Skip to content
OpenAdvisories
Critical RHSA-2026:95653 1 CVE

Red Hat Security Advisory: Satellite 6 Client Update

Published Nov 13, 2026 · Updated Nov 13, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · Rhel Satellite Openvox 6 rhel_satellite_openvox:6::el10 openvox-agent 0:8.32.0-1.el10sat
Red Hat · Rhel Satellite Openvox 6 rhel_satellite_openvox:6::el7 openvox-agent 0:8.32.0-1.el7sat
Red Hat · Rhel Satellite Openvox 6 rhel_satellite_openvox:6::el8 openvox-agent 0:8.32.0-1.el8sat
Red Hat · Rhel Satellite Openvox 6 rhel_satellite_openvox:6::el9 openvox-agent 0:8.32.0-1.el9sat

Vulnerabilities 1

  • Critical 9.4
    CVE-2026-115731

    Report Deserialization Code Execution

    Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected releases, allows a client that holds any CA-signed agent certificate to execute arbitrary code on the Puppet Server as its service user by sub…

    Perforce Puppet Enterprise puppet puppet Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_95653.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-115731
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2566451
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-115731
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-115731
  • article
    https://github.com/OpenVoxProject/openvox/security/advisories/GHSA-ffr6-rwpm-p5wq
  • article
    https://portal.perforce.com/s/cve/a91Qi000003IaHpIAK/report-deserialization-code-execution
  • article
    https://voxpupuli.org/blog/2026/11/03/critical-cve-updates/
  • article
    https://www.openwall.com/lists/oss-security/2026/11/03/14