{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Red Hat Satellite 6.17 for RHEL 9: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/red-hat--red-hat-satellite-6-17-for-rhel-9/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/red-hat--red-hat-satellite-6-17-for-rhel-9/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · disclosed",
   "content_text": "A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerability due to an execution fall-through in the registry_authorize filter. While the application identifies unauthorized requests and triggers an error response via the unauthorized method, it fails to halt the execution of the current code path (missing return statement). This failure in the control flow allows the application to proceed into subsequent business logic and database validation filters. Consequently, the application reveals its internal state through differential responses, allowing an unprivileged attacker to enumerate valid Users, Organizations, and Products across the entire instance.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.16 (foreman 0:3.12.0.23-1.el8sat and 71 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.17 (foreman 0:3.14.0.22-1.el9sat and 34 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.18 (foreman 0:3.16.0.25-1.el9sat and 27 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.19 (foreman 0:3.18.0.14-1.el9sat and 21 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.16 (foreman 0:3.12.0.23-1.el8sat and 35 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.17 (foreman 0:3.14.0.22-1.el9sat and 16 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.18 (foreman 0:3.16.0.25-1.el9sat and 10 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.19 (foreman 0:3.18.0.14-1.el9sat and 5 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.16 (foreman 0:3.12.0.23-1.el8sat and 9 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.17 (foreman 0:3.14.0.22-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.18 (foreman 0:3.16.0.25-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.19 (foreman 0:3.18.0.14-1.el9sat and 2 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · disclosed",
   "content_text": "A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application fails to sanitize input parameters used in database queries within the RegistryProxiesController. The methods check_blob_push_org_label and get_matching_products_from_org take user-supplied labels directly from the request path and interpolate them into raw SQL fragments. This flaw is accessible to a user with only the create_personal_access_tokens permission, even if the user access is restricted, with no Organization or Location assigned.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.16 (foreman 0:3.12.0.23-1.el8sat and 71 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.17 (foreman 0:3.14.0.22-1.el9sat and 34 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.18 (foreman 0:3.16.0.25-1.el9sat and 27 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.19 (foreman 0:3.18.0.14-1.el9sat and 21 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.16 (foreman 0:3.12.0.23-1.el8sat and 35 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.17 (foreman 0:3.14.0.22-1.el9sat and 16 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.18 (foreman 0:3.16.0.25-1.el9sat and 10 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.19 (foreman 0:3.18.0.14-1.el9sat and 5 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.16 (foreman 0:3.12.0.23-1.el8sat and 9 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.17 (foreman 0:3.14.0.22-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.18 (foreman 0:3.16.0.25-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.19 (foreman 0:3.18.0.14-1.el9sat and 2 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · disclosed",
   "content_text": "A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not sanitized or quoted, a local attacker can inject shell metacharacters (e.g., ;, \u0026, |) to execute arbitrary system commands.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.16 (foreman 0:3.12.0.23-1.el8sat and 71 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.17 (foreman 0:3.14.0.22-1.el9sat and 34 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.18 (foreman 0:3.16.0.25-1.el9sat and 27 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.19 (foreman 0:3.18.0.14-1.el9sat and 21 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.16 (foreman 0:3.12.0.23-1.el8sat and 35 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.17 (foreman 0:3.14.0.22-1.el9sat and 16 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.18 (foreman 0:3.16.0.25-1.el9sat and 10 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.19 (foreman 0:3.18.0.14-1.el9sat and 5 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.16 (foreman 0:3.12.0.23-1.el8sat and 9 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.17 (foreman 0:3.14.0.22-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.18 (foreman 0:3.16.0.25-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.19 (foreman 0:3.18.0.14-1.el9sat and 2 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · disclosed",
   "content_text": "A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on Rails) component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system() method. By passing a single interpolated string to system(), the application invokes a system shell (/bin/sh) that interprets shell metacharacters (e.g., ;, |, \u0026).",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.16 (foreman 0:3.12.0.23-1.el8sat and 71 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.17 (foreman 0:3.14.0.22-1.el9sat and 34 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.18 (foreman 0:3.16.0.25-1.el9sat and 27 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.19 (foreman 0:3.18.0.14-1.el9sat and 21 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.16 (foreman 0:3.12.0.23-1.el8sat and 35 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.17 (foreman 0:3.14.0.22-1.el9sat and 16 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.18 (foreman 0:3.16.0.25-1.el9sat and 10 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.19 (foreman 0:3.18.0.14-1.el9sat and 5 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.16 (foreman 0:3.12.0.23-1.el8sat and 9 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.17 (foreman 0:3.14.0.22-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.18 (foreman 0:3.16.0.25-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.19 (foreman 0:3.18.0.14-1.el9sat and 2 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · disclosed",
