RHSA-2026:68775HighCVSS 7.5

Red Hat Security Advisory: General availability of the satellite/iop-insights-engine-rhel9 container image

Published
September 17, 2026
Last Modified
September 22, 2026

🔗 CVE IDs covered (2)

📋 Description

CVE-2026-69243 — aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade CVE-2026-69244 — aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses

🎯 Affected products2

  • Red Hat Satellite 6.19
  • registry.redhat.io/satellite/iop-insights-engine-rhel9@sha256:f4e63f9ab72ffacc5fbb4483d8f8be8f5d87bcbb8ae5f4a479d266a3f6f188cd_amd64 as a component of Red Hat Satellite 6.19

✅ Remediation

For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (9)