Red Hat Security Advisory: Satellite 6.16.12 Async Update
Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * puppet-agent: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230) * puppetserver: HTTP request smuggling via chunked extension quoted-string parsing (CVE-2026-2332) * python-pillow: Pillow: Denial of Service via crafted BDF font file (CVE-2026-55379) * python-pillow: Pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380) * python-pillow: Pillow: Denial of Service via crafted PCF font data (CVE-2026-54059) * python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files (CVE-2026-54060) * python-pillow: Pillow: Native heap out-of-bounds write (CVE-2026-59197) * python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526) * rubygem-faraday-cookie_jar: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-em_http: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-em_synchrony: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-excon: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-httpclient: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday_middleware: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-multipart: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-net_http: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-net_http_persistent: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-patron: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-rack: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-retry: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-katello: missing repository authorization in content_uploads exposes cross-product content existence (CVE-2026-12515) * rubygem-nokogiri: Nokogiri: Denial of Service or Information Disclosure via invalid encoding handling (CVE-2026-57236) * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) Bug Fix(es): * scap-security-guide-satellite: Update of scap-security-guide-satellite package sources * 'Katello::Errors::Pulp3Error: nextval: reached maximum value of sequence "container_blobmanifest_id_seq"' during container image sync
AI Analysis
Technical Summary
The advisory includes a collection of fixes and enhancements for Red Hat Hardened Images RPMs addressing 23 CVEs including CVE-2025-9232. This particular vulnerability is an out-of-bounds read in the OpenSSL HTTP client API's no_proxy environment variable handling, which can cause an application crash (denial of service) when an attacker-controlled IPv6 URL is used. Exploitation requires the application to pass such a URL and have the no_proxy environment variable set, conditions that are uncommon in typical OpenSSL HTTP client usage. Red Hat rates this vulnerability as low severity due to these constraints and the limited impact (no information disclosure or code execution). The advisory does not provide explicit patch availability or remediation level, and no exploits are known in the wild. The advisory also discusses the complexity of scoring open source vulnerabilities and the variability in CVSS scores across vendors.
Potential Impact
The impact is limited to an application-level denial of service caused by an out-of-bounds read leading to a crash. There is no potential for information disclosure or remote code execution. The conditions for exploitation are very specific, requiring an attacker-controlled IPv6 URL and the no_proxy environment variable set by the user. Typical OpenSSL HTTP client use cases do not involve attacker-controlled URLs, further reducing the likelihood of exploitation. No known active exploits have been reported.
Mitigation Recommendations
The vendor advisory states that mitigation options are either unavailable or do not meet Red Hat's criteria for ease of use, applicability, or stability. No official patch or fix status is confirmed in the provided data. Users should monitor the Red Hat Product Security advisories for updates and consider upgrading to versions that include fixes once available. Customers with Red Hat Technical Account Managers (TAM) can consult directly for tailored guidance. No immediate action is mandated by the vendor given the low severity and specific exploitation conditions.
Red Hat Security Advisory: Satellite 6.16.12 Async Update
Description
Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * puppet-agent: Out-of-bounds read & write in RFC 3211 KEK Unwrap (CVE-2025-9230) * puppetserver: HTTP request smuggling via chunked extension quoted-string parsing (CVE-2026-2332) * python-pillow: Pillow: Denial of Service via crafted BDF font file (CVE-2026-55379) * python-pillow: Pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380) * python-pillow: Pillow: Denial of Service via crafted PCF font data (CVE-2026-54059) * python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files (CVE-2026-54060) * python-pillow: Pillow: Native heap out-of-bounds write (CVE-2026-59197) * python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526) * rubygem-faraday-cookie_jar: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-em_http: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-em_synchrony: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-excon: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-httpclient: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday_middleware: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-multipart: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-net_http: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-net_http_persistent: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-patron: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-rack: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-faraday-retry: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297) * rubygem-katello: missing repository authorization in content_uploads exposes cross-product content existence (CVE-2026-12515) * rubygem-nokogiri: Nokogiri: Denial of Service or Information Disclosure via invalid encoding handling (CVE-2026-57236) * libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864) Bug Fix(es): * scap-security-guide-satellite: Update of scap-security-guide-satellite package sources * 'Katello::Errors::Pulp3Error: nextval: reached maximum value of sequence "container_blobmanifest_id_seq"' during container image sync
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The advisory includes a collection of fixes and enhancements for Red Hat Hardened Images RPMs addressing 23 CVEs including CVE-2025-9232. This particular vulnerability is an out-of-bounds read in the OpenSSL HTTP client API's no_proxy environment variable handling, which can cause an application crash (denial of service) when an attacker-controlled IPv6 URL is used. Exploitation requires the application to pass such a URL and have the no_proxy environment variable set, conditions that are uncommon in typical OpenSSL HTTP client usage. Red Hat rates this vulnerability as low severity due to these constraints and the limited impact (no information disclosure or code execution). The advisory does not provide explicit patch availability or remediation level, and no exploits are known in the wild. The advisory also discusses the complexity of scoring open source vulnerabilities and the variability in CVSS scores across vendors.
Potential Impact
The impact is limited to an application-level denial of service caused by an out-of-bounds read leading to a crash. There is no potential for information disclosure or remote code execution. The conditions for exploitation are very specific, requiring an attacker-controlled IPv6 URL and the no_proxy environment variable set by the user. Typical OpenSSL HTTP client use cases do not involve attacker-controlled URLs, further reducing the likelihood of exploitation. No known active exploits have been reported.
Mitigation Recommendations
The vendor advisory states that mitigation options are either unavailable or do not meet Red Hat's criteria for ease of use, applicability, or stability. No official patch or fix status is confirmed in the provided data. Users should monitor the Red Hat Product Security advisories for updates and consider upgrading to versions that include fixes once available. Customers with Red Hat Technical Account Managers (TAM) can consult directly for tailored guidance. No immediate action is mandated by the vendor given the low severity and specific exploitation conditions.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:7261
- Cve Count
- 23
- Additional Cves
- ["CVE-2025-9231","CVE-2025-9232","CVE-2025-11187","CVE-2025-15467","CVE-2025-15468","CVE-2025-15469","CVE-2025-66199","CVE-2025-68160","CVE-2025-69418","CVE-2025-69419","CVE-2025-69420","CVE-2025-69421","CVE-2026-2673","CVE-2026-22795","CVE-2026-22796","CVE-2026-28386","CVE-2026-28387","CVE-2026-28388","CVE-2026-28389","CVE-2026-28390","CVE-2026-31789","CVE-2026-31790"]
- Cvss Version
- null
Threat ID: 6a160978e29bf47b50644cc8
Added to database: 05/26/2026, 20:58:32 UTC
Last enriched: 08/14/2026, 22:58:11 UTC
Last updated: 08/25/2026, 00:53:09 UTC
Views: 223
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.