{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Red Hat Satellite 6: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/red-hat--red-hat-satellite-6/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/red-hat--red-hat-satellite-6/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 disclosed",
   "content_text": "The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in AlmaLinux 10",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-100.3.el10_2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in AlmaLinux 8",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-81.3.el8_10.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in AlmaLinux 9",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-90.3.el9_8.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in openSUSE Tumbleweed",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-2.1.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in Rocky Linux 10",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-100.3.el10_2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in Rocky Linux 8",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-81.3.el8_10.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in Rocky Linux 9",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-90.3.el9_8.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Micro 5.3",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Micro 5.4",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Micro 5.5",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-module-for-development-tools-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Module for Development Tools 15 SP7",
   "content_text": "Fixed versions: ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-11-sp4-ltss-extreme-core",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE",
   "content_text": "Fixed versions: openssl-certs 2.92-0.7.39.1.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Server 15 SP4-LTSS",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Server 15 SP5-LTSS",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Server 15 SP6-LTSS",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107203/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107203/",
   "title": "CVE-2026-107203 disclosed",
   "content_text": "An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package. The domain and subnet interface API checks only that the caller holds a host permission. It does not apply the search limit on that permission, so the request is answered from every interface on the domain or subnet. A low-privileged network attacker or user must already be allowed to view some hosts and to view a domain or subnet shared with other hosts. They can request that domain or subnet's interfaces. The response includes interface records of hosts they are not allowed to view. If the attacker or user is also allowed to edit some hosts, they can submit a change to one of those interfaces. The interface is then saved with that change.",
   "date_published": "2026-10-12T05:10:29Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107193/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107193/",
   "title": "CVE-2026-107193 disclosed",
   "content_text": "A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. A low-privileged network attacker or user must already be allowed to delete filters for one role only. They can delete filters that belong to other unlocked roles. Those other roles then lose the access the deleted filters had granted.",
   "date_published": "2026-10-12T05:10:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89091/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89091/",
   "title": "CVE-2026-89091 disclosed",
   "content_text": "A flaw was found in ansible-core. When installing a collection with\n`ansible-galaxy collection install`, the archive extractor validates member\npaths using lexical path normalisation (os.path.abspath) instead of resolving\nsymbolic links (os.path.realpath), and it performs no containment check on\nsymlink-typed directory members before creating them. A crafted collection\ntarball can chain symlink directory entries so that a subsequent file member is\nwritten outside the intended destination directory. This allows an attacker who\ncan get a victim to install a malicious collection to overwrite arbitrary files\nwith the privileges of the user running ansible-galaxy, leading to code\nexecution on the control node. This is a bypass of the fix for CVE-2020-10691.",
   "date_published": "2026-10-08T21:49:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89091/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89091/",
   "title": "CVE-2026-89091 fixed in openSUSE Tumbleweed",
   "content_text": "Fixed versions: ansible-core 2.21.5-2.1, ansible-core-2.18 2.18.19-3.1, ansible-core-2.19 2.19.14-2.1, ansible-core-2.20 2.20.10-2.1.",
   "date_published": "2026-10-08T21:49:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107445/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107445/",
   "title": "CVE-2026-107445 disclosed",
   "content_text": "A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier. An authenticated user with permission to view flatpak remotes in one organization may be able to access flatpak remote repository information belonging to another organization. The same unscoped lookup is used by the mirror action, which may allow creating a repository in a product the user can edit that is configured with another organization's flatpak remote URL and stored remote credentials.",
