Red Hat Security Advisory: Satellite 6.18.6 Async Update

Fixed packages 10

Vulnerabilities 3

• High 8.9
  CVE-2026-27830

  c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property

  c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and `javax.naming.Reference` instances. Several c3p0 `ConnectionPoolDataSource` implementations have a property called `userOverridesAsString` whi…

  swaldman c3p0 c3p0 com.mchange:c3p0 Debian Ubuntu Maven
  Feb 26, 2026
• High 8.6
  CVE-2026-25990

  Pillow has an out-of-bounds write when loading PSD images

  Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.

  python-pillow Pillow open-webui kubeflow-pipelines-visualization-server Debian Ubuntu Alpine Wolfi PyPI
  Feb 11, 2026
• Medium 6.4
  CVE-2026-32282

  TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

  On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_N…

  Go standard library internal/syscall/unix golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 8, 2026

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2439170
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2442908
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2456336
• article
  https://issues.redhat.com/browse/SAT-45570
• article
  https://issues.redhat.com/browse/SAT-45571
• article
  https://issues.redhat.com/browse/SAT-45836
• article
  https://issues.redhat.com/browse/SAT-45883
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28385.json
• report
  https://access.redhat.com/security/cve/CVE-2026-25990
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-25990
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-25990
• article
  https://github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa
• article
  https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc
• report
  https://access.redhat.com/security/cve/CVE-2026-27830
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-27830
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-27830
• article
  https://github.com/swaldman/c3p0/commit/e14cbd8166e423e2e9a9d6f08b2add3433492d6e
• article
  https://github.com/swaldman/c3p0/security/advisories/GHSA-5476-xc4j-rqcv
• article
  https://mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal
• article
  https://www.mchange.com/projects/c3p0/#configuring_security
• article
  https://www.mchange.com/projects/c3p0/#security-note
• report
  https://access.redhat.com/security/cve/CVE-2026-32282
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-32282
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-32282
• article
  https://go.dev/cl/763761
• article
  https://go.dev/issue/78293
• article
  https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
• advisory
  https://pkg.go.dev/vuln/GO-2026-4864