RHSA-2026:14874HighCVSS 8.3

Red Hat Security Advisory: Satellite 6.16.8 Async Update

Published
May 7, 2026
Last Modified
August 20, 2026

🔗 CVE IDs covered (5)

CVE-2025-69534 →CVE-2026-25990 →CVE-2026-27459 →CVE-2026-27727 →CVE-2026-33176 →

📋 Description

CVE-2025-69534 — python-markdown: denial of service via malformed HTML-like sequences CVE-2026-25990 — pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image CVE-2026-27459 — pyOpenSSL: DTLS cookie callback buffer overflow CVE-2026-27727 — com.mchange/mchange-commons-java: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects CVE-2026-33176 — Rails: Active Support: Active Support: Denial of Service via large scientific notation strings

🎯 Affected products88

  • Red Hat Satellite 6.16 for RHEL 8
  • Red Hat Satellite 6.16 for RHEL 9
  • candlepin-0:4.4.25-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8
  • candlepin-0:4.4.25-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8
  • candlepin-0:4.4.25-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9
  • candlepin-0:4.4.25-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9
  • candlepin-selinux-0:4.4.25-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8
  • candlepin-selinux-0:4.4.25-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9
  • foreman-0:3.12.0.15-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8
  • foreman-0:3.12.0.15-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8
  • foreman-0:3.12.0.15-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9
  • foreman-0:3.12.0.15-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9
  • foreman-cli-0:3.12.0.15-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8
  • foreman-cli-0:3.12.0.15-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9
  • foreman-debug-0:3.12.0.15-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8
  • foreman-debug-0:3.12.0.15-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9
  • foreman-dynflow-sidekiq-0:3.12.0.15-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8
  • foreman-dynflow-sidekiq-0:3.12.0.15-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9
  • foreman-ec2-0:3.12.0.15-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8
  • foreman-ec2-0:3.12.0.15-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9
  • foreman-installer-1:3.12.0.7-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8
  • foreman-installer-1:3.12.0.7-1.el8sat.src as a component of Red Hat Satellite 6.16 for RHEL 8
  • foreman-installer-1:3.12.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9
  • foreman-installer-1:3.12.0.7-1.el9sat.src as a component of Red Hat Satellite 6.16 for RHEL 9
  • foreman-installer-katello-1:3.12.0.7-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8
  • foreman-installer-katello-1:3.12.0.7-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9
  • foreman-journald-0:3.12.0.15-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8
  • foreman-journald-0:3.12.0.15-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9
  • foreman-libvirt-0:3.12.0.15-1.el8sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 8
  • foreman-libvirt-0:3.12.0.15-1.el9sat.noarch as a component of Red Hat Satellite 6.16 for RHEL 9
  • +58 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_satellite/6.16/html/updating_red_hat_satellite/index Workaround: To mitigate this vulnerability, wrap your markdown parsing function in a try/except block. This catches the unhandled exception, preventing both the application crash and the stack trace leak. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this flaw, ensure the callback provided to the set_cookie_generate_callback function strictly limits the returned cookie string or byte sequence to under 256 bytes. Workaround: To mitigate this issue, applications that use Active Support number helpers to process untrusted input should implement strict input validation. This involves sanitizing or restricting the format and length of numerical strings before they are passed to Active Support, thereby preventing the `BigDecimal` component from expanding into extremely large decimal representations and consuming excessive resources.

🔗 References (16)