Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
RHSA-2026:92861
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2026:92861
Import Source
https://security.access.redhat.com/data/osv/RHSA-2026:92861.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2026:92861
Upstream
CVE (47)
CVE-2026-110856
CVE-2026-110857
CVE-2026-110858
CVE-2026-110859
CVE-2026-111497
CVE-2026-111943
CVE-2026-112390
CVE-2026-112391
CVE-2026-112392
CVE-2026-112393
CVE-2026-112397
CVE-2026-112398
CVE-2026-112399
CVE-2026-112400
CVE-2026-112402
CVE-2026-112403
CVE-2026-112404
CVE-2026-112405
CVE-2026-112406
CVE-2026-112892
CVE-2026-112893
CVE-2026-112894
CVE-2026-112895
CVE-2026-112896
CVE-2026-112897
CVE-2026-114145
CVE-2026-15307
CVE-2026-18660
CVE-2026-19203
CVE-2026-56853
CVE-2026-59646
CVE-2026-68497
CVE-2026-73619
CVE-2026-78667
CVE-2026-78669
CVE-2026-78677
CVE-2026-84445
CVE-2026-87819
CVE-2026-89407
CVE-2026-89425
CVE-2026-94440
CVE-2026-96640
CVE-2026-96643
CVE-2026-96778
CVE-2026-97031
CVE-2026-97687
CVE-2026-97689
Related
GO (6)
GO-2026-6089
GO-2026-6607
GO-2026-6608
GO-2026-6609
GO-2026-6611
GO-2026-6809
Withdrawn
2026-11-14T13:00:38Z
Published
2026-11-13T18:48:48Z
Modified
2026-11-14T13:00:38Z
Severity
8.8 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: Satellite 6.19 security update
Details
References
https://access.redhat.com/errata/RHSA-2026:92861
https://access.redhat.com/security/updates/classification/#critical
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92861.json
https://access.redhat.com/security/cve/CVE-2026-15307
https://bugzilla.redhat.com/show_bug.cgi?id=2511095
https://www.cve.org/CVERecord?id=CVE-2026-15307
https://nvd.nist.gov/vuln/detail/CVE-2026-15307
https://docs.djangoproject.com/en/dev/releases/security/
https://github.com/django/django/commit/115ffd0463a765ab1cc93de18e94b5459b8a300e
https://github.com/django/django/commit/208f80cb682868b584ed0a78f23e4ba6304212aa
https://github.com/django/django/commit/39b3e2d0c743a338def6c473086ebc06865e86b6
https://github.com/django/django/commit/f1949c1f9758947ade984c895ff16bef46f56520
https://groups.google.com/g/django-announce
https://www.djangoproject.com/weblog/2026/aug/04/security-releases/
https://access.redhat.com/security/cve/CVE-2026-18660
https://bugzilla.redhat.com/show_bug.cgi?id=2553134
https://www.cve.org/CVERecord?id=CVE-2026-18660
https://nvd.nist.gov/vuln/detail/CVE-2026-18660
https://github.com/jetty/jetty.project/security/advisories/GHSA-7wfj-j486-mxrf
https://gitlab.eclipse.org/security/cve-assignment/-/work_items/212
https://access.redhat.com/security/cve/CVE-2026-19203
https://bugzilla.redhat.com/show_bug.cgi?id=2529768
https://www.cve.org/CVERecord?id=CVE-2026-19203
https://nvd.nist.gov/vuln/detail/CVE-2026-19203
https://github.com/jetty/jetty.project/security/advisories/GHSA-xc35-c22g-239h
https://access.redhat.com/security/cve/CVE-2026-56853
https://bugzilla.redhat.com/show_bug.cgi?id=2515827
https://www.cve.org/CVERecord?id=CVE-2026-56853
https://nvd.nist.gov/vuln/detail/CVE-2026-56853
https://go.dev/cl/795540
https://go.dev/issue/80205
https://groups.google.com/g/golang-announce/c/94pEornpRlI
https://pkg.go.dev/vuln/GO-2026-6089
https://access.redhat.com/security/cve/CVE-2026-59646
https://bugzilla.redhat.com/show_bug.cgi?id=2510193
https://www.cve.org/CVERecord?id=CVE-2026-59646
https://nvd.nist.gov/vuln/detail/CVE-2026-59646
https://github.com/bcgit/bc-java/commit/2d98721e71bbd822ffa0f84e088eea645cf679fa
https://github.com/bcgit/bc-java/commit/2ea38942c7917f6d7ab4de93d8a5336d021df0d9
https://github.com/bcgit/bc-java/wiki/CVE-2026-59646
https://access.redhat.com/security/cve/CVE-2026-68497
https://bugzilla.redhat.com/show_bug.cgi?id=2531964
https://www.cve.org/CVERecord?id=CVE-2026-68497
https://nvd.nist.gov/vuln/detail/CVE-2026-68497
https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd
https://github.com/FasterXML/jackson-databind/pull/6127
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7
https://access.redhat.com/security/cve/CVE-2026-73619
https://bugzilla.redhat.com/show_bug.cgi?id=2515265