   "date_published": "2026-10-08T03:43:03Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107444/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107444/",
   "title": "CVE-2026-107444 disclosed",
   "content_text": "A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with Docker tags belonging to another organization by supplying the tag identifier. This can result in unauthorized disclosure of repository configuration information across organization boundaries.",
   "date_published": "2026-10-08T03:41:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107151/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107151/",
   "title": "CVE-2026-107151 disclosed",
   "content_text": "Missing authentication has been found in remote-execution task updates in the smart_proxy_dynflow package. The progress and completion callbacks accept a report when the one-time token is missing. A network attacker or user must already know the identifier of a running job. This applies when remote execution is set to pull or pull-mqtt mode. They can send their own job output and mark the job as a success or a failure. The job is then recorded with that result.",
   "date_published": "2026-10-07T12:36:29Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-103870/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-103870/",
   "title": "CVE-2026-103870 disclosed",
   "content_text": "A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and packages there, as the Pulp worker user. An existing file or directory is not replaced. The flaw does not disclose data and does not stop the service.",
   "date_published": "2026-10-07T05:46:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-103869/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-103869/",
   "title": "CVE-2026-103869 disclosed",
   "content_text": "A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and reused for every token download in that worker. A user who can sync an Ansible remote that uses token refresh, and can point that remote at a server they control, receives an access token obtained for a different remote, and can reuse it at the service that issued it. Content stored in Pulp is not changed, and the service is not stopped.",
   "date_published": "2026-10-07T05:46:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-103868/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-103868/",
   "title": "CVE-2026-103868 disclosed",
   "content_text": "A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later downloads in the same worker. A user who can sync a container remote, and can point that remote at a server they control, receives the username, password, or bearer token stored for a different remote, and can reuse that credential at the upstream registry. Content stored in Pulp is not changed, and the service is not stopped.",
   "date_published": "2026-10-07T05:46:12Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106471/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106471/",
   "title": "CVE-2026-106471 disclosed",
   "content_text": "A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is accessible, instead of requiring access to every verified entity. A low-privilege authenticated attacker who can access the first referenced object can bypass authorization checks on subsequent objects. When target resource identifiers are known, this can enable unauthorized disclosure of consumer information and unauthorized modification of entitlements and related subscription resources, including across organizations.",
   "date_published": "2026-10-07T01:49:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 disclosed",
   "content_text": "A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerability due to an execution fall-through in the registry_authorize filter. While the application identifies unauthorized requests and triggers an error response via the unauthorized method, it fails to halt the execution of the current code path (missing return statement). This failure in the control flow allows the application to proceed into subsequent business logic and database validation filters. Consequently, the application reveals its internal state through differential responses, allowing an unprivileged attacker to enumerate valid Users, Organizations, and Products across the entire instance.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite capsule 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite capsule 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite capsule 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite capsule 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite utils 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite utils 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite utils 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56098/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56098/",
   "title": "CVE-2026-56098 fixed in Red Hat satellite utils 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T17:14:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 disclosed",
