Red Hat Product Errata RHSA-2026:22326 - Security Advisory Issued: 2026-06-01 Updated: 2026-06-01 RHSA-2026:22326 - Security Advisory Overview Updated Packages Synopsis Moderate: Satellite 6.19.1 Async Update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic A new release is now available for Red Hat Satellite 6.19 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): dynflow-utils: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) rubygem-katello: Katello: Denial of Service and potential information disclosure via SQL injection (CVE-2026-4324) Solution Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/updating_red_hat_satellite/index Affected Products Red Hat Satellite 6.19 x86_64 Red Hat Satellite Capsule 6.19 x86_64 Red Hat Enterprise Linux for x86_64 9 x86_64 Fixes SAT-40215 - After Red Hat Satellite 6.18 upgrade, 100+ python3.11 packages leftover from "satellite-6.17-for-rhel-9-x86_64-rpms" repository which has no update available in "satellite-6.18-for-rhel-9-x86_64-rpms" repository SAT-44554 - Flatpak registry static index returns 500 after pulpcore 3.85.15 upgrade (set not JSON serializable) SAT-45125 - Condensed report never has any data for advisor_on_prem_remediations_count SAT-45126 - Incorrect Capsule Sync Status in Satellite 6.18 SAT-45127 - Unable to delete empty CCV SAT-45128 - Repository update ID parameter in hammer command in docker repos is failing. SAT-45130 - GCE compute resource fails create new host because it cannot validate existing public images. SAT-45131 - Improve Inventory Sync Parameter Handling and User Experience CVEs CVE-2026-4324 CVE-2026-32282 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Satellite 6.19 SRPM dynflow-utils-2.0.1-1.el9sat.src.rpm SHA-256: 2279306713c0718b4a51a6f17aa8f4e73afb02f7d4a5343681f43d56ed9f2d46 openvox-agent-8.24.1-3.el9sat.src.rpm SHA-256: f2be77937a849612488c606cc9433f75b8656f276bfe430afb41de39c695cfa9 pulpcore-obsolete-packages-1.3.1-2.el9pc.src.rpm SHA-256: 209b6d104c6e35afd8ff815c03dbc9fbb2a194079d52f5e0bce1e22dc839a347 python3.12-pulp-container-2.26.13-1.el9pc.src.rpm SHA-256: 8fa08a8c72569c89858cdbd165960b61c330e62787e690308a7932f5b760db15 python3.12-pysequoia-0.1.33-1.el9pc.src.rpm SHA-256: 76e235f957aaf9a1d9e6d93de5bd09107cd0bcd4d69c0888a51a7a4fe0d4a7d6 rubygem-foreman_google-3.0.7-1.el9sat.src.rpm SHA-256: 7ff6986cdf6e48f22c739a13706d81d3e6907770bad770654b9658aae6a38166 rubygem-foreman_maintain-1.14.4-1.el9sat.src.rpm SHA-256: 441157e3a1d442bf82b1a97a3705985b3c0e354d6ea8caead272b36c8ac497ca rubygem-foreman_rh_cloud-13.2.9-1.el9sat.src.rpm SHA-256: dcd64daacd747f40ed1d58390d9e5b1d47fca527f8da5d0e4c9b33a16c94d56f rubygem-katello-4.20.0.4-1.el9sat.src.rpm SHA-256: 16a72446e75595afdd289328adaf7e7ff3e51788b1e984424cf3d41c4aaa5b8c satellite-6.19.1-1.el9sat.src.rpm SHA-256: d9647d994bdd89d209e0a3001e587922bfbbbf98c0e86fad55d3297d69d7097b x86_64 dynflow-utils-2.0.1-1.el9sat.x86_64.rpm SHA-256: b04e2c9ddc4c3ffe37c9cb000c8cafee7f6931d83d04c7027e8fc5c403c96305 openvox-agent-8.24.1-3.el9sat.x86_64.rpm SHA-256: 0877931b6cfd178af8f547fdbf4f1efd756ed17bcb524408d2389e02dce2ea57 pulpcore-obsolete-packages-1.3.1-2.el9pc.noarch.rpm SHA-256: 3fad825aff42e413835f23f960c05a10b0da590a371cc273b0405859295244a3 python3.12-pulp-container-2.26.13-1.el9pc.noarch.rpm SHA-256: b1cda9f407333ff8f9c0e44b2ae4d51cb093387edb4f689a6359a3fd38462378 python3.12-pysequoia-0.1.33-1.el9pc.x86_64.rpm SHA-256: d74fd5cd967756eea1ae66755e4515938e50df3fb72a535ef8ed5b89676df8bf