Red Hat Security Advisory: Satellite 6.16.8 Async Update
Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * python-pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image (CVE-2026-25990) * candlepin: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects (CVE-2026-27727) * python-markdown: denial of service via malformed HTML-like sequences (CVE-2025-69534) * python-pyOpenSSL: DTLS cookie callback buffer overflow (CVE-2026-27459) * rubygem-activesupport: Active Support: Denial of Service via large scientific notation strings (CVE-2026-33176) Bug Fix(es): * Satellite manifest consumer profile cert and key found in satellite client rhsm cache (SAT-43030) * All communication should happen only over https during global registration execution (SAT-44031) * Impossible to generate registration command via REST API in isolated networks managed by external capsules (SAT-44032) * Executing the 'katello::clean_backend_objects' rake task takes a long time to complete (SAT-44033) * Puppet fact parser can't create OS entry blocking Satellite leapp upgrades (SAT-44035) * No repositories available through subscriptions on a cloud-instance host after registering it to Red Hat Satellite using global registration method (SAT-44036) * Proxy password shown in clear text in the Overview page of Virt-who Configuration (SAT-43834) * Non-admin users on Satellite with viewer role, unable to see the hostgroup. (SAT-44034)
AI Analysis
Technical Summary
This advisory covers security fixes in Red Hat Satellite 6.16.8 for RHEL 8 and RHEL 9. It addresses five CVEs: CVE-2025-69534 (denial of service via malformed HTML-like sequences in python-markdown), CVE-2026-25990 (out-of-bounds write in python-pillow via specially crafted PSD images), CVE-2026-27727 (arbitrary code execution via JNDI dereferencing in candlepin's mchange-commons-java), CVE-2026-27459 (DTLS cookie callback buffer overflow in python-pyOpenSSL), and CVE-2026-33176 (denial of service via large scientific notation strings in rubygem-activesupport). The update also fixes multiple bugs related to certificate handling, HTTPS communication enforcement, REST API registration commands, and user role visibility. The vendor advisory confirms these fixes and provides instructions for updating.
Potential Impact
The vulnerabilities collectively could lead to denial of service conditions, out-of-bounds memory writes, buffer overflows, and arbitrary code execution in affected components of Red Hat Satellite. These issues could compromise system stability, security, and potentially allow attackers to execute malicious code. The update mitigates these risks by patching the affected components. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released Red Hat Satellite 6.16.8 which includes official fixes for the listed vulnerabilities. Users should apply this update promptly after ensuring all prior relevant errata have been applied. Detailed update instructions are available in the Red Hat Satellite documentation. No additional mitigation steps are required beyond applying the official update.
Red Hat Security Advisory: Satellite 6.16.8 Async Update
Description
Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): * python-pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image (CVE-2026-25990) * candlepin: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects (CVE-2026-27727) * python-markdown: denial of service via malformed HTML-like sequences (CVE-2025-69534) * python-pyOpenSSL: DTLS cookie callback buffer overflow (CVE-2026-27459) * rubygem-activesupport: Active Support: Denial of Service via large scientific notation strings (CVE-2026-33176) Bug Fix(es): * Satellite manifest consumer profile cert and key found in satellite client rhsm cache (SAT-43030) * All communication should happen only over https during global registration execution (SAT-44031) * Impossible to generate registration command via REST API in isolated networks managed by external capsules (SAT-44032) * Executing the 'katello::clean_backend_objects' rake task takes a long time to complete (SAT-44033) * Puppet fact parser can't create OS entry blocking Satellite leapp upgrades (SAT-44035) * No repositories available through subscriptions on a cloud-instance host after registering it to Red Hat Satellite using global registration method (SAT-44036) * Proxy password shown in clear text in the Overview page of Virt-who Configuration (SAT-43834) * Non-admin users on Satellite with viewer role, unable to see the hostgroup. (SAT-44034)
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers security fixes in Red Hat Satellite 6.16.8 for RHEL 8 and RHEL 9. It addresses five CVEs: CVE-2025-69534 (denial of service via malformed HTML-like sequences in python-markdown), CVE-2026-25990 (out-of-bounds write in python-pillow via specially crafted PSD images), CVE-2026-27727 (arbitrary code execution via JNDI dereferencing in candlepin's mchange-commons-java), CVE-2026-27459 (DTLS cookie callback buffer overflow in python-pyOpenSSL), and CVE-2026-33176 (denial of service via large scientific notation strings in rubygem-activesupport). The update also fixes multiple bugs related to certificate handling, HTTPS communication enforcement, REST API registration commands, and user role visibility. The vendor advisory confirms these fixes and provides instructions for updating.
Potential Impact
The vulnerabilities collectively could lead to denial of service conditions, out-of-bounds memory writes, buffer overflows, and arbitrary code execution in affected components of Red Hat Satellite. These issues could compromise system stability, security, and potentially allow attackers to execute malicious code. The update mitigates these risks by patching the affected components. No known exploits in the wild have been reported at this time.
Mitigation Recommendations
Red Hat has released Red Hat Satellite 6.16.8 which includes official fixes for the listed vulnerabilities. Users should apply this update promptly after ensuring all prior relevant errata have been applied. Detailed update instructions are available in the Red Hat Satellite documentation. No additional mitigation steps are required beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:14874
- Cve Count
- 5
- Additional Cves
- ["CVE-2026-25990","CVE-2026-27459","CVE-2026-27727","CVE-2026-33176"]
- State
- PUBLISHED
Threat ID: 6a16097ee29bf47b5064a9f4
Added to database: 05/26/2026, 20:58:38 UTC
Last enriched: 08/12/2026, 19:47:34 UTC
Last updated: 09/15/2026, 01:45:46 UTC
Views: 122
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.