Red Hat Security Advisory: Satellite 6.17.7 Async Update
Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * python-django: Django: SQL Injection via crafted column aliases (CVE-2026-1287) * python-django: Django: SQL Injection via RasterField band index parameter (CVE-2026-1207) * python-django: Django: Denial of Service via crafted HTML inputs (CVE-2026-1285) * python-django: Django: SQL injection via crafted column aliases in QuerySet.order_by() (CVE-2026-1312) * python-django: Django: Denial of Service via crafted request with duplicate headers (CVE-2025-14550) * python-brotli: Brotli decompression bomb DoS in scrapy/scrapy (CVE-2025-6176) * rubygem-foreman_kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification (CVE-2026-1531) * rubygem-fog-kubevirt: fog-kubevirt: Man-in-the-Middle vulnerability due to disabled certificate validation (CVE-2026-1530) * rubygem-rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username (CVE-2026-0980) * foreman: Foreman: Remote Code Execution via command injection in WebSocket proxy (CVE-2026-1961) * yggdrasil-worker-forwarder: Unexpected session resumption in crypto/tls (CVE-2025-68121) * Katello: Denial of Service and potential information disclosure via SQL injection (CVE-2026-4324) Bug Fix(es): * High memory usage of postgres processes on scaled Capsule (SAT-42871) * AttributeError: 'NoneType' object has no attribute '_artifacts' when running pulpcore-container-handle-image-metadata in the post-upgrade step for Satellite 6.17 (SAT-42873) * Lifecycle Environment shows 2 Library options (SAT-42881) * Executing foreman-rake command in the satellite, prints warning "W, [2025-08-28T14:25:04.030121 #11656] WARN -- : Scoped order is ignored, it's forced to be batch order." (SAT-42882) * Upgrade to Sat 6.16 does not cleanup Postgresql12 which is reported as security risk/vulnerability by the scanners on Sat 6.17 & 6.18. (SAT-43118)
AI Analysis
Technical Summary
This Red Hat Security Advisory (RHSA-2026:2844) covers multiple vulnerabilities in Red Hat Satellite and Red Hat OpenShift Dev Spaces, including SQL injection flaws in Django components, denial of service via crafted inputs, remote code execution in rubyipmi and Foreman WebSocket proxy, man-in-the-middle vulnerabilities due to insecure SSL verification, and a Brotli decompression bomb denial of service in scrapy. The advisory lists a total of at least 12 CVEs fixed, including CVE-2025-6176. The affected products include Red Hat Satellite and Red Hat OpenShift Dev Spaces 3.26.1. The advisory includes bug fixes for high memory usage and upgrade-related errors. The vendor advisory confirms the release of updated images and packages to address these issues. No exploits in the wild are currently known. Users should apply the update following Red Hat's standard errata application procedures.
Potential Impact
The vulnerabilities fixed in this advisory include SQL injection, denial of service, remote code execution, and man-in-the-middle attacks, which could allow attackers to execute arbitrary code, disrupt services, or intercept communications. These issues affect critical components of Red Hat Satellite and OpenShift Dev Spaces, potentially impacting system management and cloud development environments. The denial of service vulnerabilities could cause service outages, while remote code execution flaws could lead to full system compromise. The man-in-the-middle vulnerabilities could allow interception or manipulation of network traffic. No known active exploitation has been reported.
Mitigation Recommendations
Red Hat has released updated versions of Red Hat Satellite and OpenShift Dev Spaces (3.26.1) that address these vulnerabilities. Users should apply these updates promptly after ensuring all previously released errata relevant to their systems have been applied. Detailed update instructions are available in the Red Hat advisory and documentation. Since this is not a cloud service, remediation requires user action to update affected software. No additional mitigation steps are indicated by the vendor advisory.