https://www.cve.org/CVERecord?id=CVE-2026-73619
https://nvd.nist.gov/vuln/detail/CVE-2026-73619
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-539m-9xh6-q6rr
https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-read-via-repo-archive
https://access.redhat.com/security/cve/CVE-2026-78667
https://bugzilla.redhat.com/show_bug.cgi?id=2548334
https://www.cve.org/CVERecord?id=CVE-2026-78667
https://nvd.nist.gov/vuln/detail/CVE-2026-78667
https://go.dev/cl/847309
https://go.dev/issue/81858
https://groups.google.com/g/golang-announce/c/U2fTuyDJznI
https://pkg.go.dev/vuln/GO-2026-6609
https://access.redhat.com/security/cve/CVE-2026-78669
https://bugzilla.redhat.com/show_bug.cgi?id=2548344
https://www.cve.org/CVERecord?id=CVE-2026-78669
https://nvd.nist.gov/vuln/detail/CVE-2026-78669
https://go.dev/cl/847186
https://go.dev/cl/847308
https://go.dev/issue/81742
https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs
https://pkg.go.dev/vuln/GO-2026-6611
https://access.redhat.com/security/cve/CVE-2026-78677
https://bugzilla.redhat.com/show_bug.cgi?id=2523215
https://www.cve.org/CVERecord?id=CVE-2026-78677
https://nvd.nist.gov/vuln/detail/CVE-2026-78677
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-8mcc-hrx5-hvxc
https://www.vulncheck.com/advisories/gitpython-before-path-traversal-via-separate-git-dir
https://access.redhat.com/security/cve/CVE-2026-84445
https://bugzilla.redhat.com/show_bug.cgi?id=2533175
https://www.cve.org/CVERecord?id=CVE-2026-84445
https://nvd.nist.gov/vuln/detail/CVE-2026-84445
https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7
https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4
https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f
https://github.com/grpc/grpc-go/issues/9354
https://github.com/grpc/grpc-go/pull/9365
https://github.com/grpc/grpc-go/pull/9366
https://github.com/grpc/grpc-go/pull/9367
https://github.com/grpc/grpc-go/releases/tag/v1.82.2
https://github.com/grpc/grpc-go/releases/tag/v1.83.2
https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj
https://access.redhat.com/security/cve/CVE-2026-87819
https://bugzilla.redhat.com/show_bug.cgi?id=2530742
https://www.cve.org/CVERecord?id=CVE-2026-87819
https://nvd.nist.gov/vuln/detail/CVE-2026-87819
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-g5vv-9gxw-82hx
https://www.vulncheck.com/advisories/gitpython-before-3.1.60-denial-of-service-via-redos
https://access.redhat.com/security/cve/CVE-2026-89407
https://bugzilla.redhat.com/show_bug.cgi?id=2538720
https://www.cve.org/CVERecord?id=CVE-2026-89407
https://nvd.nist.gov/vuln/detail/CVE-2026-89407
https://github.com/FasterXML/jackson-core/issues/1649
https://github.com/FasterXML/jackson-core/pull/1650
https://github.com/FasterXML/jackson-core/pull/1701
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89
https://access.redhat.com/security/cve/CVE-2026-89425
https://bugzilla.redhat.com/show_bug.cgi?id=2539084
https://www.cve.org/CVERecord?id=CVE-2026-89425
https://nvd.nist.gov/vuln/detail/CVE-2026-89425
https://github.com/FasterXML/jackson-core/pull/1698
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf
https://access.redhat.com/security/cve/CVE-2026-94440
https://bugzilla.redhat.com/show_bug.cgi?id=2548341
https://www.cve.org/CVERecord?id=CVE-2026-94440
https://nvd.nist.gov/vuln/detail/CVE-2026-94440
https://go.dev/cl/847307
https://go.dev/issue/81741
https://pkg.go.dev/vuln/GO-2026-6608
https://access.redhat.com/security/cve/CVE-2026-96640
https://bugzilla.redhat.com/show_bug.cgi?id=2558576
https://www.cve.org/CVERecord?id=CVE-2026-96640
https://nvd.nist.gov/vuln/detail/CVE-2026-96640
https://github.com/python-pillow/Pillow/commit/6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7
https://github.com/python-pillow/Pillow/pull/10093
https://github.com/python-pillow/Pillow/releases/tag/13.0.0
https://github.com/python-pillow/Pillow/security/advisories/GHSA-mrfp-p49p-3hf2
https://access.redhat.com/security/cve/CVE-2026-96643
https://bugzilla.redhat.com/show_bug.cgi?id=2558566
https://www.cve.org/CVERecord?id=CVE-2026-96643
https://nvd.nist.gov/vuln/detail/CVE-2026-96643
