RHSA-2026:95656
- Source
- https://access.redhat.com/errata/RHSA-2026:95656
- Import Source
- https://security.access.redhat.com/data/osv/RHSA-2026:95656.json
- JSON Data
- https://api.osv.dev/v1/vulns/RHSA-2026:95656
- Upstream
CVE (41)
- CVE-2026-104895
- CVE-2026-110264
- CVE-2026-110856
- CVE-2026-110857
- CVE-2026-110858
- CVE-2026-110859
- CVE-2026-111497
- CVE-2026-112390
- CVE-2026-112391
- CVE-2026-112392
- CVE-2026-112393
- CVE-2026-112397
- CVE-2026-112398
- CVE-2026-112399
- CVE-2026-112400
- CVE-2026-112402
- CVE-2026-112403
- CVE-2026-112404
- CVE-2026-112405
- CVE-2026-112406
- CVE-2026-112892
- CVE-2026-112893
- CVE-2026-112894
- CVE-2026-112895
- CVE-2026-112896
- CVE-2026-112897
- CVE-2026-114145
- CVE-2026-115731
- CVE-2026-115732
- CVE-2026-15307
- CVE-2026-73619
- CVE-2026-78677
- CVE-2026-87819
- CVE-2026-89078
- CVE-2026-93577
- CVE-2026-96640
- CVE-2026-96643
- CVE-2026-96778
- CVE-2026-97229
- CVE-2026-97687
- CVE-2026-97689
- Withdrawn
- 2026-11-14T13:00:41Z
- Published
- 2026-11-13T18:50:00Z
- Modified
- 2026-11-14T13:00:41Z
- Severity
-
- 9.9 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- Red Hat Security Advisory: Satellite 6.17 security update
- Details
- References
-
- https://access.redhat.com/errata/RHSA-2026:95656
- https://access.redhat.com/security/updates/classification/#critical
- https://bugzilla.redhat.com/show_bug.cgi?id=2511095
- https://bugzilla.redhat.com/show_bug.cgi?id=2515265
- https://bugzilla.redhat.com/show_bug.cgi?id=2523215
- https://bugzilla.redhat.com/show_bug.cgi?id=2530742
- https://bugzilla.redhat.com/show_bug.cgi?id=2539836
- https://bugzilla.redhat.com/show_bug.cgi?id=2539842
- https://bugzilla.redhat.com/show_bug.cgi?id=2543245
- https://bugzilla.redhat.com/show_bug.cgi?id=2543255
- https://bugzilla.redhat.com/show_bug.cgi?id=2550153
- https://bugzilla.redhat.com/show_bug.cgi?id=2552959
- https://bugzilla.redhat.com/show_bug.cgi?id=2552966
- https://bugzilla.redhat.com/show_bug.cgi?id=2552977
- https://bugzilla.redhat.com/show_bug.cgi?id=2552989
- https://bugzilla.redhat.com/show_bug.cgi?id=2555846
- https://bugzilla.redhat.com/show_bug.cgi?id=2555848
- https://bugzilla.redhat.com/show_bug.cgi?id=2555851
- https://bugzilla.redhat.com/show_bug.cgi?id=2555859
- https://bugzilla.redhat.com/show_bug.cgi?id=2555863
- https://bugzilla.redhat.com/show_bug.cgi?id=2555864
- https://bugzilla.redhat.com/show_bug.cgi?id=2555866
- https://bugzilla.redhat.com/show_bug.cgi?id=2555867
- https://bugzilla.redhat.com/show_bug.cgi?id=2555868
- https://bugzilla.redhat.com/show_bug.cgi?id=2555871
- https://bugzilla.redhat.com/show_bug.cgi?id=2555873
- https://bugzilla.redhat.com/show_bug.cgi?id=2555874
- https://bugzilla.redhat.com/show_bug.cgi?id=2555875
- https://bugzilla.redhat.com/show_bug.cgi?id=2555878
- https://bugzilla.redhat.com/show_bug.cgi?id=2555879
- https://bugzilla.redhat.com/show_bug.cgi?id=2555888
- https://bugzilla.redhat.com/show_bug.cgi?id=2555890
- https://bugzilla.redhat.com/show_bug.cgi?id=2556322
- https://bugzilla.redhat.com/show_bug.cgi?id=2558563
- https://bugzilla.redhat.com/show_bug.cgi?id=2558566
- https://bugzilla.redhat.com/show_bug.cgi?id=2558567
- https://bugzilla.redhat.com/show_bug.cgi?id=2558576
- https://bugzilla.redhat.com/show_bug.cgi?id=2558632
- https://bugzilla.redhat.com/show_bug.cgi?id=2558973
- https://bugzilla.redhat.com/show_bug.cgi?id=2559393