Red Hat Security Advisory: Satellite 6.17.7 Async Update
Description
Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * python-django: Django: SQL Injection via crafted column aliases (CVE-2026-1287) * python-django: Django: SQL Injection via RasterField band index parameter (CVE-2026-1207) * python-django: Django: Denial of Service via crafted HTML inputs (CVE-2026-1285) * python-django: Django: SQL injection via crafted column aliases in QuerySet.order_by() (CVE-2026-1312) * python-django: Django: Denial of Service via crafted request with duplicate headers (CVE-2025-14550) * python-brotli: Brotli decompression bomb DoS in scrapy/scrapy (CVE-2025-6176) * rubygem-foreman_kubevirt: foreman_kubevirt: Man-in-the-Middle due to insecure default SSL verification (CVE-2026-1531) * rubygem-fog-kubevirt: fog-kubevirt: Man-in-the-Middle vulnerability due to disabled certificate validation (CVE-2026-1530) * rubygem-rubyipmi: Red Hat Satellite: Remote Code Execution in rubyipmi via malicious BMC username (CVE-2026-0980) * foreman: Foreman: Remote Code Execution via command injection in WebSocket proxy (CVE-2026-1961) * yggdrasil-worker-forwarder: Unexpected session resumption in crypto/tls (CVE-2025-68121) * Katello: Denial of Service and potential information disclosure via SQL injection (CVE-2026-4324) Bug Fix(es): * High memory usage of postgres processes on scaled Capsule (SAT-42871) * AttributeError: 'NoneType' object has no attribute '_artifacts' when running pulpcore-container-handle-image-metadata in the post-upgrade step for Satellite 6.17 (SAT-42873) * Lifecycle Environment shows 2 Library options (SAT-42881) * Executing foreman-rake command in the satellite, prints warning "W, [2025-08-28T14:25:04.030121 #11656] WARN -- : Scoped order is ignored, it's forced to be batch order." (SAT-42882) * Upgrade to Sat 6.16 does not cleanup Postgresql12 which is reported as security risk/vulnerability by the scanners on Sat 6.17 & 6.18. (SAT-43118)
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This Red Hat Security Advisory (RHSA-2026:2844) covers multiple vulnerabilities in Red Hat Satellite and Red Hat OpenShift Dev Spaces, including SQL injection flaws in Django components, denial of service via crafted inputs, remote code execution in rubyipmi and Foreman WebSocket proxy, man-in-the-middle vulnerabilities due to insecure SSL verification, and a Brotli decompression bomb denial of service in scrapy. The advisory lists a total of at least 12 CVEs fixed, including CVE-2025-6176. The affected products include Red Hat Satellite and Red Hat OpenShift Dev Spaces 3.26.1. The advisory includes bug fixes for high memory usage and upgrade-related errors. The vendor advisory confirms the release of updated images and packages to address these issues. No exploits in the wild are currently known. Users should apply the update following Red Hat's standard errata application procedures.
Potential Impact
The vulnerabilities fixed in this advisory include SQL injection, denial of service, remote code execution, and man-in-the-middle attacks, which could allow attackers to execute arbitrary code, disrupt services, or intercept communications. These issues affect critical components of Red Hat Satellite and OpenShift Dev Spaces, potentially impacting system management and cloud development environments. The denial of service vulnerabilities could cause service outages, while remote code execution flaws could lead to full system compromise. The man-in-the-middle vulnerabilities could allow interception or manipulation of network traffic. No known active exploitation has been reported.
Mitigation Recommendations
Red Hat has released updated versions of Red Hat Satellite and OpenShift Dev Spaces (3.26.1) that address these vulnerabilities. Users should apply these updates promptly after ensuring all previously released errata relevant to their systems have been applied. Detailed update instructions are available in the Red Hat advisory and documentation. Since this is not a cloud service, remediation requires user action to update affected software. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:2844
- Cve Count
- 6
- Additional Cves
- ["CVE-2025-15467","CVE-2025-61726","CVE-2025-61732","CVE-2026-0719","CVE-2026-1761"]
- Cvss Version
- null
Threat ID: 6a160965e29bf47b5062a3cf
Added to database: 05/26/2026, 20:58:13 UTC
Last enriched: 07/30/2026, 11:45:21 UTC
Last updated: 08/01/2026, 15:26:29 UTC
Views: 104
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.