https://github.com/python-pillow/Pillow/commit/806e38381c781f32bbd22f4cd026678acd40fd6c
https://github.com/python-pillow/Pillow/pull/10073
https://github.com/python-pillow/Pillow/security/advisories/GHSA-g4qv-2jxx-769h
https://access.redhat.com/security/cve/CVE-2026-96778
https://bugzilla.redhat.com/show_bug.cgi?id=2558567
https://www.cve.org/CVERecord?id=CVE-2026-96778
https://nvd.nist.gov/vuln/detail/CVE-2026-96778
https://github.com/python-pillow/Pillow/commit/02561b8dc6117d5670d4b469fecdd02c70854f9b
https://github.com/python-pillow/Pillow/pull/10124
https://github.com/python-pillow/Pillow/security/advisories/GHSA-g7cr-3p24-7wf7
https://access.redhat.com/security/cve/CVE-2026-97031
https://bugzilla.redhat.com/show_bug.cgi?id=2548336
https://www.cve.org/CVERecord?id=CVE-2026-97031
https://nvd.nist.gov/vuln/detail/CVE-2026-97031
https://go.dev/cl/847312
https://go.dev/issue/81855
https://pkg.go.dev/vuln/GO-2026-6607
https://access.redhat.com/security/cve/CVE-2026-97687
https://bugzilla.redhat.com/show_bug.cgi?id=2543255
https://www.cve.org/CVERecord?id=CVE-2026-97687
https://nvd.nist.gov/vuln/detail/CVE-2026-97687
https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465
https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3
https://github.com/urllib3/urllib3/pull/5093
https://github.com/urllib3/urllib3/releases/tag/2.8.0
https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77
https://access.redhat.com/security/cve/CVE-2026-97689
https://bugzilla.redhat.com/show_bug.cgi?id=2543245
https://www.cve.org/CVERecord?id=CVE-2026-97689
https://nvd.nist.gov/vuln/detail/CVE-2026-97689
https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed
https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw
https://access.redhat.com/security/cve/CVE-2026-110856
https://bugzilla.redhat.com/show_bug.cgi?id=2552977
https://www.cve.org/CVERecord?id=CVE-2026-110856
https://nvd.nist.gov/vuln/detail/CVE-2026-110856
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7
https://www.vulncheck.com/advisories/gitpython-before-3.2.0-redos-via-re-actor-epoch-in-parse-actor-and-date
https://access.redhat.com/security/cve/CVE-2026-110857
https://bugzilla.redhat.com/show_bug.cgi?id=2552966
https://www.cve.org/CVERecord?id=CVE-2026-110857
https://nvd.nist.gov/vuln/detail/CVE-2026-110857
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw
https://www.vulncheck.com/advisories/gitpython-before-3.2.0-command-execution-via-ls-remote-ext-urls
https://access.redhat.com/security/cve/CVE-2026-110858
https://bugzilla.redhat.com/show_bug.cgi?id=2552959
https://www.cve.org/CVERecord?id=CVE-2026-110858
https://nvd.nist.gov/vuln/detail/CVE-2026-110858
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239
https://www.vulncheck.com/advisories/gitpython-3.1.30-before-3.2.0-command-injection-via-remote-pull-refspec
https://access.redhat.com/security/cve/CVE-2026-110859
https://bugzilla.redhat.com/show_bug.cgi?id=2552989
https://www.cve.org/CVERecord?id=CVE-2026-110859
https://nvd.nist.gov/vuln/detail/CVE-2026-110859
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2
https://www.vulncheck.com/advisories/gitpython-before-3.2.0-arbitrary-file-read-via-head-checkout-branch-name
https://access.redhat.com/security/cve/CVE-2026-111497
https://bugzilla.redhat.com/show_bug.cgi?id=2558973
https://access.redhat.com/security/vulnerabilities/RHSB-2026-015
https://www.cve.org/CVERecord?id=CVE-2026-111497
https://nvd.nist.gov/vuln/detail/CVE-2026-111497
https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://access.redhat.com/security/cve/CVE-2026-111943
https://bugzilla.redhat.com/show_bug.cgi?id=2556068
https://access.redhat.com/security/vulnerabilities/RHSB-2026-012
https://www.cve.org/CVERecord?id=CVE-2026-111943
https://nvd.nist.gov/vuln/detail/CVE-2026-111943
https://github.com/golang/go/issues/82345
https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU
https://pkg.go.dev/vuln/GO-2026-6809
https://access.redhat.com/security/cve/CVE-2026-112390
https://bugzilla.redhat.com/show_bug.cgi?id=2555848
