RHSA-2026:95655: Critical: Satellite 6.16 EUS security update

Published Nov 5, 2026
·
Updated

Critical: Satellite 6.16 EUS security update

Other sources

This advisory provides security fixes for affected packages used by Red Hat Satellite. The updates address the vulnerabilities described below.Security Fix(es): python-django: Django: Remote code execution via GeoDjango spatial lookups (CVE-2026-15307) python-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689) python-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687) python-gitpython: GitPython: Arbitrary code execution via unsafe URL protocol handling (CVE-2026-110857) python-gitpython: GitPython: Arbitrary file read via argument injection in branch checkout (CVE-2026-110859) python-gitpython: GitPython: Denial of Service via regular expression backtracking in date parsing (CVE-2026-110856) python-gitpython: GitPython: Arbitrary file read vulnerability via Repo.archive() (CVE-2026-73619) satellite-capsule:el8/python-gitpython: GitPython: Arbitrary file read vulnerability via Repo.archive() (CVE-2026-73619) python-pillow: Pillow: Denial of Service via unbounded recursion in PDF parser (CVE-2026-112391) python-pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing (CVE-2026-112390) python-pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() (CVE-2026-112405) python-pillow: pillow: Denial of service via crafted APNG image (CVE-2026-112399) python-pillow: pillow: Denial of Service via zero-size images in rank filters (CVE-2026-112392) python-pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images (CVE-2026-112397) python-pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image (CVE-2026-112400) python-pillow: pillow: Denial of Service via crafted multi-frame image conversion (CVE-2026-112894) python-pillow: pillow: Denial of service via crafted PDF during append operations (CVE-2026-112895) python-pillow: pillow: Denial of service via double free during image transformation (CVE-2026-112402) python-pillow: Pillow: Denial of Service via invalid pointer free during font rendering (CVE-2026-112893) python-pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding (CVE-2026-112897) python-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder (CVE-2026-112896) python-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding (CVE-2026-112404) python-gitpython: GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec (CVE-2026-110858) python-pillow: pillow: Denial of Service via infinite loop during PDF page rewriting (CVE-2026-112406) python-pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow (CVE-2026-96778) python-gitpython: GitPython: arbitrary code execution via improper submodule path validation (CVE-2026-114145) python-pillow: pillow: Denial of Service via duplicate page references in PDF files (CVE-2026-96640) python-pillow: pillow: Denial of Service via repeated EXIF headers (CVE-2026-96643) python-brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497) python-pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder (CVE-2026-112892) python-pillow: Pillow: Heap buffer overflow in tiffWriteProc when saving TIFF to BytesIO (CVE-2026-112393) python-pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution (CVE-2026-112398) python-pillow: Pillow: Heap buffer overflow in ImagingJpegDecode (CVE-2026-112403) openvox-server: puppetserver: authenticated remote code execution via report event deserialization (CVE-2026-115731) puppetserver: puppetserver: authenticated remote code execution via report event deserialization (CVE-2026-115731) openvox-server: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname ACL match (CVE-2026-115732) puppetserver: trapperkeeper-authorization: certificate name authorization bypass via flawed hostname ACL match (CVE-2026-115732) openvox-agent: integer overflow issue in regular expression compiler (CVE-2026-110264) openvox-agent: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229) openvox-agent: integer overflow issue in regular expression compiler (CVE-2026-93577) openvox-agent: double free issue in regular expression parser (CVE-2026-89078) openvox-server: jackson-dataformat-smile: Denial of Service via unbounded memory allocation in asynchronous parser (CVE-2026-104895)

