Red Hat Product Errata RHSA-2026:28385 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-23 RHSA-2026:28385 - Security Advisory Overview Updated Packages Synopsis Important: Satellite 6.18.6 Async Update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic A new release is now available for Red Hat Satellite 6.18 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs provisioning and configuration management of predefined standard operating environments. Security Fix(es): python3.12-pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image (CVE-2026-25990) candlepin: com.mchange/c3p0: c3p0: Arbitrary Code Execution via deserialization of crafted objects (CVE-2026-27830) dynflow-utils: Root.Chmod can follow symlinks out of the root (CVE-2026-32282) Solution Before applying this update, make sure all previously released errata relevant to your system have been applied. For detailed instructions how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_satellite/6.18/html/updating_red_hat_satellite/index Affected Products Red Hat Satellite 6.18 x86_64 Red Hat Satellite Capsule 6.18 x86_64 Red Hat Enterprise Linux for x86_64 9 x86_64 Fixes BZ - 2439170 - CVE-2026-25990 pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image BZ - 2442908 - CVE-2026-27830 c3p0: c3p0: Arbitrary Code Execution via deserialization of crafted objects BZ - 2456336 - CVE-2026-32282 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root SAT-45570 - Incorrect Capsule Sync Status in Satellite 6.18 [satellite_6.18] SAT-45571 - Condensed report never has any data for advisor_on_prem_remediations_count [satellite_6.18] SAT-45883 - After Red Hat Satellite 6.18 upgrade, 100+ python3.11 packages leftover from "satellite-6.17-for-rhel-9-x86_64-rpms" repository which has no update available in "satellite-6.18-for-rhel-9-x86_64-rpms" repository SAT-45836 - EOL banner has broken link to Red Hat Satellite Upgrade Helper [satellite_6.18] CVEs CVE-2026-25990 CVE-2026-27830 CVE-2026-32282 References https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Satellite 6.18 SRPM candlepin-4.6.6-1.el9sat.src.rpm SHA-256: 7e77432f6362b812082f1c420b18cf255b62abcecb82c844d01d3d9ffa2ff392 dynflow-utils-2.0.1-1.el9sat.src.rpm SHA-256: 2279306713c0718b4a51a6f17aa8f4e73afb02f7d4a5343681f43d56ed9f2d46 pulpcore-obsolete-packages-1.3.1-2.el9pc.src.rpm SHA-256: 209b6d104c6e35afd8ff815c03dbc9fbb2a194079d52f5e0bce1e22dc839a347 python3.12-galaxy-importer-0.4.33-1.el9pc.src.rpm SHA-256: faf4c2a79c87b6d1deed704f7c179c8bb70a021b5ed66fbd0ea7da31fb8f7302 python3.12-nh3-0.3.0-1.el9pc.src.rpm SHA-256: 97e5e2d7d9a5822babbb010b10541609ba3ecf7847e47e835602e7095f0f86b9 python3.12-packaging-24.2-3.el9pc.src.rpm SHA-256: 8e84fdfb9cc6666e3a50b507ed34da4bb3a47fc396c509b1911c9aad3d131c3d python3.12-pillow-12.1.1-1.el9pc.src.rpm SHA-256: f2e6aa06bbb3980eeb37ba62e976af6d25210e1d3b244bfa1d3e08b8f18481af python3.12-pulp-ansible-0.24.11-1.el9pc.src.rpm SHA-256: f69e27768484d717d8504873d9ee606f387e97beb71d20f4df4723faa2d6e3d5 rubygem-foreman_maintain-1.13.9-1.el9sat.src.rpm