https://www.cve.org/CVERecord?id=CVE-2026-112390
https://nvd.nist.gov/vuln/detail/CVE-2026-112390
https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218
https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9
https://access.redhat.com/security/cve/CVE-2026-112391
https://bugzilla.redhat.com/show_bug.cgi?id=2555851
https://www.cve.org/CVERecord?id=CVE-2026-112391
https://nvd.nist.gov/vuln/detail/CVE-2026-112391
https://github.com/python-pillow/Pillow/commit/94cb11c44ff7345414da17ebfea1598a529ad9cd
https://github.com/python-pillow/Pillow/security/advisories/GHSA-254f-3936-288h
https://access.redhat.com/security/cve/CVE-2026-112392
https://bugzilla.redhat.com/show_bug.cgi?id=2555866
https://www.cve.org/CVERecord?id=CVE-2026-112392
https://nvd.nist.gov/vuln/detail/CVE-2026-112392
https://github.com/python-pillow/Pillow/commit/443e3130a8c11594fd0e296afad497e11e678961
https://github.com/python-pillow/Pillow/security/advisories/GHSA-27h8-gf7j-v5hc
https://access.redhat.com/security/cve/CVE-2026-112393
https://bugzilla.redhat.com/show_bug.cgi?id=2555846
https://www.cve.org/CVERecord?id=CVE-2026-112393
https://nvd.nist.gov/vuln/detail/CVE-2026-112393
https://github.com/python-pillow/Pillow/commit/11582e5ffbdceb973d5ee593f3105af5a9852b40
https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf
https://access.redhat.com/security/cve/CVE-2026-112397
https://bugzilla.redhat.com/show_bug.cgi?id=2555868
https://www.cve.org/CVERecord?id=CVE-2026-112397
https://nvd.nist.gov/vuln/detail/CVE-2026-112397
https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64
https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8
https://access.redhat.com/security/cve/CVE-2026-112398
https://bugzilla.redhat.com/show_bug.cgi?id=2555867
https://www.cve.org/CVERecord?id=CVE-2026-112398
https://nvd.nist.gov/vuln/detail/CVE-2026-112398
https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75
https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h
https://access.redhat.com/security/cve/CVE-2026-112399
https://bugzilla.redhat.com/show_bug.cgi?id=2555863
https://www.cve.org/CVERecord?id=CVE-2026-112399
https://nvd.nist.gov/vuln/detail/CVE-2026-112399
https://github.com/python-pillow/Pillow/commit/f1acfc54c53502948d0d14121872061df931db48
https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xm2-6676-qcp9
https://access.redhat.com/security/cve/CVE-2026-112400
https://bugzilla.redhat.com/show_bug.cgi?id=2555864
https://www.cve.org/CVERecord?id=CVE-2026-112400
https://nvd.nist.gov/vuln/detail/CVE-2026-112400
https://github.com/python-pillow/Pillow/commit/6faed707cfb760a4cbd726ddc8406f576cf35bf7
https://github.com/python-pillow/Pillow/security/advisories/GHSA-65qm-jvmh-6pqg
https://access.redhat.com/security/cve/CVE-2026-112402
https://bugzilla.redhat.com/show_bug.cgi?id=2555859
https://www.cve.org/CVERecord?id=CVE-2026-112402
https://nvd.nist.gov/vuln/detail/CVE-2026-112402
https://github.com/python-pillow/Pillow/commit/aafa6c75f7cdabb9f409a8aac7c780bea31d08d9
https://github.com/python-pillow/Pillow/security/advisories/GHSA-7mwm-ghpf-9vrm
https://access.redhat.com/security/cve/CVE-2026-112403
https://bugzilla.redhat.com/show_bug.cgi?id=2555871
https://www.cve.org/CVERecord?id=CVE-2026-112403
https://nvd.nist.gov/vuln/detail/CVE-2026-112403
https://github.com/python-pillow/Pillow/security/advisories/GHSA-8g5g-8vmr-9782
https://access.redhat.com/security/cve/CVE-2026-112404
https://bugzilla.redhat.com/show_bug.cgi?id=2555874
https://www.cve.org/CVERecord?id=CVE-2026-112404
https://nvd.nist.gov/vuln/detail/CVE-2026-112404
https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce
https://github.com/python-pillow/Pillow/security/advisories/GHSA-c6hw-5grf-ff96
https://access.redhat.com/security/cve/CVE-2026-112405
https://bugzilla.redhat.com/show_bug.cgi?id=2555873
https://www.cve.org/CVERecord?id=CVE-2026-112405
https://nvd.nist.gov/vuln/detail/CVE-2026-112405
https://github.com/python-pillow/Pillow/commit/b6ee66e8b2c2c0932bdf65f963268d9f2927ef86
https://github.com/python-pillow/Pillow/security/advisories/GHSA-cp9v-662q-vvx9