   "content_text": "A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server. By manipulating the permitted methods list within the template rendering engine, an attacker can bypass the safemode sandbox isolation and execute unauthorized commands directly on the host system.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.16 (foreman 0:3.12.0.23-1.el8sat and 71 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.17 (foreman 0:3.14.0.22-1.el9sat and 34 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.18 (foreman 0:3.16.0.25-1.el9sat and 27 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.19 (foreman 0:3.18.0.14-1.el9sat and 21 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.16 (foreman 0:3.12.0.23-1.el8sat and 35 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.17 (foreman 0:3.14.0.22-1.el9sat and 16 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.18 (foreman 0:3.16.0.25-1.el9sat and 10 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.19 (foreman 0:3.18.0.14-1.el9sat and 5 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.16 (foreman 0:3.12.0.23-1.el8sat and 9 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.17 (foreman 0:3.14.0.22-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.18 (foreman 0:3.16.0.25-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96658/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96658/",
   "title": "CVE-2026-96658 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.19 (foreman 0:3.18.0.14-1.el9sat and 2 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · disclosed",
   "content_text": "A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests to template preview endpoints. By exploiting this issue, the user can access sensitive data, such as host root passwords. Furthermore, under insecure system configurations where Safemode protections are disabled, the flaw may allow the user to execute arbitrary commands as the Foreman system account.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.16 (foreman 0:3.12.0.23-1.el8sat and 71 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.17 (foreman 0:3.14.0.22-1.el9sat and 34 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.18 (foreman 0:3.16.0.25-1.el9sat and 27 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.19 (foreman 0:3.18.0.14-1.el9sat and 21 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.16 (foreman 0:3.12.0.23-1.el8sat and 35 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.17 (foreman 0:3.14.0.22-1.el9sat and 16 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.18 (foreman 0:3.16.0.25-1.el9sat and 10 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.19 (foreman 0:3.18.0.14-1.el9sat and 5 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.16 (foreman 0:3.12.0.23-1.el8sat and 9 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.17 (foreman 0:3.14.0.22-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.18 (foreman 0:3.16.0.25-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96659/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96659/",
   "title": "CVE-2026-96659 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.19 (foreman 0:3.18.0.14-1.el9sat and 2 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T16:23:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · disclosed",
   "content_text": "A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two distinct executable layers. This creates a multi-stage execution chain that allows for both Server-Side Template Injection (SSTI) and insecure deserialization. This vulnerability can lead to remote code execution, total infrastructure compromise and supply chain risk.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.16 (foreman 0:3.12.0.23-1.el8sat and 71 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.17 (foreman 0:3.14.0.22-1.el9sat and 34 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.18 (foreman 0:3.16.0.25-1.el9sat and 27 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.19 (foreman 0:3.18.0.14-1.el9sat and 21 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.16 (foreman 0:3.12.0.23-1.el8sat and 35 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.17 (foreman 0:3.14.0.22-1.el9sat and 16 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.18 (foreman 0:3.16.0.25-1.el9sat and 10 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.19 (foreman 0:3.18.0.14-1.el9sat and 5 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.16 (foreman 0:3.12.0.23-1.el8sat and 9 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.17 (foreman 0:3.14.0.22-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.18 (foreman 0:3.16.0.25-1.el9sat and 4 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite utils 6.19 (foreman 0:3.18.0.14-1.el9sat and 2 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12541/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12541/",
   "title": "CVE-2026-12541 · Red Hat Satellite 6.16 for RHEL 8 · disclosed",
   "content_text": "A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (during imports) before passing them to a Ruby system() call for execution. An attacker with permissions to execute foreman-rake (e.g., via a restricted sudo configuration) can append malicious shell commands to the provided file paths.",
   "date_published": "2026-10-01T16:22:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12541/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12541/",
   "title": "CVE-2026-12541 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.16 (foreman 0:3.12.0.23-1.el8sat and 71 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T16:22:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12541/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12541/",
   "title": "CVE-2026-12541 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.17 (foreman 0:3.14.0.22-1.el9sat and 34 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:22:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12541/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12541/",
   "title": "CVE-2026-12541 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.18 (foreman 0:3.16.0.25-1.el9sat and 27 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:22:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12541/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12541/",
   "title": "CVE-2026-12541 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite 6.19 (foreman 0:3.18.0.14-1.el9sat and 21 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:22:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12541/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12541/",
   "title": "CVE-2026-12541 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.16 (foreman 0:3.12.0.23-1.el8sat and 35 more)",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T16:22:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12541/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12541/",
   "title": "CVE-2026-12541 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.17 (foreman 0:3.14.0.22-1.el9sat and 16 more)",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T16:22:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12541/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12541/",
   "title": "CVE-2026-12541 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.18 (foreman 0:3.16.0.25-1.el9sat and 10 more)",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T16:22:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12541/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12541/",
   "title": "CVE-2026-12541 · Red Hat Satellite 6.16 for RHEL 8 · fixed in Red Hat satellite capsule 6.19 (foreman 0:3.18.0.14-1.el9sat and 5 more)",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T16:22:09Z"
  }
 ]
}