Red Hat Security Advisory: General availability of the satellite/iop-host-inventory-frontend-rhel9 container image
Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings. When you install Red Hat Lightspeed in Satellite locally, you can generate Red Hat Lightspeed recommendations without sending system data to Red Hat services.
AI Analysis
Technical Summary
The Red Hat advisory RHSA-2026:8500 announces the availability of a new container image for Red Hat Satellite but does not provide a fix for the referenced vulnerabilities. CVE-2026-21441 affects urllib3 versions from 1.22 up to but not including 2.6.3, where the streaming API decompresses HTTP redirect responses prematurely and without limits, enabling decompression bomb attacks that cause excessive CPU and memory consumption. This vulnerability impacts applications using urllib3 with streaming enabled and redirects allowed. Red Hat's advisory does not currently provide a patch or updated package for this issue in Red Hat Satellite or related products. The advisory includes additional CVEs (CVE-2026-25639, CVE-2026-40175) but does not detail them. The vulnerability is rated critical due to potential denial of service via resource exhaustion. No known exploits in the wild are reported. Red Hat recommends consulting Satellite documentation for Lightspeed installation and configuration.
Potential Impact
The vulnerability allows a malicious HTTP server to cause excessive resource consumption (CPU and memory) on clients using urllib3's streaming API with redirects enabled. This can lead to denial of service conditions such as application crashes or degraded system performance. The impact is limited to applications that stream content from untrusted sources without disabling redirects. There is no confidentiality, integrity, or data disclosure impact reported. No known active exploitation has been observed. The advisory rates the severity as critical due to the potential for denial of service via decompression bomb attacks.
Mitigation Recommendations
No official fix or patch is currently available for this vulnerability in Red Hat Satellite or related products as per the advisory. Users should consider upgrading urllib3 to version 2.6.3 or later where the issue is resolved. If upgrading is not immediately possible, mitigate by disabling HTTP redirects (setting redirect=False) when streaming content from untrusted sources. Follow Red Hat Satellite documentation for proper installation and configuration of Red Hat Lightspeed. Monitor Red Hat advisories for updates or patches addressing this vulnerability.
Red Hat Security Advisory: General availability of the satellite/iop-host-inventory-frontend-rhel9 container image
Description
Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings. When you install Red Hat Lightspeed in Satellite locally, you can generate Red Hat Lightspeed recommendations without sending system data to Red Hat services.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Red Hat advisory RHSA-2026:8500 announces the availability of a new container image for Red Hat Satellite but does not provide a fix for the referenced vulnerabilities. CVE-2026-21441 affects urllib3 versions from 1.22 up to but not including 2.6.3, where the streaming API decompresses HTTP redirect responses prematurely and without limits, enabling decompression bomb attacks that cause excessive CPU and memory consumption. This vulnerability impacts applications using urllib3 with streaming enabled and redirects allowed. Red Hat's advisory does not currently provide a patch or updated package for this issue in Red Hat Satellite or related products. The advisory includes additional CVEs (CVE-2026-25639, CVE-2026-40175) but does not detail them. The vulnerability is rated critical due to potential denial of service via resource exhaustion. No known exploits in the wild are reported. Red Hat recommends consulting Satellite documentation for Lightspeed installation and configuration.
Potential Impact
The vulnerability allows a malicious HTTP server to cause excessive resource consumption (CPU and memory) on clients using urllib3's streaming API with redirects enabled. This can lead to denial of service conditions such as application crashes or degraded system performance. The impact is limited to applications that stream content from untrusted sources without disabling redirects. There is no confidentiality, integrity, or data disclosure impact reported. No known active exploitation has been observed. The advisory rates the severity as critical due to the potential for denial of service via decompression bomb attacks.
Mitigation Recommendations
No official fix or patch is currently available for this vulnerability in Red Hat Satellite or related products as per the advisory. Users should consider upgrading urllib3 to version 2.6.3 or later where the issue is resolved. If upgrading is not immediately possible, mitigate by disabling HTTP redirects (setting redirect=False) when streaming content from untrusted sources. Follow Red Hat Satellite documentation for proper installation and configuration of Red Hat Lightspeed. Monitor Red Hat advisories for updates or patches addressing this vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:8500
- Cve Count
- 3
- Additional Cves
- ["CVE-2026-25639","CVE-2026-40175"]
Threat ID: 6a160972e29bf47b5063a4ed
Added to database: 05/26/2026, 20:58:26 UTC
Last enriched: 08/10/2026, 20:10:16 UTC
Last updated: 09/14/2026, 22:01:32 UTC
Views: 112
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.