SHA-256: 4299ddfbd16a5682cb5a2774d00e4661e074b245b5e9fb440563273ce098d5f5 rubygem-foreman_theme_satellite-15.3.6-1.el9sat.src.rpm SHA-256: afe0728ff4524a180b6a4763c2e59b9006414064999cfc1e1e208991a0118e0b rubygem-katello-4.18.0.13-1.el9sat.src.rpm SHA-256: 28c7993b2a3168ef89239ec91ac460ee8b43dfbfd73aab3c01b097fe4fe7bc47 satellite-6.18.6-1.el9sat.src.rpm SHA-256: eabdbc0ac22321753373440c23a9412f05fa4ec765fb1173a34ca085b77c8dff x86_64 candlepin-4.6.6-1.el9sat.noarch.rpm SHA-256: d123660a223c538455e7653abd81910a06ca694e2bb2b421b6957b837537cc14 candlepin-selinux-4.6.6-1.el9sat.noarch.rpm SHA-256: 26878a43251716abff45bae98505aa096153ac16173e028604bdd2647101ced8 dynflow-utils-2.0.1-1.el9sat.x86_64.rpm SHA-256: b04e2c9ddc4c3ffe37c9cb000c8cafee7f6931d83d04c7027e8fc5c403c96305 pulpcore-obsolete-packages-1.3.1-2.el9pc.noarch.rpm SHA-256: 3fad825aff42e413835f23f960c05a10b0da590a371cc273b0405859295244a3 python3.12-galaxy-importer-0.4.33-1.el9pc.noarch.rpm SHA-256: 302c860d1c4ecc73d5697545c6b26a0f9f044e38ddfdc488703af22049a16463 python3.12-nh3-0.3.0-1.el9pc.x86_64.rpm SHA-256: daac0f28a0c258c832171c98a2e6581340ba4d6e3c0ac604e6ef561b8d28ab43 python3.12-packaging-24.2-3.el9pc.noarch.rpm SHA-256: 5a9b5b23961b4bf00ccdd6da62c23c1afff9ef8528fb7148a4d46ebdfa5c32a9 python3.12-pillow-12.1.1-1.el9pc.x86_64.rpm SHA-256: fd941eda94a81e93785403fd4d7be20c34253ea3ee47de202b36a793f373c1d7 python3.12-pillow-debuginfo-12.1.1-1.el9pc.x86_64.rpm SHA-256: 129290b7cf410636a9e15a4c19136493804b23f43b229501648555956ada0de5 python3.12-pillow-debugsource-12.1.1-1.el9pc.x86_64.rpm SHA-256: 74115efd4d6ca955215073fd14702c617b0d78758cfab4cef991178e6090aa94 python3.12-pulp-ansible-0.24.11-1.el9pc.noarch.rpm SHA-256: 0bd8199b75ccc24e9cc90e1b235901d3bc5564469ddcb50910d54ee5ba59fd87 rubygem-foreman_maintain-1.13.9-1.el9sat.noarch.rpm SHA-256: 9bf366fdc4bf1129be08f9c764fd8ea4ee9cc1f1dc39067c1b47f34744b88bdb rubygem-foreman_theme_satellite-15.3.6-1.el9sat.noarch.rpm SHA-256: ad99e62c586b4547bf576bb6036df586ee6606caa48ad1bb181d6249a207b6e8 rubygem-katello-4.18.0.13-1.el9sat.noarch.rpm SHA-256: f132408d94e25eade84836edd60b3091422ec9af42009b60d1f1be148e02f967 satellite-6.18.6-1.el9sat.noarch.rpm SHA-256: 04e7eac03004e0fbe93a0993da2253a03fa4fb9b1f02606beefe9860cb4f5ece satellite-cli-6.18.6-1.el9sat.noarch.rpm SHA-256: 31c1e42f5b716926c25eded050b500e19014d7e0bb1144b8fd9d9a26d7a5437d satellite-common-6.18.6-1.el9sat.noarch.rpm SHA-256: cee80a316b243e9fe64781f4af0fd13c00aa48abc54ecf1db6ae3abf86c8c962 satellite-obsolete-packages-6.18.6-1.el9sat.noarch.rpm SHA-256: 2be5ce86453b813c224335792740f0b06b8a09c61d4866041333c17f4e3800e4 Red Hat Satellite Capsule 6.18 SRPM dynflow-utils-2.0.1-1.el9sat.src.rpm SHA-256: 2279306713c0718b4a51a6f17aa8f4e73afb02f7d4a5343681f43d56ed9f2d46 pulpcore-obsolete-packages-1.3.1-2.el9pc.src.rpm SHA-256: 209b6d104c6e35afd8ff815c03dbc9fbb2a194079d52f5e0bce1e22dc839a347 python3.12-galaxy-importer-0.4.33-1.el9pc.src.rpm SHA-256: faf4c2a79c87b6d1deed704f7c179c8bb70a021b5ed66fbd0ea7da31fb8f7302 python3.12-nh3-0.3.0-1.el9pc.src.rpm