— Red Hat

Affected Software

46 affected componentsFixes available
Red Hat Red Hat Satellite Capsule Extended Update Support
Red Hat Red Hat Satellite Extended Update Support
redhat/openvox-agent<8.32.0-1.el9
8.32.0-1.el9
redhat/openvox-server<8.18.0-1.el9
8.18.0-1.el9
redhat/python-brotli<1.2.1-1.el9
1.2.1-1.el9
redhat/python-django<4.2.30-2.el9
4.2.30-2.el9
redhat/python-galaxy-importer<0.4.44-1.el9
0.4.44-1.el9
redhat/python-gitpython<3.2.1-1.el9
3.2.1-1.el9
redhat/python-nh3<0.3.0-2.el9
0.3.0-2.el9
redhat/python-pillow<13.0.0-1.el9
13.0.0-1.el9
redhat/python-pulp-ansible<0.21.19-2.el9
0.21.19-2.el9
redhat/python-urllib3<2.8.0-1.el9
2.8.0-1.el9
redhat/python3.11-brotli<1.2.1-1.el9
1.2.1-1.el9
redhat/python3.11-django<4.2.30-2.el9
4.2.30-2.el9
redhat/python3.11-galaxy-importer<0.4.44-1.el9
0.4.44-1.el9
redhat/python3.11-gitpython<3.2.1-1.el9
3.2.1-1.el9
redhat/python3.11-nh3<0.3.0-2.el9
0.3.0-2.el9
redhat/python3.11-pillow<13.0.0-1.el9
13.0.0-1.el9
redhat/python3.11-pulp-ansible<0.21.19-2.el9
0.21.19-2.el9
redhat/python3.11-urllib3<2.8.0-1.el9
2.8.0-1.el9
redhat/openvox-agent<8.32.0-1.el8
8.32.0-1.el8
redhat/openvox-server<8.18.0-1.el8
8.18.0-1.el8
redhat/python-brotli<1.2.1-1.el8
1.2.1-1.el8
redhat/python-django<4.2.30-2.el8
4.2.30-2.el8
redhat/python-galaxy-importer<0.4.44-1.el8
0.4.44-1.el8
redhat/python-gitpython<3.2.1-1.el8
3.2.1-1.el8
redhat/python-nh3<0.3.0-2.el8
0.3.0-2.el8
redhat/python-pillow<13.0.0-1.el8
13.0.0-1.el8
redhat/python-pulp-ansible<0.21.19-2.el8
0.21.19-2.el8
redhat/python-urllib3<2.8.0-1.el8
2.8.0-1.el8
redhat/python3.11-brotli<1.2.1-1.el8
1.2.1-1.el8
redhat/python3.11-django<4.2.30-2.el8
4.2.30-2.el8
redhat/python3.11-galaxy-importer<0.4.44-1.el8
0.4.44-1.el8
redhat/python3.11-gitpython<3.2.1-1.el8
3.2.1-1.el8
redhat/python3.11-nh3<0.3.0-2.el8
0.3.0-2.el8
redhat/python3.11-pillow<13.0.0-1.el8
13.0.0-1.el8
redhat/python3.11-pulp-ansible<0.21.19-2.el8
0.21.19-2.el8
redhat/python3.11-urllib3<2.8.0-1.el8
2.8.0-1.el8
redhat/python-brotli-debugsource<1.2.1-1.el9
1.2.1-1.el9
redhat/python-pillow-debugsource<13.0.0-1.el9
13.0.0-1.el9
redhat/python3.11-brotli-debuginfo<1.2.1-1.el9
1.2.1-1.el9
redhat/python3.11-pillow-debuginfo<13.0.0-1.el9
13.0.0-1.el9
redhat/python-brotli-debugsource<1.2.1-1.el8
1.2.1-1.el8
redhat/python-pillow-debugsource<13.0.0-1.el8
13.0.0-1.el8
redhat/python3.11-brotli-debuginfo<1.2.1-1.el8
1.2.1-1.el8
redhat/python3.11-pillow-debuginfo<13.0.0-1.el8
13.0.0-1.el8

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/openvox-agent to a version that resolves this vulnerability.

    Fixed in 8.32.0-1.el9
  2. Upgrade

    Upgrade redhat/openvox-server to a version that resolves this vulnerability.

    Fixed in 8.18.0-1.el9
  3. Upgrade

    Upgrade redhat/python-brotli to a version that resolves this vulnerability.

    Fixed in 1.2.1-1.el9
  4. Upgrade

    Upgrade redhat/python-django to a version that resolves this vulnerability.

    Fixed in 4.2.30-2.el9
  5. Upgrade

    Upgrade redhat/python-galaxy-importer to a version that resolves this vulnerability.

    Fixed in 0.4.44-1.el9
  6. Upgrade

    Upgrade redhat/python-gitpython to a version that resolves this vulnerability.

    Fixed in 3.2.1-1.el9
  7. Upgrade

    Upgrade redhat/python-nh3 to a version that resolves this vulnerability.

    Fixed in 0.3.0-2.el9
  8. Upgrade

    Upgrade redhat/python-pillow to a version that resolves this vulnerability.

    Fixed in 13.0.0-1.el9
  9. Upgrade

    Upgrade redhat/python-pulp-ansible to a version that resolves this vulnerability.

    Fixed in 0.21.19-2.el9
  10. Upgrade

    Upgrade redhat/python-urllib3 to a version that resolves this vulnerability.

    Fixed in 2.8.0-1.el9
  11. Upgrade

    Upgrade redhat/python3.11-brotli to a version that resolves this vulnerability.

    Fixed in 1.2.1-1.el9
  12. Upgrade

    Upgrade redhat/python3.11-django to a version that resolves this vulnerability.

    Fixed in 4.2.30-2.el9
  13. Upgrade

    Upgrade redhat/python3.11-galaxy-importer to a version that resolves this vulnerability.

    Fixed in 0.4.44-1.el9
  14. Upgrade

    Upgrade redhat/python3.11-gitpython to a version that resolves this vulnerability.

    Fixed in 3.2.1-1.el9
  15. Upgrade

    Upgrade redhat/python3.11-nh3 to a version that resolves this vulnerability.