- https://bugzilla.redhat.com/show_bug.cgi?id=2562517
- https://bugzilla.redhat.com/show_bug.cgi?id=2566291
- https://bugzilla.redhat.com/show_bug.cgi?id=2566451
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95656.json
- https://access.redhat.com/security/cve/CVE-2026-15307
- https://www.cve.org/CVERecord?id=CVE-2026-15307
- https://nvd.nist.gov/vuln/detail/CVE-2026-15307
- https://docs.djangoproject.com/en/dev/releases/security/
- https://github.com/django/django/commit/115ffd0463a765ab1cc93de18e94b5459b8a300e
- https://github.com/django/django/commit/208f80cb682868b584ed0a78f23e4ba6304212aa
- https://github.com/django/django/commit/39b3e2d0c743a338def6c473086ebc06865e86b6
- https://github.com/django/django/commit/f1949c1f9758947ade984c895ff16bef46f56520
- https://groups.google.com/g/django-announce
- https://www.djangoproject.com/weblog/2026/aug/04/security-releases/
- https://access.redhat.com/security/cve/CVE-2026-73619
- https://www.cve.org/CVERecord?id=CVE-2026-73619
- https://nvd.nist.gov/vuln/detail/CVE-2026-73619
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-539m-9xh6-q6rr
- https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-read-via-repo-archive
- https://access.redhat.com/security/cve/CVE-2026-78677
- https://www.cve.org/CVERecord?id=CVE-2026-78677
- https://nvd.nist.gov/vuln/detail/CVE-2026-78677
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-8mcc-hrx5-hvxc
- https://www.vulncheck.com/advisories/gitpython-before-path-traversal-via-separate-git-dir
- https://access.redhat.com/security/cve/CVE-2026-87819
- https://www.cve.org/CVERecord?id=CVE-2026-87819
- https://nvd.nist.gov/vuln/detail/CVE-2026-87819
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-g5vv-9gxw-82hx
- https://www.vulncheck.com/advisories/gitpython-before-3.1.60-denial-of-service-via-redos
- https://access.redhat.com/security/cve/CVE-2026-89078
- https://www.cve.org/CVERecord?id=CVE-2026-89078
- https://nvd.nist.gov/vuln/detail/CVE-2026-89078
- https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/
- https://gitlab.com/gitlab-org/gitlab/-/work_items/628577
- https://hackerone.com/reports/4019059
- https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/
- https://access.redhat.com/security/cve/CVE-2026-93577
- https://www.cve.org/CVERecord?id=CVE-2026-93577
- https://nvd.nist.gov/vuln/detail/CVE-2026-93577
- https://gitlab.com/gitlab-org/gitlab/-/work_items/629758
- https://hackerone.com/reports/3995696
- https://access.redhat.com/security/cve/CVE-2026-96640
- https://www.cve.org/CVERecord?id=CVE-2026-96640
- https://nvd.nist.gov/vuln/detail/CVE-2026-96640
- https://github.com/python-pillow/Pillow/commit/6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7
- https://github.com/python-pillow/Pillow/pull/10093
- https://github.com/python-pillow/Pillow/releases/tag/13.0.0
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-mrfp-p49p-3hf2
- https://access.redhat.com/security/cve/CVE-2026-96643
- https://www.cve.org/CVERecord?id=CVE-2026-96643
- https://nvd.nist.gov/vuln/detail/CVE-2026-96643
- https://github.com/python-pillow/Pillow/commit/806e38381c781f32bbd22f4cd026678acd40fd6c
- https://github.com/python-pillow/Pillow/pull/10073
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-g4qv-2jxx-769h
- https://access.redhat.com/security/cve/CVE-2026-96778
- https://www.cve.org/CVERecord?id=CVE-2026-96778
