RHSA-2026:5968HighCVSS 8.3

Red Hat Security Advisory: Satellite 6.18.4 Async Update

Published
March 26, 2026
Last Modified
August 30, 2026

🔗 CVE IDs covered (7)

CVE-2026-1961 →CVE-2026-4324 →CVE-2025-61726 →CVE-2025-61729 →CVE-2025-68121 →CVE-2026-0980 →CVE-2026-1531 →

📋 Description

CVE-2025-61726 — golang: net/url: Memory exhaustion in query parameter parsing in net/url CVE-2025-61729 — crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-68121 — crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption CVE-2026-0980 — rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username CVE-2026-1531 — foreman-kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification CVE-2026-1961 — forman: Foreman: Remote Code Execution via command injection in WebSocket proxy CVE-2026-4324 — rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection

🎯 Affected products43

  • Red Hat Satellite 6.18 for RHEL 9
  • foreman-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-0:3.16.0.12-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-cli-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-debug-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-dynflow-sidekiq-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-ec2-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-installer-1:3.16.0.6-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-installer-1:3.16.0.6-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-installer-katello-1:3.16.0.6-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-journald-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-libvirt-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-openstack-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-pcp-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-postgresql-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-redis-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-service-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-telemetry-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • foreman-vmware-0:3.16.0.12-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • python3.12-django-0:4.2.29-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • python3.12-django-0:4.2.29-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9
  • python3.12-pulp-container-0:2.24.5-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • python3.12-pulp-container-0:2.24.5-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9
  • python3.12-pulp-rpm-0:3.29.9-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • python3.12-pulp-rpm-0:3.29.9-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9
  • python3.12-pulpcore-0:3.73.26-1.el9pc.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • python3.12-pulpcore-0:3.73.26-1.el9pc.src as a component of Red Hat Satellite 6.18 for RHEL 9
  • rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • rubygem-foreman_kubevirt-0:0.4.3-1.el9sat.src as a component of Red Hat Satellite 6.18 for RHEL 9
  • rubygem-foreman_rh_cloud-0:12.2.17-1.el9sat.noarch as a component of Red Hat Satellite 6.18 for RHEL 9
  • +13 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index Workaround: Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this issue, ensure that a Certificate Authority (CA) certificate is explicitly configured when setting up the connection to OpenShift in foreman_kubevirt. This will enable SSL verification and prevent Man-in-the-Middle attacks. Refer to the foreman_kubevirt documentation for specific instructions on configuring CA certificates. A restart or service reload may be required for the changes to take effect. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (18)