https://access.redhat.com/security/cve/CVE-2026-112406
https://bugzilla.redhat.com/show_bug.cgi?id=2556322
https://www.cve.org/CVERecord?id=CVE-2026-112406
https://nvd.nist.gov/vuln/detail/CVE-2026-112406
https://github.com/python-pillow/Pillow/commit/b3ebf20c694f2f12537a629c30229a1d5a53f777
https://github.com/python-pillow/Pillow/security/advisories/GHSA-f2g6-542v-9j58
https://access.redhat.com/security/cve/CVE-2026-112892
https://bugzilla.redhat.com/show_bug.cgi?id=2559393
https://www.cve.org/CVERecord?id=CVE-2026-112892
https://nvd.nist.gov/vuln/detail/CVE-2026-112892
https://github.com/python-pillow/Pillow/commit/5dcb630b9798efd91929cb873d677aeee6ed0bb3
https://github.com/python-pillow/Pillow/security/advisories/GHSA-gg2r-wvfm-q9rx
https://access.redhat.com/security/cve/CVE-2026-112893
https://bugzilla.redhat.com/show_bug.cgi?id=2555878
https://www.cve.org/CVERecord?id=CVE-2026-112893
https://nvd.nist.gov/vuln/detail/CVE-2026-112893
https://github.com/python-pillow/Pillow/commit/a7416de7f3a43128179d2cf68df3240ea8dafe13
https://github.com/python-pillow/Pillow/security/advisories/GHSA-j4m9-6w36-pw47
https://access.redhat.com/security/cve/CVE-2026-112894
https://bugzilla.redhat.com/show_bug.cgi?id=2555875
https://www.cve.org/CVERecord?id=CVE-2026-112894
https://nvd.nist.gov/vuln/detail/CVE-2026-112894
https://github.com/python-pillow/Pillow/commit/f6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb
https://github.com/python-pillow/Pillow/security/advisories/GHSA-jg86-v3jv-hrpm
https://access.redhat.com/security/cve/CVE-2026-112895
https://bugzilla.redhat.com/show_bug.cgi?id=2555879
https://www.cve.org/CVERecord?id=CVE-2026-112895
https://nvd.nist.gov/vuln/detail/CVE-2026-112895
https://github.com/python-pillow/Pillow/commit/e2ae7eacad6de68c37eb28b633a97bebacf2c5bf
https://github.com/python-pillow/Pillow/security/advisories/GHSA-p4wg-p73j-c528
https://access.redhat.com/security/cve/CVE-2026-112896
https://bugzilla.redhat.com/show_bug.cgi?id=2555890
https://www.cve.org/CVERecord?id=CVE-2026-112896
https://nvd.nist.gov/vuln/detail/CVE-2026-112896
https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742
https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p
https://access.redhat.com/security/cve/CVE-2026-112897
https://bugzilla.redhat.com/show_bug.cgi?id=2555888
https://www.cve.org/CVERecord?id=CVE-2026-112897
https://nvd.nist.gov/vuln/detail/CVE-2026-112897
https://github.com/python-pillow/Pillow/security/advisories/GHSA-q45j-58j2-45rg
https://access.redhat.com/security/cve/CVE-2026-114145
https://bugzilla.redhat.com/show_bug.cgi?id=2558563
https://www.cve.org/CVERecord?id=CVE-2026-114145
https://nvd.nist.gov/vuln/detail/CVE-2026-114145
https://github.com/gitpython-developers/GitPython/commit/97eadb888d2f99567e3113f4e455be4ca128f697
https://github.com/gitpython-developers/GitPython/pull/2264
https://github.com/gitpython-developers/GitPython/releases/tag/3.2.1
https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-83vg-56qc-22m7
Affected packages
Red Hat:satellite:6.19::el9
python3.12-django
Package
Name
python3.12-django
Purl
pkg:rpm/redhat/python3.12-django
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.2.30-3.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
openvox-server
Package
Name
openvox-server
Purl
pkg:rpm/redhat/openvox-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.17.0-1.el9sat
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
yggdrasil-worker-forwarder
Package
Name
yggdrasil-worker-forwarder
Purl
pkg:rpm/redhat/yggdrasil-worker-forwarder
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:0.1.1-1.el9sat
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-gitpython
Package
Name
python3.12-gitpython
Purl
pkg:rpm/redhat/python3.12-gitpython
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.2.1-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
openvox-agent
Package
Name
openvox-agent
Purl
pkg:rpm/redhat/openvox-agent
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.31.1-1.el9sat
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-pillow
Package
Name
python3.12-pillow
Purl
