Skip to content
OpenAdvisories
Critical 1 exploited CVE RHSA-2026:95652 7 CVEs

Red Hat Security Advisory: Satellite 6.19 security update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Satellite Capsule 6 satellite_capsule:6.19::el9 openvox-agent 0:8.32.0-1.el9sat
Red Hat · Satellite Capsule 6 satellite_capsule:6.19::el9 openvox-server 0:8.18.0-1.el9sat
Red Hat · Satellite 6 satellite:6.19::el9 openvox-agent 0:8.32.0-1.el9sat
Red Hat · Satellite 6 satellite:6.19::el9 openvox-server 0:8.18.0-1.el9sat

Vulnerabilities 7

  • Critical 10.0
    CVE-2026-97229 Exploited Public exploit Scanner template EPSS 69%

    Integer Overflow or Wraparound in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server…

    GitLab GitLab gitlab ruby Web / CMS Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Oct 29, 2026
  • Critical 10.0
    CVE-2026-110264 Public exploit

    Integer Overflow or Wraparound in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could hav…

    GitLab GitLab ruby ruby3.1 Web / CMS Debian Azure Linux Alpine Wolfi
  • Critical 9.9
    CVE-2026-89078

    Double Free in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due…

    GitLab GitLab ruby gitlab-runner-helper-19.2 Web / CMS Debian Alpine Wolfi
  • Critical 9.9
    CVE-2026-93577

    Integer Overflow or Wraparound in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to execute arbitrary code on the GitLab server due…

    GitLab GitLab ruby gitlab-runner-19.2 Web / CMS Debian Alpine Wolfi
  • Critical 9.4
    CVE-2026-115731

    Report Deserialization Code Execution

    Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by sub…

    Perforce Puppet Enterprise puppet puppet Debian Ubuntu Azure Linux
  • Critical 9.0
    CVE-2026-115732

    Certificate Name Authorization Bypass

    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows a client that holds a CA-signed certificate whose name extends or shortens an authorized hostname to be authori…

    Perforce Puppet Enterprise puppetserver trapperkeeper-authorization-clojure Debian Ubuntu
  • High 7.5
    CVE-2026-104895

    jackson-dataformat-smile: unbounded eager byte[] allocation for raw binary in the async parser allows OutOfMemoryError denial of service

    The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untrusted input to allocate a byte[] before the body is read, with no upper bound and no overflow check. On the raw-binary marker 0xFD, _decodeVInt() compute…

    FasterXML jackson-dataformat-smile jackson-dataformats-binary jackson-dataformat-smile Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95652.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-89078
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2539836
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-89078
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-89078
  • article
    https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-1-released/
  • article
    https://gitlab.com/gitlab-org/gitlab/-/work_items/628577
  • article
    https://hackerone.com/reports/4019059
  • article
    https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves/
  • report
    https://access.redhat.com/security/cve/CVE-2026-93577
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2539842
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-93577
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-93577
  • article
    https://gitlab.com/gitlab-org/gitlab/-/work_items/629758
  • article
    https://hackerone.com/reports/3995696
  • report
    https://access.redhat.com/security/cve/CVE-2026-97229
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2550153
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-97229
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-97229
  • article
    https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/
  • article
    https://gitlab.com/gitlab-org/gitlab/-/work_items/630686
  • article
    https://hackerone.com/reports/4055749
  • article
    https://hackerone.com/reports/4058589
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2026-104895
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2562517
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-104895
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-104895
  • article
    https://github.com/FasterXML/jackson-dataformats-binary/security/advisories/GHSA-h3c2-2m49-r49w
  • report
    https://access.redhat.com/security/cve/CVE-2026-110264
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2558632
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-110264
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-110264
  • article
    https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
  • article
    https://gitlab.com/gitlab-org/gitlab/-/work_items/633633
  • article
    https://hackerone.com/reports/4093475
  • report
    https://access.redhat.com/security/cve/CVE-2026-115731
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2566451