943
https://nvd.nist.gov/vuln/detail/CVE-2026-111943
https://github.com/golang/go/issues/82345
https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU
https://pkg.go.dev/vuln/GO-2026-6809
Affected packages
Red Hat:satellite:6.18::el9
openvox-agent
Package
Name
openvox-agent
Purl
pkg:rpm/redhat/openvox-agent
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.31.1-1.el9sat
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92860.json"
openvox-server
Package
Name
openvox-server
Purl
pkg:rpm/redhat/openvox-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.17.0-1.el9sat
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92860.json"
yggdrasil-worker-forwarder
Package
Name
yggdrasil-worker-forwarder
Purl
pkg:rpm/redhat/yggdrasil-worker-forwarder
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:0.1.1-1.el9sat
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92860.json"
Red Hat:satellite_capsule:6.18::el9
openvox-agent
Package
Name
openvox-agent
Purl
pkg:rpm/redhat/openvox-agent
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.31.1-1.el9sat
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92860.json"
openvox-server
Package
Name
openvox-server
Purl
pkg:rpm/redhat/openvox-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.17.0-1.el9sat
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92860.json"
RHSA-2026:92860 - OSV