CVE-2026-12541
Foreman: command injection in foreman-rake database tasks
A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (during imports) before passing them to a Ruby system() call for execution. An attacker with permissions to execute foreman-rake (e.g., via a restricted sudo configuration) can append malicious shell commands to the provided file paths.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
8.2
Foreman: command injection in foreman-rake database tasks
A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (during imports) before passing them to a Ruby system() call for execution. An attacker with permissions to execute foreman-rake (e.g., via a restricted sudo configuration) can append malicious shell commands to the provided file paths.
- Record
CVE-2026-12541- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
EUVDEUVD-2026-90918
8.2
A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (during imports) before passing them to a Ruby system() call for execution. An attacker with permissions to execute foreman-rake (e.g., via a restricted sudo configuration) can append malicious shell commands to the provided file paths.
- Record
EUVD-2026-90918- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rcq3-9wpf-p347
8.2
A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db...
A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (during imports) before passing them to a Ruby system() call for execution. An attacker with permissions to execute foreman-rake (e.g., via a restricted sudo configuration) can append malicious shell commands to the provided file paths.
- Record
GHSA-rcq3-9wpf-p347- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
NVD
8.2
A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-supplied input in the destination parameter (during backups) and the file parameter (during imports) before passing them to a Ruby system() call for execution. An attacker with permissions to execute foreman-rake (e.g., via a restricted sudo configuration) can append malicious shell commands to the provided file paths.
- Record
CVE-2026-12541- CVSS 3.1
- 8.2 High
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - Weakness
- CWE-78
- Updated
- 2026-11-02
OSVRHSA-2026:74503
9.1
Red Hat Security Advisory: Satellite 6.19.5 Async Update
- Record
RHSA-2026:74503- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:74504
9.1
Red Hat Security Advisory: Satellite 6.18.10 Async Update
- Record
RHSA-2026:74504- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:74505
9.1
Red Hat Security Advisory: Satellite 6.17.12 Async Update
- Record
RHSA-2026:74505- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
OSVRHSA-2026:74506
9.1
Red Hat Security Advisory: Satellite 6.16.14 Async Update
- Record
RHSA-2026:74506- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
rubygem-foreman_remote_executionRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:16.5.3-2.el9sat | 0:16.5.3-2.el9sat |
rubygem-foreman_remote_execution-cockpitRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:16.5.3-2.el9sat | 0:16.5.3-2.el9sat |
foremanRed Hat:satellite_capsule:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-debugRed Hat:satellite_capsule:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-pcpRed Hat:satellite_capsule:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foremanRed Hat:satellite_utils:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-cliRed Hat:satellite_utils:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foremanRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-cliRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-debugRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
Show 240 moreShow less
| Package | Affected | Fixed |
|---|---|---|
foreman-dynflow-sidekiqRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-ec2Red Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-journaldRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-libvirtRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-openstackRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-pcpRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-postgresqlRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-redisRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-serviceRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-telemetryRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
foreman-vmwareRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0.14-1.el9sat | 0:3.18.0.14-1.el9sat |
rubygem-hammer_cliRed Hat:satellite_utils:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0-2.el9sat | 0:3.18.0-2.el9sat |
rubygem-hammer_cliRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.18.0-2.el9sat | 0:3.18.0-2.el9sat |
python3.12-dynaconfRed Hat:satellite_capsule:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.2.13-2.el9pc | 0:3.2.13-2.el9pc |
python3.12-dynaconfRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.2.13-2.el9pc | 0:3.2.13-2.el9pc |
yggdrasil-worker-forwarderRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:0.1.0-2.1.el9sat | 0:0.1.0-2.1.el9sat |