    Fixed in 0.3.0-2.el9
  16. Upgrade

    Upgrade redhat/python3.11-pillow to a version that resolves this vulnerability.

    Fixed in 13.0.0-1.el9
  17. Upgrade

    Upgrade redhat/python3.11-pulp-ansible to a version that resolves this vulnerability.

    Fixed in 0.21.19-2.el9
  18. Upgrade

    Upgrade redhat/python3.11-urllib3 to a version that resolves this vulnerability.

    Fixed in 2.8.0-1.el9
  19. Upgrade

    Upgrade redhat/openvox-agent to a version that resolves this vulnerability.

    Fixed in 8.32.0-1.el8
  20. Upgrade

    Upgrade redhat/openvox-server to a version that resolves this vulnerability.

    Fixed in 8.18.0-1.el8
  21. Upgrade

    Upgrade redhat/python-brotli to a version that resolves this vulnerability.

    Fixed in 1.2.1-1.el8
  22. Upgrade

    Upgrade redhat/python-django to a version that resolves this vulnerability.

    Fixed in 4.2.30-2.el8
  23. Upgrade

    Upgrade redhat/python-galaxy-importer to a version that resolves this vulnerability.

    Fixed in 0.4.44-1.el8
  24. Upgrade

    Upgrade redhat/python-gitpython to a version that resolves this vulnerability.

    Fixed in 3.2.1-1.el8
  25. Upgrade

    Upgrade redhat/python-nh3 to a version that resolves this vulnerability.

    Fixed in 0.3.0-2.el8
  26. Upgrade

    Upgrade redhat/python-pillow to a version that resolves this vulnerability.

    Fixed in 13.0.0-1.el8
  27. Upgrade

    Upgrade redhat/python-pulp-ansible to a version that resolves this vulnerability.

    Fixed in 0.21.19-2.el8
  28. Upgrade

    Upgrade redhat/python-urllib3 to a version that resolves this vulnerability.

    Fixed in 2.8.0-1.el8
  29. Upgrade

    Upgrade redhat/python3.11-brotli to a version that resolves this vulnerability.

    Fixed in 1.2.1-1.el8
  30. Upgrade

    Upgrade redhat/python3.11-django to a version that resolves this vulnerability.

    Fixed in 4.2.30-2.el8
  31. Upgrade

    Upgrade redhat/python3.11-galaxy-importer to a version that resolves this vulnerability.

    Fixed in 0.4.44-1.el8
  32. Upgrade

    Upgrade redhat/python3.11-gitpython to a version that resolves this vulnerability.

    Fixed in 3.2.1-1.el8
  33. Upgrade

    Upgrade redhat/python3.11-nh3 to a version that resolves this vulnerability.

    Fixed in 0.3.0-2.el8
  34. Upgrade

    Upgrade redhat/python3.11-pillow to a version that resolves this vulnerability.

    Fixed in 13.0.0-1.el8
  35. Upgrade

    Upgrade redhat/python3.11-pulp-ansible to a version that resolves this vulnerability.

    Fixed in 0.21.19-2.el8
  36. Upgrade

    Upgrade redhat/python3.11-urllib3 to a version that resolves this vulnerability.

    Fixed in 2.8.0-1.el8
  37. Upgrade

    Upgrade redhat/python-brotli-debugsource to a version that resolves this vulnerability.

    Fixed in 1.2.1-1.el9
  38. Upgrade

    Upgrade redhat/python-pillow-debugsource to a version that resolves this vulnerability.

    Fixed in 13.0.0-1.el9
  39. Upgrade

    Upgrade redhat/python3.11-brotli-debuginfo to a version that resolves this vulnerability.

    Fixed in 1.2.1-1.el9
  40. Upgrade

    Upgrade redhat/python3.11-pillow-debuginfo to a version that resolves this vulnerability.

    Fixed in 13.0.0-1.el9
  41. Upgrade

    Upgrade redhat/python-brotli-debugsource to a version that resolves this vulnerability.

    Fixed in 1.2.1-1.el8
  42. Upgrade

    Upgrade redhat/python-pillow-debugsource to a version that resolves this vulnerability.

    Fixed in 13.0.0-1.el8
  43. Upgrade

    Upgrade redhat/python3.11-brotli-debuginfo to a version that resolves this vulnerability.

    Fixed in 1.2.1-1.el8
  44. Upgrade

    Upgrade redhat/python3.11-pillow-debuginfo to a version that resolves this vulnerability.

    Fixed in 13.0.0-1.el8
  45. Configuration

    Set Administer - Settings - Provisioning - Installation token lifetime to zero to allow Bootdisk use after applying the errata.

    Red Hat Satellite Installation token lifetime = 0
  46. Compensating control

    Use Full Host Bootdisk, which uses provisioning tokens, when applying the errata.

Event History

Nov 5, 2026
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·07:36 PM
Data Sourced
via Red Hat·07:36 PM
Severity

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203