- https://nvd.nist.gov/vuln/detail/CVE-2026-96778
- https://github.com/python-pillow/Pillow/commit/02561b8dc6117d5670d4b469fecdd02c70854f9b
- https://github.com/python-pillow/Pillow/pull/10124
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-g7cr-3p24-7wf7
- https://access.redhat.com/security/cve/CVE-2026-97229
- https://www.cve.org/CVERecord?id=CVE-2026-97229
- https://nvd.nist.gov/vuln/detail/CVE-2026-97229
- https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/
- https://gitlab.com/gitlab-org/gitlab/-/work_items/630686
- https://hackerone.com/reports/4055749
- https://hackerone.com/reports/4058589
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://access.redhat.com/security/cve/CVE-2026-97687
- https://www.cve.org/CVERecord?id=CVE-2026-97687
- https://nvd.nist.gov/vuln/detail/CVE-2026-97687
- https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465
- https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3
- https://github.com/urllib3/urllib3/pull/5093
- https://github.com/urllib3/urllib3/releases/tag/2.8.0
- https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77
- https://access.redhat.com/security/cve/CVE-2026-97689
- https://www.cve.org/CVERecord?id=CVE-2026-97689
- https://nvd.nist.gov/vuln/detail/CVE-2026-97689
- https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed
- https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw
- https://access.redhat.com/security/cve/CVE-2026-104895
- https://www.cve.org/CVERecord?id=CVE-2026-104895
- https://nvd.nist.gov/vuln/detail/CVE-2026-104895
- https://github.com/FasterXML/jackson-dataformats-binary/security/advisories/GHSA-h3c2-2m49-r49w
- https://access.redhat.com/security/cve/CVE-2026-110264
- https://www.cve.org/CVERecord?id=CVE-2026-110264
- https://nvd.nist.gov/vuln/detail/CVE-2026-110264
- https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
- https://gitlab.com/gitlab-org/gitlab/-/work_items/633633
- https://hackerone.com/reports/4093475
- https://access.redhat.com/security/cve/CVE-2026-110856
- https://www.cve.org/CVERecord?id=CVE-2026-110856
- https://nvd.nist.gov/vuln/detail/CVE-2026-110856
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7
- https://www.vulncheck.com/advisories/gitpython-before-3.2.0-redos-via-re-actor-epoch-in-parse-actor-and-date
- https://access.redhat.com/security/cve/CVE-2026-110857
- https://www.cve.org/CVERecord?id=CVE-2026-110857
- https://nvd.nist.gov/vuln/detail/CVE-2026-110857
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw
- https://www.vulncheck.com/advisories/gitpython-before-3.2.0-command-execution-via-ls-remote-ext-urls
- https://access.redhat.com/security/cve/CVE-2026-110858
- https://www.cve.org/CVERecord?id=CVE-2026-110858
- https://nvd.nist.gov/vuln/detail/CVE-2026-110858
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239
- https://www.vulncheck.com/advisories/gitpython-3.1.30-before-3.2.0-command-injection-via-remote-pull-refspec
- https://access.redhat.com/security/cve/CVE-2026-110859
- https://www.cve.org/CVERecord?id=CVE-2026-110859
- https://nvd.nist.gov/vuln/detail/CVE-2026-110859
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2
- https://www.vulncheck.com/advisories/gitpython-before-3.2.0-arbitrary-file-read-via-head-checkout-branch-name
- https://access.redhat.com/security/cve/CVE-2026-111497
- https://access.redhat.com/security/vulnerabilities/RHSB-2026-015