   "content_text": "A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application fails to sanitize input parameters used in database queries within the RegistryProxiesController. The methods check_blob_push_org_label and get_matching_products_from_org take user-supplied labels directly from the request path and interpolate them into raw SQL fragments. This flaw is accessible to a user with only the create_personal_access_tokens permission, even if the user access is restricted, with no Organization or Location assigned.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite capsule 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite capsule 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite capsule 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite capsule 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite utils 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite utils 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite utils 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-56097/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-56097/",
   "title": "CVE-2026-56097 fixed in Red Hat satellite utils 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T17:14:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 disclosed",
   "content_text": "A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and incorporates them directly into a string that is then executed by eval to expand file paths. Because the input is not sanitized or quoted, a local attacker can inject shell metacharacters (e.g., ;, \u0026, |) to execute arbitrary system commands.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite capsule 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite capsule 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite capsule 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite capsule 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite utils 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite utils 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite utils 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12542/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12542/",
   "title": "CVE-2026-12542 fixed in Red Hat satellite utils 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 disclosed",
   "content_text": "A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on Rails) component distributed with Satellite due to the insecure interpolation of the $EDITOR environment variable into the Ruby system() method. By passing a single interpolated string to system(), the application invokes a system shell (/bin/sh) that interprets shell metacharacters (e.g., ;, |, \u0026).",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite capsule 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite capsule 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite capsule 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite capsule 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite utils 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite utils 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite utils 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12545/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12545/",
   "title": "CVE-2026-12545 fixed in Red Hat satellite utils 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T17:14:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 disclosed",
   "content_text": "A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed through two distinct executable layers. This creates a multi-stage execution chain that allows for both Server-Side Template Injection (SSTI) and insecure deserialization. This vulnerability can lead to remote code execution, total infrastructure compromise and supply chain risk.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el8sat, foreman-dynflow-sidekiq 0:3.12.0.23-1.el9sat, foreman-ec2 0:3.12.0.23-1.el8sat, foreman-ec2 0:3.12.0.23-1.el9sat, foreman-journald 0:3.12.0.23-1.el8sat, foreman-journald 0:3.12.0.23-1.el9sat, foreman-libvirt 0:3.12.0.23-1.el8sat, foreman-libvirt 0:3.12.0.23-1.el9sat, foreman-openstack 0:3.12.0.23-1.el8sat, foreman-openstack 0:3.12.0.23-1.el9sat, foreman-ovirt 0:3.12.0.23-1.el8sat, foreman-ovirt 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, foreman-postgresql 0:3.12.0.23-1.el8sat, foreman-postgresql 0:3.12.0.23-1.el9sat, foreman-redis 0:3.12.0.23-1.el8sat, foreman-redis 0:3.12.0.23-1.el9sat, foreman-service 0:3.12.0.23-1.el8sat, foreman-service 0:3.12.0.23-1.el9sat, foreman-telemetry 0:3.12.0.23-1.el8sat, foreman-telemetry 0:3.12.0.23-1.el9sat, foreman-vmware 0:3.12.0.23-1.el8sat, foreman-vmware 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution 0:13.2.8-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el8sat, rubygem-foreman_remote_execution-cockpit 0:13.2.8-2.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, rubygem-katello 0:4.14.0.23-1.el8sat, rubygem-katello 0:4.14.0.23-1.el9sat, rubygem-safemode 0:1.5.0-2.el8sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.el8sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-dynflow-sidekiq 0:3.14.0.22-1.el9sat, foreman-ec2 0:3.14.0.22-1.el9sat, foreman-journald 0:3.14.0.22-1.el9sat, foreman-libvirt 0:3.14.0.22-1.el9sat, foreman-openstack 0:3.14.0.22-1.el9sat, foreman-ovirt 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, foreman-postgresql 0:3.14.0.22-1.el9sat, foreman-redis 0:3.14.0.22-1.el9sat, foreman-service 0:3.14.0.22-1.el9sat, foreman-telemetry 0:3.14.0.22-1.el9sat, foreman-vmware 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:15.0.2-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:15.0.2-2.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, rubygem-katello 0:4.16.0.20-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-dynflow-sidekiq 0:3.16.0.25-1.el9sat, foreman-ec2 0:3.16.0.25-1.el9sat, foreman-journald 0:3.16.0.25-1.el9sat, foreman-libvirt 0:3.16.0.25-1.el9sat, foreman-openstack 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, foreman-postgresql 0:3.16.0.25-1.el9sat, foreman-redis 0:3.16.0.25-1.el9sat, foreman-service 0:3.16.0.25-1.el9sat, foreman-telemetry 0:3.16.0.25-1.el9sat, foreman-vmware 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.2.