SHA-256: 97e5e2d7d9a5822babbb010b10541609ba3ecf7847e47e835602e7095f0f86b9 python3.12-packaging-24.2-3.el9pc.src.rpm SHA-256: 8e84fdfb9cc6666e3a50b507ed34da4bb3a47fc396c509b1911c9aad3d131c3d python3.12-pillow-12.1.1-1.el9pc.src.rpm SHA-256: f2e6aa06bbb3980eeb37ba62e976af6d25210e1d3b244bfa1d3e08b8f18481af python3.12-pulp-ansible-0.24.11-1.el9pc.src.rpm SHA-256: f69e27768484d717d8504873d9ee606f387e97beb71d20f4df4723faa2d6e3d5 rubygem-foreman_maintain-1.13.9-1.el9sat.src.rpm SHA-256: 4299ddfbd16a5682cb5a2774d00e4661e074b245b5e9fb440563273ce098d5f5 satellite-6.18.6-1.el9sat.src.rpm SHA-256: eabdbc0ac22321753373440c23a9412f05fa4ec765fb1173a34ca085b77c8dff x86_64 dynflow-utils-2.0.1-1.el9sat.x86_64.rpm SHA-256: b04e2c9ddc4c3ffe37c9cb000c8cafee7f6931d83d04c7027e8fc5c403c96305 pulpcore-obsolete-packages-1.3.1-2.el9pc.noarch.rpm SHA-256: 3fad825aff42e413835f23f960c05a10b0da590a371cc273b0405859295244a3 python3.12-galaxy-importer-0.4.33-1.el9pc.noarch.rpm SHA-256: 302c860d1c4ecc73d5697545c6b26a0f9f044e38ddfdc488703af22049a16463 python3.12-nh3-0.3.0-1.el9pc.x86_64.rpm SHA-256: daac0f28a0c258c832171c98a2e6581340ba4d6e3c0ac604e6ef561b8d28ab43 python3.12-packaging-24.2-3.el9pc.noarch.rpm SHA-256: 5a9b5b23961b4bf00ccdd6da62c23c1afff9ef8528fb7148a4d46ebdfa5c32a9 python3.12-pillow-12.1.1-1.el9pc.x86_64.rpm SHA-256: fd941eda94a81e93785403fd4d7be20c34253ea3ee47de202b36a793f373c1d7 python3.12-pillow-debuginfo-12.1.1-1.el9pc.x86_64.rpm SHA-256: 129290b7cf410636a9e15a4c19136493804b23f43b229501648555956ada0de5 python3.12-pillow-debugsource-12.1.1-1.el9pc.x86_64.rpm SHA-256: 74115efd4d6ca955215073fd14702c617b0d78758cfab4cef991178e6090aa94 python3.12-pulp-ansible-0.24.11-1.el9pc.noarch.rpm SHA-256: 0bd8199b75ccc24e9cc90e1b235901d3bc5564469ddcb50910d54ee5ba59fd87 rubygem-foreman_maintain-1.13.9-1.el9sat.noarch.rpm SHA-256: 9bf366fdc4bf1129be08f9c764fd8ea4ee9cc1f1dc39067c1b47f34744b88bdb satellite-capsule-6.18.6-1.el9sat.noarch.rpm SHA-256: 416dd54159efdd4d33c2e6287aba21bfe7207a0d5f966f831e935bac2dc83179 satellite-common-6.18.6-1.el9sat.noarch.rpm SHA-256: cee80a316b243e9fe64781f4af0fd13c00aa48abc54ecf1db6ae3abf86c8c962 satellite-obsolete-packages-6.18.6-1.el9sat.noarch.rpm SHA-256: 2be5ce86453b813c224335792740f0b06b8a09c61d4866041333c17f4e3800e4 Red Hat Enterprise Linux for x86_64 9 SRPM python3.12-packaging-24.2-3.el9pc.src.rpm SHA-256: 8e84fdfb9cc6666e3a50b507ed34da4bb3a47fc396c509b1911c9aad3d131c3d rubygem-foreman_maintain-1.13.9-1.el9sat.src.rpm SHA-256: 4299ddfbd16a5682cb5a2774d00e4661e074b245b5e9fb440563273ce098d5f5 satellite-6.18.6-1.el9sat.src.rpm SHA-256: eabdbc0ac22321753373440c23a9412f05fa4ec765fb1173a34ca085b77c8dff x86_64 python3.12-packaging-24.2-3.el9pc.noarch.rpm SHA-256: 5a9b5b23961b4bf00ccdd6da62c23c1afff9ef8528fb7148a4d46ebdfa5c32a9 rubygem-foreman_maintain-1.13.9-1.el9sat.noarch.rpm SHA-256: 9bf366fdc4bf1129be08f9c764fd8ea4ee9cc1f1dc39067c1b47f34744b88bdb satellite-cli-6.18.6-1.el9sat.noarch.rpm SHA-256: 31c1e42f5b716926c25eded050b500e19014d7e0bb1144b8fd9d9a26d7a5437d The Red Hat