RHSA-2026:50222: Important: Satellite 6.17.10 Async Update
Important: Satellite 6.17.10 Async Update
Other sources
Red Hat Satellite is a system management solution that allows organizationsto configure and maintain their systems without the necessity to providepublic Internet access to their servers or other client systems. Itperforms provisioning and configuration management of predefined standardoperating environments.Security Fix(es): puppet-agent: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230) rubygem-katello: missing repository authorization in contentuploads exposes cross-product content existence (CVE-2026-12515) puppetserver: HTTP request smuggling via chunked extension quoted-string parsing (CVE-2026-2332) python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526) python-pillow: Pillow: Denial of Service via crafted PCF font data (CVE-2026-54059) python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files (CVE-2026-54060) rubygem-faraday-cookiejar: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) python-pillow: Pillow: Denial of Service via crafted BDF font file (CVE-2026-55379) python-pillow: Pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380) rubygem-nokogiri: Nokogiri: Denial of Service or Information Disclosure via invalid encoding handling (CVE-2026-57236) For more details about the security issue(s), including the impact, a CVSSscore, acknowledgments, and other related information, refer to the CVEpage(s) listed in the References section.Bug Fix(es): API endpoint GET /api/hostpackages/installedpackages in apidoc is wrong (SAT-48096) Unable to save bookmark report under Hosts > All Hosts > Compliance > Reports (SAT-48150) Update of scap-security-guide-satellite package sources (SAT-48147) Switch Satellite 6.17 to OpenVox (SAT-44867) Katello::Errors::Pulp3Error: nextval: reached maximum value of sequence "containerblobmanifestidseq"' during container image sync (SAT-48303)
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/foreman-installerto a version that resolves this vulnerability.Fixed in 3.14.0.11-1.el9 - Upgrade
Upgrade
redhat/openvox-agentto a version that resolves this vulnerability.Fixed in 8.24.1-3.el9 - Upgrade
Upgrade
redhat/openvox-serverto a version that resolves this vulnerability.Fixed in 8.14.1-1.el9 - Upgrade
Upgrade
redhat/python-pillowto a version that resolves this vulnerability.Fixed in 12.3.0-1.el9 - Upgrade
Upgrade
redhat/python-pulp-containerto a version that resolves this vulnerability.Fixed in 2.22.10-1.el9 - Upgrade
Upgrade
redhat/python-pyjwtto a version that resolves this vulnerability.Fixed in 2.13.0-1.el9 - Upgrade
Upgrade
redhat/python-pysequoiato a version that resolves this vulnerability.Fixed in 0.1.33-1.el9 - Upgrade
Upgrade
redhat/rubygem-faradayto a version that resolves this vulnerability.Fixed in 1.10.6-1.el9 - Upgrade
Upgrade
redhat/rubygem-katelloto a version that resolves this vulnerability.Fixed in 4.16.0.18-1.el9 - Upgrade
Upgrade
redhat/rubygem-nokogirito a version that resolves this vulnerability.Fixed in 1.15.7-3.el9 - Upgrade
Upgrade
redhat/satelliteto a version that resolves this vulnerability.Fixed in 6.17.10-1.el9 - Upgrade
Upgrade
redhat/scap-security-guide-satelliteto a version that resolves this vulnerability.Fixed in 1.0.6-1.el9 - Upgrade
Upgrade
redhat/foreman-installer-katelloto a version that resolves this vulnerability.Fixed in 3.14.0.11-1.el9 - Upgrade
Upgrade
redhat/python-pillow-debugsourceto a version that resolves this vulnerability.Fixed in 12.3.0-1.el9 - Upgrade
Upgrade
redhat/python3.11-pillowto a version that resolves this vulnerability.Fixed in 12.3.0-1.el9 - Upgrade
Upgrade
redhat/python3.11-pillow-debuginfoto a version that resolves this vulnerability.Fixed in 12.3.0-1.el9 - Upgrade
Upgrade
redhat/python3.11-pulp-containerto a version that resolves this vulnerability.Fixed in 2.22.10-1.el9 - Upgrade
Upgrade
redhat/python3.11-pyjwtto a version that resolves this vulnerability.Fixed in 2.13.0-1.el9 - Upgrade
Upgrade
redhat/python3.11-pysequoiato a version that resolves this vulnerability.Fixed in 0.1.33-1.el9 - Upgrade
Upgrade
redhat/rubygem-nokogiri-debuginfoto a version that resolves this vulnerability.Fixed in 1.15.7-3.el9 - Upgrade
Upgrade
redhat/rubygem-nokogiri-debugsourceto a version that resolves this vulnerability.Fixed in 1.15.7-3.el9 - Upgrade
Upgrade
redhat/satellite-clito a version that resolves this vulnerability.Fixed in 6.17.10-1.el9 - Upgrade
Upgrade
redhat/satellite-commonto a version that resolves this vulnerability.Fixed in 6.17.10-1.el9 - Upgrade
Upgrade
redhat/satellite-obsolete-packagesto a version that resolves this vulnerability.Fixed in 6.17.10-1.el9 - Upgrade
Upgrade
redhat/satellite-capsuleto a version that resolves this vulnerability.Fixed in 6.17.10-1.el9 - Upgrade
Upgrade
Red Hat Satelliteto a version that resolves this vulnerability.Fixed in 6.17.10 - Upgrade
Upgrade
puppet-agentto a version that resolves this vulnerability.Patch CVE-2025-9230 - Compensating control
Before applying Satellite 6.17.10 Async Update, ensure all previously released errata relevant to your system have been applied.
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:50222?
The severity of RHSA-2026:50222 is classified as high with a score of 7.
How do I fix RHSA-2026:50222?
To fix RHSA-2026:50222, you should update your Red Hat Satellite systems to version 6.17.10.
What systems are affected by RHSA-2026:50222?
RHSA-2026:50222 affects Red Hat Satellite, Red Hat Satellite Capsule, and various associated Red Hat packages.
What are the implications of not addressing RHSA-2026:50222?
Failing to address RHSA-2026:50222 may leave your systems vulnerable to potential exploits due to unpatched security issues.
Is there any recommended action for RHSA-2026:50222?
Yes, it is recommended to apply the updates as soon as possible to mitigate risks associated with RHSA-2026:50222.