python3.12-sqlparseRed Hat:satellite_capsule:6.19::el9 From an advisory covering 31 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
python3.12-sqlparseRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
rubygem-katelloRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:4.20.0.11-1.el9sat | 0:4.20.0.11-1.el9sat |
python3.12-gitpythonRed Hat:satellite_capsule:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
python3.12-gitpythonRed Hat:satellite:6.19::el9 From an advisory covering 31 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
rubygem-foreman_remote_executionRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:16.2.3-2.el9sat | 0:16.2.3-2.el9sat |
rubygem-foreman_remote_execution-cockpitRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:16.2.3-2.el9sat | 0:16.2.3-2.el9sat |
foremanRed Hat:satellite_capsule:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foremanRed Hat:satellite_utils:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foremanRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-debugRed Hat:satellite_capsule:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-pcpRed Hat:satellite_capsule:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-cliRed Hat:satellite_utils:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-cliRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-debugRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-dynflow-sidekiqRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-ec2Red Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-journaldRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-libvirtRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-openstackRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-pcpRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-postgresqlRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-redisRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-serviceRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-telemetryRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
foreman-vmwareRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0.25-1.el9sat | 0:3.16.0.25-1.el9sat |
rubygem-hammer_cliRed Hat:satellite_utils:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0-2.el9sat | 0:3.16.0-2.el9sat |
rubygem-hammer_cliRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.16.0-2.el9sat | 0:3.16.0-2.el9sat |
python3.12-dynaconfRed Hat:satellite_capsule:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.2.13-2.el9pc | 0:3.2.13-2.el9pc |
python3.12-dynaconfRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.2.13-2.el9pc | 0:3.2.13-2.el9pc |
yggdrasil-worker-forwarderRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:0.1.0-2.1.el9sat | 0:0.1.0-2.1.el9sat |
pulpcore-obsolete-packagesRed Hat:satellite_capsule:6.18::el9 From an advisory covering 26 CVEs |
before 0:1.3.1-6.el9pc | 0:1.3.1-6.el9pc |
python3.12-gitpythonRed Hat:satellite_capsule:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
python3.12-sqlparseRed Hat:satellite_capsule:6.18::el9 From an advisory covering 26 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
satelliteRed Hat:satellite_capsule:6.18::el9 From an advisory covering 26 CVEs |
before 0:6.18.10-1.el9sat | 0:6.18.10-1.el9sat |
satellite-capsuleRed Hat:satellite_capsule:6.18::el9 From an advisory covering 26 CVEs |
before 0:6.18.10-1.el9sat | 0:6.18.10-1.el9sat |
satellite-commonRed Hat:satellite_capsule:6.18::el9 From an advisory covering 26 CVEs |
before 0:6.18.10-1.el9sat | 0:6.18.10-1.el9sat |
satellite-obsolete-packagesRed Hat:satellite_capsule:6.18::el9 From an advisory covering 26 CVEs |
before 0:6.18.10-1.el9sat | 0:6.18.10-1.el9sat |
satelliteRed Hat:satellite_utils:6.18::el9 From an advisory covering 26 CVEs |
before 0:6.18.10-1.el9sat | 0:6.18.10-1.el9sat |
satellite-cliRed Hat:satellite_utils:6.18::el9 From an advisory covering 26 CVEs |
before 0:6.18.10-1.el9sat | 0:6.18.10-1.el9sat |
pulpcore-obsolete-packagesRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:1.3.1-6.el9pc | 0:1.3.1-6.el9pc |
python3.12-gitpythonRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
python3.12-sqlparseRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
rubygem-katelloRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:4.18.0.24-1.el9sat | 0:4.18.0.24-1.el9sat |
rubygem-safemodeRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:1.5.0-2.el9sat | 0:1.5.0-2.el9sat |
satelliteRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:6.18.10-1.el9sat | 0:6.18.10-1.el9sat |
satellite-cliRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:6.18.10-1.el9sat | 0:6.18.10-1.el9sat |
satellite-commonRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:6.18.10-1.el9sat | 0:6.18.10-1.el9sat |
satellite-obsolete-packagesRed Hat:satellite:6.18::el9 From an advisory covering 26 CVEs |
before 0:6.18.10-1.el9sat | 0:6.18.10-1.el9sat |
rubygem-foreman_remote_executionRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:15.0.2-2.el9sat | 0:15.0.2-2.el9sat |
rubygem-foreman_remote_execution-cockpitRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:15.0.2-2.el9sat | 0:15.0.2-2.el9sat |
foremanRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-debugRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-pcpRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foremanRed Hat:satellite_utils:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-cliRed Hat:satellite_utils:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foremanRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-cliRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-debugRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-dynflow-sidekiqRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-ec2Red Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-journaldRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-libvirtRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-openstackRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-ovirtRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-pcpRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-postgresqlRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-redisRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-serviceRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-telemetryRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
foreman-vmwareRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0.22-1.el9sat | 0:3.14.0.22-1.el9sat |
rubygem-hammer_cliRed Hat:satellite_utils:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0-2.el9sat | 0:3.14.0-2.el9sat |
rubygem-hammer_cliRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.14.0-2.el9sat | 0:3.14.0-2.el9sat |
python-dynaconfRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.2.13-1.el9pc | 0:3.2.13-1.el9pc |
python3.11-dynaconfRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.2.13-1.el9pc | 0:3.2.13-1.el9pc |
python-dynaconfRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.2.13-1.el9pc | 0:3.2.13-1.el9pc |
python3.11-dynaconfRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.2.13-1.el9pc | 0:3.2.13-1.el9pc |
yggdrasil-worker-forwarderRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:0.1.0-2.1.el9sat | 0:0.1.0-2.1.el9sat |
python-gitpythonRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
python-lxmlRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:5.3.1-2.el9pc | 0:5.3.1-2.el9pc |
python-lxml-debugsourceRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:5.3.1-2.el9pc | 0:5.3.1-2.el9pc |
python-sqlparseRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
python3.11-gitpythonRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
python3.11-lxmlRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:5.3.1-2.el9pc | 0:5.3.1-2.el9pc |
python3.11-lxml-debuginfoRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:5.3.1-2.el9pc | 0:5.3.1-2.el9pc |
python3.11-sqlparseRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
satelliteRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:6.17.12-1.el9sat | 0:6.17.12-1.el9sat |
satellite-capsuleRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:6.17.12-1.el9sat | 0:6.17.12-1.el9sat |
satellite-commonRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:6.17.12-1.el9sat | 0:6.17.12-1.el9sat |
satellite-obsolete-packagesRed Hat:satellite_capsule:6.17::el9 From an advisory covering 32 CVEs |
before 0:6.17.12-1.el9sat | 0:6.17.12-1.el9sat |
satelliteRed Hat:satellite_utils:6.17::el9 From an advisory covering 32 CVEs |
before 0:6.17.12-1.el9sat | 0:6.17.12-1.el9sat |
satellite-cliRed Hat:satellite_utils:6.17::el9 From an advisory covering 32 CVEs |
before 0:6.17.12-1.el9sat | 0:6.17.12-1.el9sat |
python-gitpythonRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
python-lxmlRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:5.3.1-2.el9pc | 0:5.3.1-2.el9pc |
python-lxml-debugsourceRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:5.3.1-2.el9pc | 0:5.3.1-2.el9pc |
python-sqlparseRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
python3.11-gitpythonRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
python3.11-lxmlRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:5.3.1-2.el9pc | 0:5.3.1-2.el9pc |
python3.11-lxml-debuginfoRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:5.3.1-2.el9pc | 0:5.3.1-2.el9pc |
python3.11-sqlparseRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
rubygem-katelloRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:4.16.0.20-1.el9sat | 0:4.16.0.20-1.el9sat |
rubygem-safemodeRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:1.5.0-2.el9sat | 0:1.5.0-2.el9sat |
satelliteRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:6.17.12-1.el9sat | 0:6.17.12-1.el9sat |
satellite-cliRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:6.17.12-1.el9sat | 0:6.17.12-1.el9sat |
satellite-commonRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:6.17.12-1.el9sat | 0:6.17.12-1.el9sat |
satellite-obsolete-packagesRed Hat:satellite:6.17::el9 From an advisory covering 32 CVEs |
before 0:6.17.12-1.el9sat | 0:6.17.12-1.el9sat |
rubygem-foreman_remote_executionRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:13.2.8-2.el8sat | 0:13.2.8-2.el8sat |