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.2.3-2.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, rubygem-katello 0:4.18.0.24-1.el9sat, rubygem-safemode 0:1.5.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-dynflow-sidekiq 0:3.18.0.14-1.el9sat, foreman-ec2 0:3.18.0.14-1.el9sat, foreman-journald 0:3.18.0.14-1.el9sat, foreman-libvirt 0:3.18.0.14-1.el9sat, foreman-openstack 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, foreman-postgresql 0:3.18.0.14-1.el9sat, foreman-redis 0:3.18.0.14-1.el9sat, foreman-service 0:3.18.0.14-1.el9sat, foreman-telemetry 0:3.18.0.14-1.el9sat, foreman-vmware 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, rubygem-foreman_remote_execution 0:16.5.3-2.el9sat, rubygem-foreman_remote_execution-cockpit 0:16.5.3-2.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat, rubygem-katello 0:4.20.0.11-1.el9sat, yggdrasil-worker-forwarder 0:0.1.0-2.1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-capsule-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite capsule 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-debug 0:3.12.0.23-1.el8sat, foreman-debug 0:3.12.0.23-1.el9sat, foreman-pcp 0:3.12.0.23-1.el8sat, foreman-pcp 0:3.12.0.23-1.el9sat, python-dynaconf 0:3.2.13-1.el8pc, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el8pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:4.9.2-5.el8pc, python-lxml 0:4.9.2-5.el9pc, python-lxml-debugsource 0:4.9.2-5.el8pc, python-lxml-debugsource 0:4.9.2-5.el9pc, python-pulpcore 0:3.49.39-4.el8pc, python-pulpcore 0:3.49.39-4.el9pc, python-sqlparse 0:0.6.0-1.el8pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el8pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el8pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:4.9.2-5.el8pc, python3.11-lxml 0:4.9.2-5.el9pc, python3.11-lxml-debuginfo 0:4.9.2-5.el8pc, python3.11-lxml-debuginfo 0:4.9.2-5.el9pc, python3.11-pulpcore 0:3.49.39-4.el8pc, python3.11-pulpcore 0:3.49.39-4.el9pc, python3.11-sqlparse 0:0.6.0-1.el8pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-capsule 0:6.16.14-1.el8sat, satellite-capsule 0:6.16.14-1.el9sat, satellite-common 0:6.16.14-1.el8sat, satellite-common 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-capsule-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite capsule 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-debug 0:3.14.0.22-1.el9sat, foreman-pcp 0:3.14.0.22-1.el9sat, python-dynaconf 0:3.2.13-1.el9pc, python-gitpython 0:3.1.62-1.el9pc, python-lxml 0:5.3.1-2.el9pc, python-lxml-debugsource 0:5.3.1-2.el9pc, python-sqlparse 0:0.6.0-1.el9pc, python3.11-dynaconf 0:3.2.13-1.el9pc, python3.11-gitpython 0:3.1.62-1.el9pc, python3.11-lxml 0:5.3.1-2.el9pc, python3.11-lxml-debuginfo 0:5.3.1-2.el9pc, python3.11-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.17.12-1.el9sat, satellite-capsule 0:6.17.12-1.el9sat, satellite-common 0:6.17.12-1.el9sat, satellite-obsolete-packages 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-capsule-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite capsule 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-debug 0:3.16.0.25-1.el9sat, foreman-pcp 0:3.16.0.25-1.el9sat, pulpcore-obsolete-packages 0:1.3.1-6.el9pc, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc, satellite 0:6.18.10-1.el9sat, satellite-capsule 0:6.18.10-1.el9sat, satellite-common 0:6.18.10-1.el9sat, satellite-obsolete-packages 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-capsule-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite capsule 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-debug 0:3.18.0.14-1.el9sat, foreman-pcp 0:3.18.0.14-1.el9sat, python3.12-dynaconf 0:3.2.13-2.el9pc, python3.12-gitpython 0:3.1.62-1.el9pc, python3.12-sqlparse 0:0.6.0-1.el9pc.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-utils-6.16",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite utils 6.16",
   "content_text": "Fixed versions: foreman 0:3.12.0.23-1.el8sat, foreman 0:3.12.0.23-1.el9sat, foreman-cli 0:3.12.0.23-1.el8sat, foreman-cli 0:3.12.0.23-1.el9sat, rubygem-hammer_cli 0:3.12.0-2.el8sat, rubygem-hammer_cli 0:3.12.0-2.el9sat, satellite 0:6.16.14-1.el8sat, satellite 0:6.16.14-1.el9sat, satellite-cli 0:6.16.14-1.el8sat, satellite-cli 0:6.16.14-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-utils-6.17",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite utils 6.17",
   "content_text": "Fixed versions: foreman 0:3.14.0.22-1.el9sat, foreman-cli 0:3.14.0.22-1.el9sat, rubygem-hammer_cli 0:3.14.0-2.el9sat, satellite 0:6.17.12-1.el9sat, satellite-cli 0:6.17.12-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-utils-6.18",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite utils 6.18",
   "content_text": "Fixed versions: foreman 0:3.16.0.25-1.el9sat, foreman-cli 0:3.16.0.25-1.el9sat, rubygem-hammer_cli 0:3.16.0-2.el9sat, satellite 0:6.18.10-1.el9sat, satellite-cli 0:6.18.10-1.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-12544/fixed/red-hat-satellite-utils-6.19",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-12544/",
   "title": "CVE-2026-12544 fixed in Red Hat satellite utils 6.19",
   "content_text": "Fixed versions: foreman 0:3.18.0.14-1.el9sat, foreman-cli 0:3.18.0.14-1.el9sat, rubygem-hammer_cli 0:3.18.0-2.el9sat.",
   "date_published": "2026-10-01T16:22:15Z"
  }
 ]
}