pkg:rpm/redhat/python3.12-pillow
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:13.0.0-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-pillow-debuginfo
Package
Name
python3.12-pillow-debuginfo
Purl
pkg:rpm/redhat/python3.12-pillow-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:13.0.0-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-pillow-debugsource
Package
Name
python3.12-pillow-debugsource
Purl
pkg:rpm/redhat/python3.12-pillow-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:13.0.0-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-urllib3
Package
Name
python3.12-urllib3
Purl
pkg:rpm/redhat/python3.12-urllib3
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.8.0-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-brotli
Package
Name
python3.12-brotli
Purl
pkg:rpm/redhat/python3.12-brotli
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.2.1-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-brotli-debuginfo
Package
Name
python3.12-brotli-debuginfo
Purl
pkg:rpm/redhat/python3.12-brotli-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.2.1-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-brotli-debugsource
Package
Name
python3.12-brotli-debugsource
Purl
pkg:rpm/redhat/python3.12-brotli-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.2.1-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-pulp-ansible
Package
Name
python3.12-pulp-ansible
Purl
pkg:rpm/redhat/python3.12-pulp-ansible
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:0.28.10-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
Red Hat:satellite_capsule:6.19::el9
python3.12-django
Package
Name
python3.12-django
Purl
pkg:rpm/redhat/python3.12-django
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:4.2.30-3.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
openvox-server
Package
Name
openvox-server
Purl
pkg:rpm/redhat/openvox-server
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.17.0-1.el9sat
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-gitpython
Package
Name
python3.12-gitpython
Purl
pkg:rpm/redhat/python3.12-gitpython
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:3.2.1-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
openvox-agent
Package
Name
openvox-agent
Purl
pkg:rpm/redhat/openvox-agent
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:8.31.1-1.el9sat
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-pillow
Package
Name
python3.12-pillow
Purl
pkg:rpm/redhat/python3.12-pillow
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:13.0.0-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-pillow-debuginfo
Package
Name
python3.12-pillow-debuginfo
Purl
pkg:rpm/redhat/python3.12-pillow-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:13.0.0-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-pillow-debugsource
Package
Name
python3.12-pillow-debugsource
Purl
pkg:rpm/redhat/python3.12-pillow-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:13.0.0-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-urllib3
Package
Name
python3.12-urllib3
Purl
pkg:rpm/redhat/python3.12-urllib3
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.8.0-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-brotli
Package
Name
python3.12-brotli
Purl
pkg:rpm/redhat/python3.12-brotli
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.2.1-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-brotli-debuginfo
Package
Name
python3.12-brotli-debuginfo
Purl
pkg:rpm/redhat/python3.12-brotli-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.2.1-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-brotli-debugsource
Package
Name
python3.12-brotli-debugsource
Purl
pkg:rpm/redhat/python3.12-brotli-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.2.1-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
python3.12-pulp-ansible
Package
Name
python3.12-pulp-ansible
Purl
pkg:rpm/redhat/python3.12-pulp-ansible
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
1:0.28.10-1.el9pc
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"
RHSA-2026:92861 - OSV