- https://www.cve.org/CVERecord?id=CVE-2026-111497
- https://nvd.nist.gov/vuln/detail/CVE-2026-111497
- https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high
- https://access.redhat.com/security/cve/CVE-2026-112390
- https://www.cve.org/CVERecord?id=CVE-2026-112390
- https://nvd.nist.gov/vuln/detail/CVE-2026-112390
- https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9
- https://access.redhat.com/security/cve/CVE-2026-112391
- https://www.cve.org/CVERecord?id=CVE-2026-112391
- https://nvd.nist.gov/vuln/detail/CVE-2026-112391
- https://github.com/python-pillow/Pillow/commit/94cb11c44ff7345414da17ebfea1598a529ad9cd
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-254f-3936-288h
- https://access.redhat.com/security/cve/CVE-2026-112392
- https://www.cve.org/CVERecord?id=CVE-2026-112392
- https://nvd.nist.gov/vuln/detail/CVE-2026-112392
- https://github.com/python-pillow/Pillow/commit/443e3130a8c11594fd0e296afad497e11e678961
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-27h8-gf7j-v5hc
- https://access.redhat.com/security/cve/CVE-2026-112393
- https://www.cve.org/CVERecord?id=CVE-2026-112393
- https://nvd.nist.gov/vuln/detail/CVE-2026-112393
- https://github.com/python-pillow/Pillow/commit/11582e5ffbdceb973d5ee593f3105af5a9852b40
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf
- https://access.redhat.com/security/cve/CVE-2026-112397
- https://www.cve.org/CVERecord?id=CVE-2026-112397
- https://nvd.nist.gov/vuln/detail/CVE-2026-112397
- https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8
- https://access.redhat.com/security/cve/CVE-2026-112398
- https://www.cve.org/CVERecord?id=CVE-2026-112398
- https://nvd.nist.gov/vuln/detail/CVE-2026-112398
- https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h
- https://access.redhat.com/security/cve/CVE-2026-112399
- https://www.cve.org/CVERecord?id=CVE-2026-112399
- https://nvd.nist.gov/vuln/detail/CVE-2026-112399
- https://github.com/python-pillow/Pillow/commit/f1acfc54c53502948d0d14121872061df931db48
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xm2-6676-qcp9
- https://access.redhat.com/security/cve/CVE-2026-112400
- https://www.cve.org/CVERecord?id=CVE-2026-112400
- https://nvd.nist.gov/vuln/detail/CVE-2026-112400
- https://github.com/python-pillow/Pillow/commit/6faed707cfb760a4cbd726ddc8406f576cf35bf7
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-65qm-jvmh-6pqg
- https://access.redhat.com/security/cve/CVE-2026-112402
- https://www.cve.org/CVERecord?id=CVE-2026-112402
- https://nvd.nist.gov/vuln/detail/CVE-2026-112402
- https://github.com/python-pillow/Pillow/commit/aafa6c75f7cdabb9f409a8aac7c780bea31d08d9
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-7mwm-ghpf-9vrm
- https://access.redhat.com/security/cve/CVE-2026-112403
- https://www.cve.org/CVERecord?id=CVE-2026-112403
- https://nvd.nist.gov/vuln/detail/CVE-2026-112403
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-8g5g-8vmr-9782
- https://access.redhat.com/security/cve/CVE-2026-112404
- https://www.cve.org/CVERecord?id=CVE-2026-112404
- https://nvd.nist.gov/vuln/detail/CVE-2026-112404
- https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-c6hw-5grf-ff96
- https://access.redhat.com/security/cve/CVE-2026-112405
- https://www.cve.org/CVERecord?id=CVE-2026-112405
- https://nvd.nist.gov/vuln/detail/CVE-2026-112405
- https://github.com/python-pillow/Pillow/commit/b6ee66e8b2c2c0932bdf65f963268d9f2927ef86
