Red Hat Satellite (foreman, python-pillow, go): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 6

• High 8.8
  CVE-2026-5136

  Foreman: foreman: privilege escalation to administrator-level access via usergroup role assignment manipulation

  A flaw was found in Foreman. The Usergroup model in Foreman does not properly validate role assignments against the calling user's permissions. This allows an authenticated user with usergroup management permissions to attach arbitrary roles, including admini…

  Red Hat Red Hat Satellite 6 Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.17 for RHEL 9
  Jul 1, 2026
• High 8.7
  CVE-2026-40192

  Pillow is vulnerable to a FITS GZIP decompression bomb

  Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially crafted FITS file could cause unbounded memo…

  python-pillow Pillow open-webui kubeflow-pipelines-visualization-server Debian Ubuntu Wolfi PyPI
  Apr 15, 2026
• Medium 6.5
  CVE-2026-5135

  Foreman: foreman: unauthorized modification of host configurations via broken access control

  A flaw was found in Foreman. This broken access control vulnerability allows an authenticated user with host-edit permissions to retarget an existing lookup value override to a different host. This is achieved by modifying the match field through nested host …

  Red Hat Red Hat Satellite 6 Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.17 for RHEL 9
  Jul 1, 2026
• Medium 6.5
  CVE-2026-5142

  Foreman: foreman: cross-tenant private ssh key disclosure via taxonomy scoping bypass

  A flaw was found in foreman. Authenticated users with 'view_keypairs' permission can bypass taxonomy scoping, allowing them to download private SSH (Secure Shell) keys from other organizations by directly querying key pair IDs. This vulnerability leads to cro…

  Red Hat Red Hat Satellite 6 Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.17 for RHEL 9
  Jul 1, 2026
• Medium 6.4
  CVE-2026-32282

  TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

  On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root. The Linux fchmodat syscall silently ignores the AT_SYMLINK_N…

  Go standard library internal/syscall/unix golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 8, 2026
• Medium 4.3
  CVE-2026-5138

  Foreman: foreman: information disclosure via improper validation of nested request parameters

  A flaw was found in Foreman. An authenticated user with host-edit permissions could exploit a cross-tenant information disclosure vulnerability. This flaw occurs because the taxonomy_scope controller method does not properly validate organization and location…

  Red Hat Red Hat Satellite 6 Red Hat Satellite 6.16 for RHEL 8 Red Hat Satellite 6.17 for RHEL 9
  Jul 1, 2026

Revision history

1. 2026-10-21 #13

   Neue Updates von Splunk-SVD aufgenommen

2. 2026-09-13 #12

   Neue Updates von IBM aufgenommen

3. 2026-08-31 #11

   Neue Updates von Red Hat aufgenommen

4. 2026-08-13 #10

   Neue Updates von Red Hat aufgenommen

5. 2026-08-05 #9

   Neue Updates von Red Hat aufgenommen

6. 2026-08-02 #8

   Neue Updates von Red Hat aufgenommen

7. 2026-07-29 #7

   Neue Updates von Red Hat aufgenommen

8. 2026-07-20 #6

   Neue Updates von Red Hat aufgenommen

9. 2026-07-19 #5

   Neue Updates von Oracle Linux aufgenommen

10. 2026-07-15 #4

    Neue Updates von Red Hat aufgenommen

11. 2026-07-09 #3

    Neue Updates von Red Hat aufgenommen

12. 2026-07-05 #2

    Neue Updates von IBM aufgenommen

13. 2026-07-01 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:34366 vom 2026-07-01
  https://access.redhat.com/errata/RHSA-2026:34366
• Red Hat Security Advisory RHSA-2026:34367 vom 2026-07-01
  https://access.redhat.com/errata/RHSA-2026:34367
• Red Hat Security Advisory RHSA-2026:34368 vom 2026-07-01
  https://access.redhat.com/errata/RHSA-2026:34368
• IBM Security Bulletin 7279133 vom 2026-07-06
  https://www.ibm.com/support/pages/node/7279133
• Red Hat Security Advisory RHSA-2026:37275 vom 2026-07-09
  https://access.redhat.com/errata/RHSA-2026:37275
• Red Hat Security Advisory RHSA-2026:40118 vom 2026-07-15
  https://access.redhat.com/errata/RHSA-2026:40118
• Oracle Linux Security Advisory ELSA-2026-19136 vom 2026-07-17
  https://linux.oracle.com/errata/ELSA-2026-19136.html
• Oracle Linux Security Advisory ELSA-2026-25999 vom 2026-07-17
  http://linux.oracle.com/errata/ELSA-2026-25999.html
• Oracle Linux Security Advisory ELSA-2026-19137 vom 2026-07-17
  https://linux.oracle.com/errata/ELSA-2026-19137.html
• Red Hat Security Advisory RHSA-2026:42049 vom 2026-07-20
  https://access.redhat.com/errata/RHSA-2026:42049
• Red Hat Security Advisory RHSA-2026:47952 vom 2026-07-29
  https://access.redhat.com/errata/RHSA-2026:47952
• Red Hat Security Advisory RHSA-2026:48036 vom 2026-07-30
  https://access.redhat.com/errata/RHSA-2026:48036
• Red Hat Security Advisory RHSA-2026:49600 vom 2026-08-03
  https://access.redhat.com/errata/RHSA-2026:49600
• Red Hat Security Advisory RHSA-2026:51033 vom 2026-08-06
  https://access.redhat.com/errata/RHSA-2026:51033
• Red Hat Security Advisory RHSA-2026:54757 vom 2026-08-14
  https://access.redhat.com/errata/RHSA-2026:54757
• Red Hat Security Advisory RHSA-2026:61627 vom 2026-08-31
  https://access.redhat.com/errata/RHSA-2026:61627
• Red Hat Security Advisory RHSA-2026:61628 vom 2026-08-31
  https://access.redhat.com/errata/RHSA-2026:61628
• Red Hat Security Advisory RHSA-2026:61629 vom 2026-08-31
  https://access.redhat.com/errata/RHSA-2026:61629
• IBM Security Bulletin 7287209 vom 2026-09-11
  https://www.ibm.com/support/pages/node/7287209
• Splunk Security Advisory SVD-2026-1012 vom 2026-10-22
  https://advisory.splunk.com/advisories/SVD-2026-1012