rubygem-foreman_google-3.0.7-1.el9sat.noarch.rpm SHA-256: 3b69747adb701f8c3b4044302a80892a280f74c1af0a9f2a6def714fe3fdd217 rubygem-foreman_maintain-1.14.4-1.el9sat.noarch.rpm SHA-256: 20cbd8bb234462314ccbe9b11d7e452f618fe19d50e8f04ed1315c68479b72eb rubygem-foreman_rh_cloud-13.2.9-1.el9sat.noarch.rpm SHA-256: ea8796685af1632066615191b675fba654b543986529f5250c61844d3fe4964b rubygem-katello-4.20.0.4-1.el9sat.noarch.rpm SHA-256: cdd09911802b3790d373ddce52e0a824a649439e1b012dcdaf55216f515185f8 satellite-6.19.1-1.el9sat.noarch.rpm SHA-256: 80d360c063e08459d8b2ffee6c8c6e5f163f7d2d69943ba5d7e30dc4f5fc4117 satellite-cli-6.19.1-1.el9sat.noarch.rpm SHA-256: 8682b904ebf7a491f1702d7bb74b56ab6b5b88587fb007db40b4a1a56091931e satellite-common-6.19.1-1.el9sat.noarch.rpm SHA-256: 3276e8be5ea864fc726d419e59e0a329f562e048da9cfb6c122ea4fcc673f784 satellite-obsolete-packages-6.19.1-1.el9sat.noarch.rpm SHA-256: 81464089d7f3d50d6ea5eae2dd1adb5a6ab54cb51de4d480c9881829a17d7fe9 Red Hat Satellite Capsule 6.19 SRPM dynflow-utils-2.0.1-1.el9sat.src.rpm SHA-256: 2279306713c0718b4a51a6f17aa8f4e73afb02f7d4a5343681f43d56ed9f2d46 openvox-agent-8.24.1-3.el9sat.src.rpm SHA-256: f2be77937a849612488c606cc9433f75b8656f276bfe430afb41de39c695cfa9 pulpcore-obsolete-packages-1.3.1-2.el9pc.src.rpm SHA-256: 209b6d104c6e35afd8ff815c03dbc9fbb2a194079d52f5e0bce1e22dc839a347 python3.12-pulp-container-2.26.13-1.el9pc.src.rpm SHA-256: 8fa08a8c72569c89858cdbd165960b61c330e62787e690308a7932f5b760db15 python3.12-pysequoia-0.1.33-1.el9pc.src.rpm SHA-256: 76e235f957aaf9a1d9e6d93de5bd09107cd0bcd4d69c0888a51a7a4fe0d4a7d6 rubygem-foreman_maintain-1.14.4-1.el9sat.src.rpm SHA-256: 441157e3a1d442bf82b1a97a3705985b3c0e354d6ea8caead272b36c8ac497ca satellite-6.19.1-1.el9sat.src.rpm SHA-256: d9647d994bdd89d209e0a3001e587922bfbbbf98c0e86fad55d3297d69d7097b x86_64 dynflow-utils-2.0.1-1.el9sat.x86_64.rpm SHA-256: b04e2c9ddc4c3ffe37c9cb000c8cafee7f6931d83d04c7027e8fc5c403c96305 openvox-agent-8.24.1-3.el9sat.x86_64.rpm SHA-256: 0877931b6cfd178af8f547fdbf4f1efd756ed17bcb524408d2389e02dce2ea57 pulpcore-obsolete-packages-1.3.1-2.el9pc.noarch.rpm SHA-256: 3fad825aff42e413835f23f960c05a10b0da590a371cc273b0405859295244a3 python3.12-pulp-container-2.26.13-1.el9pc.noarch.rpm SHA-256: b1cda9f407333ff8f9c0e44b2ae4d51cb093387edb4f689a6359a3fd38462378 python3.12-pysequoia-0.1.33-1.el9pc.x86_64.rpm SHA-256: d74fd5cd967756eea1ae66755e4515938e50df3fb72a535ef8ed5b89676df8bf rubygem-foreman_maintain-1.14.4-1.el9sat.noarch.rpm SHA-256: 20cbd8bb234462314ccbe9b11d7e452f618fe19d50e8f04ed1315c68479b72eb satellite-capsule-6.19.1-1.el9sat.noarch.rpm SHA-256: f8cd10ff4670322fce35321018a8ae9027cceb667a1ef5aaf79a4239ca7f9b08 satellite-common-6.19.1-1.el9sat.noarch.rpm SHA-256: 3276e8be5ea864fc726d419e59e0a329f562e048da9cfb6c122ea4fcc673f784 satellite-obsolete-packages-6.19.1-1.el9sat.noarch.rpm SHA-256: 81464089d7f3d50d6ea5eae2dd1adb5a6ab54cb51de4d480c9881829a17d7fe9 Red Hat Enterprise Linux for x86_64 9 SRPM rubygem-foreman_maintain-1.14.4-1.el9sat.src.rpm SHA-256: 441157e3a1d442bf82b1a97a3705985b3c0e354d6ea8caead272b36c8ac497ca satellite-6.19.1-1.el9sat.src.rpm SHA-256: d9647d994bdd89d209e0a3001e587922bfbbbf98c0e86fad55d3297d69d7097b x86_64 rubygem-foreman_maintain-1.14.4-1.el9sat.noarch.rpm SHA-256: 20cbd8bb234462314ccbe9b11d7e452f618fe19d50e8f04ed1315c68479b72eb satellite-cli-6.19.1-1.el9sat.noarch.rpm SHA-256: 8682b904ebf7a491f1702d7bb74b56ab6b5b88587fb007db40b4a1a56091931e The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .