Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

Red Hat Satellite includes a component called Red Hat Lightspeed that analyzes system health and configuration by applying predefined rules to local data such as installed packages and running services. The advisory announces the general availability of a new container image for satellite/iop-host-inventory-frontend-rhel9 that addresses multiple vulnerabilities including CVE-2026-59879. The affected versions include those prior to 4.3.9 and versions from 5.0.0-beta.1 up to but not including 5.1.8. The vendor has released a patch and recommends updating to the fixed container image. No known exploits are reported in the wild at this time.

The vulnerabilities affect the Red Hat Satellite product's Lightspeed component, potentially impacting system health and configuration analysis. The severity is rated high, indicating that exploitation could have significant consequences. However, no active exploitation has been reported. The update mitigates these issues by providing a new container image that addresses the identified CVEs.

A patch is available in the form of a new container image for satellite/iop-host-inventory-frontend-rhel9. Users should update to the latest container image as per Red Hat Satellite documentation to remediate the vulnerabilities. Since this is not a cloud service, remediation is managed by the user applying the updated container image. No additional mitigation steps are indicated by the vendor advisory.