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-cp9v-662q-vvx9
- https://access.redhat.com/security/cve/CVE-2026-112406
- https://www.cve.org/CVERecord?id=CVE-2026-112406
- https://nvd.nist.gov/vuln/detail/CVE-2026-112406
- https://github.com/python-pillow/Pillow/commit/b3ebf20c694f2f12537a629c30229a1d5a53f777
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-f2g6-542v-9j58
- https://access.redhat.com/security/cve/CVE-2026-112892
- https://www.cve.org/CVERecord?id=CVE-2026-112892
- https://nvd.nist.gov/vuln/detail/CVE-2026-112892
- https://github.com/python-pillow/Pillow/commit/5dcb630b9798efd91929cb873d677aeee6ed0bb3
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-gg2r-wvfm-q9rx
- https://access.redhat.com/security/cve/CVE-2026-112893
- https://www.cve.org/CVERecord?id=CVE-2026-112893
- https://nvd.nist.gov/vuln/detail/CVE-2026-112893
- https://github.com/python-pillow/Pillow/commit/a7416de7f3a43128179d2cf68df3240ea8dafe13
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-j4m9-6w36-pw47
- https://access.redhat.com/security/cve/CVE-2026-112894
- https://www.cve.org/CVERecord?id=CVE-2026-112894
- https://nvd.nist.gov/vuln/detail/CVE-2026-112894
- https://github.com/python-pillow/Pillow/commit/f6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-jg86-v3jv-hrpm
- https://access.redhat.com/security/cve/CVE-2026-112895
- https://www.cve.org/CVERecord?id=CVE-2026-112895
- https://nvd.nist.gov/vuln/detail/CVE-2026-112895
- https://github.com/python-pillow/Pillow/commit/e2ae7eacad6de68c37eb28b633a97bebacf2c5bf
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-p4wg-p73j-c528
- https://access.redhat.com/security/cve/CVE-2026-112896
- https://www.cve.org/CVERecord?id=CVE-2026-112896
- https://nvd.nist.gov/vuln/detail/CVE-2026-112896
- https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p
- https://access.redhat.com/security/cve/CVE-2026-112897
- https://www.cve.org/CVERecord?id=CVE-2026-112897
- https://nvd.nist.gov/vuln/detail/CVE-2026-112897
- https://github.com/python-pillow/Pillow/security/advisories/GHSA-q45j-58j2-45rg
- https://access.redhat.com/security/cve/CVE-2026-114145
- https://www.cve.org/CVERecord?id=CVE-2026-114145
- https://nvd.nist.gov/vuln/detail/CVE-2026-114145
- https://github.com/gitpython-developers/GitPython/commit/97eadb888d2f99567e3113f4e455be4ca128f697
- https://github.com/gitpython-developers/GitPython/pull/2264
- https://github.com/gitpython-developers/GitPython/releases/tag/3.2.1
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-83vg-56qc-22m7
- https://access.redhat.com/security/cve/CVE-2026-115731
- https://www.cve.org/CVERecord?id=CVE-2026-115731
- https://nvd.nist.gov/vuln/detail/CVE-2026-115731
- https://github.com/OpenVoxProject/openvox/security/advisories/GHSA-ffr6-rwpm-p5wq
- https://portal.perforce.com/s/cve/a91Qi000003IaHpIAK/report-deserialization-code-execution
- https://voxpupuli.org/blog/2026/11/03/critical-cve-updates/
- https://www.openwall.com/lists/oss-security/2026/11/03/14
- https://access.redhat.com/security/cve/CVE-2026-115732
- https://www.cve.org/CVERecord?id=CVE-2026-115732
- https://nvd.nist.gov/vuln/detail/CVE-2026-115732
- https://github.com/OpenVoxProject/trapperkeeper-authorization/security/advisories/GHSA-q4hm-33rc-572g
- https://portal.perforce.com/s/cve/a91Qi000003IaJRIA0/certificate-name-authorization-bypass