RHSA-2026:95657: Critical: Satellite 6.18 security update

This advisory provides security fixes for affected packages used by Red HatSatellite. The updates address the vulnerabilities described below.Security Fix(es): python3.12-django: Django: Remote code execution via GeoDjango spatial lookups (CVE-2026-15307) python3.12-brotli: Out-of-Bounds Write in Google Brotli Decoder (CVE-2026-111497) python3.12-urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override (CVE-2026-97687) python3.12-urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser (CVE-2026-97689) python3.12-pillow: pillow: Denial of Service via duplicate page references in PDF files (CVE-2026-96640) python3.12-pillow: pillow: Denial of Service via repeated EXIF headers (CVE-2026-96643) python3.12-pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow (CVE-2026-96778) python3.12-pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing (CVE-2026-112390) python3.12-pillow: Pillow: Denial of Service via unbounded recursion in PDF parser (CVE-2026-112391) python3.12-pillow: pillow: Denial of Service via zero-size images in rank filters (CVE-2026-112392) python3.12-pillow: Pillow: Heap buffer overflow in tiffWriteProc when saving TIFF to BytesIO (CVE-2026-112393) python3.12-pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images (CVE-2026-112397) python3.12-pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution (CVE-2026-112398) python3.12-pillow: pillow: Denial of service via crafted APNG image (CVE-2026-112399) python3.12-pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image (CVE-2026-112400) python3.12-pillow: pillow: Denial of service via double free during image transformation (CVE-2026-112402) python3.12-pillow: Pillow: Heap buffer overflow in ImagingJpegDecode (CVE-2026-112403) python3.12-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding (CVE-2026-112404) python3.12-pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() (CVE-2026-112405) python3.12-pillow: pillow: Denial of Service via infinite loop during PDF page rewriting (CVE-2026-112406) python3.12-pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder (CVE-2026-112892) python3.12-pillow: Pillow: Denial of Service via invalid pointer free during font rendering (CVE-2026-112893) python3.12-pillow: pillow: Denial of Service via crafted multi-frame image conversion (CVE-2026-112894) python3.12-pillow: pillow: Denial of service via crafted PDF during append operations (CVE-2026-112895) python3.12-pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder (CVE-2026-112896) python3.12-pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding (CVE-2026-112897) python-gitpython: GitPython: Arbitrary file read vulnerability via Repo.archive() (CVE-2026-73619) python3.12-gitpython: GitPython: Arbitrary Code Execution via Path Traversal (CVE-2026-78677) python3.12-gitpython: GitPython: Denial of Service via crafted commit author field (CVE-2026-87819) python3.12-gitpython: GitPython: Denial of Service via regular expression backtracking in date parsing (CVE-2026-110856) python3.12-gitpython: GitPython: Arbitrary code execution via unsafe URL protocol handling (CVE-2026-110857) python3.12-gitpython: GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec (CVE-2026-110858) python3.12-gitpython: GitPython: Arbitrary file read via argument injection in branch checkout (CVE-2026-110859) python3.12-gitpython: GitPython: arbitrary code execution via improper submodule path validation (CVE-2026-114145) openvox-agent: integer overflow issue in regular expression compiler (CVE-2026-110264) openvox-agent: integer overflow issue in CI/CD regular expression compiler (CVE-2026-97229) openvox-agent: integer overflow issue in regular expression compiler (CVE-2026-93577) openvox-agent: double free issue in regular expression parser (CVE-2026-89078) openvox-server: jackson-dataformat-smile: Denial of Service via unbounded memory allocation in asynchronous parser (CVE-2026-104895)

— Red Hat