rubygem-foreman_remote_execution-cockpitRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:13.2.8-2.el8sat | 0:13.2.8-2.el8sat |
rubygem-foreman_remote_executionRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:13.2.8-2.el9sat | 0:13.2.8-2.el9sat |
rubygem-foreman_remote_execution-cockpitRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:13.2.8-2.el9sat | 0:13.2.8-2.el9sat |
foremanRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-debugRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-pcpRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foremanRed Hat:satellite_utils:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-cliRed Hat:satellite_utils:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foremanRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-cliRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-debugRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-dynflow-sidekiqRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-ec2Red Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-journaldRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-libvirtRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-openstackRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-ovirtRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-pcpRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-postgresqlRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-redisRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-serviceRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-telemetryRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foreman-vmwareRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el8sat | 0:3.12.0.23-1.el8sat |
foremanRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-debugRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-pcpRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foremanRed Hat:satellite_utils:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-cliRed Hat:satellite_utils:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foremanRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-cliRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-debugRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-dynflow-sidekiqRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-ec2Red Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-journaldRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-libvirtRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-openstackRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-ovirtRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-pcpRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-postgresqlRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-redisRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-serviceRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-telemetryRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
foreman-vmwareRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0.23-1.el9sat | 0:3.12.0.23-1.el9sat |
rubygem-hammer_cliRed Hat:satellite_utils:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0-2.el8sat | 0:3.12.0-2.el8sat |
rubygem-hammer_cliRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.12.0-2.el8sat | 0:3.12.0-2.el8sat |
rubygem-hammer_cliRed Hat:satellite_utils:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0-2.el9sat | 0:3.12.0-2.el9sat |
rubygem-hammer_cliRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.12.0-2.el9sat | 0:3.12.0-2.el9sat |
python-dynaconfRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.2.13-1.el8pc | 0:3.2.13-1.el8pc |
python3.11-dynaconfRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.2.13-1.el8pc | 0:3.2.13-1.el8pc |
python-dynaconfRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.2.13-1.el8pc | 0:3.2.13-1.el8pc |
python3.11-dynaconfRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.2.13-1.el8pc | 0:3.2.13-1.el8pc |
python-dynaconfRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.2.13-1.el9pc | 0:3.2.13-1.el9pc |
python3.11-dynaconfRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.2.13-1.el9pc | 0:3.2.13-1.el9pc |
python-dynaconfRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.2.13-1.el9pc | 0:3.2.13-1.el9pc |
python3.11-dynaconfRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.2.13-1.el9pc | 0:3.2.13-1.el9pc |
yggdrasil-worker-forwarderRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:0.1.0-2.el8sat | 0:0.1.0-2.el8sat |
yggdrasil-worker-forwarderRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:0.1.0-2.1.el9sat | 0:0.1.0-2.1.el9sat |
python-gitpythonRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.1.62-1.el8pc | 0:3.1.62-1.el8pc |
python-lxmlRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el8pc | 0:4.9.2-5.el8pc |
python-lxml-debugsourceRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el8pc | 0:4.9.2-5.el8pc |
python-pulpcoreRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.49.39-4.el8pc | 0:3.49.39-4.el8pc |
python-sqlparseRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:0.6.0-1.el8pc | 0:0.6.0-1.el8pc |
python3.11-gitpythonRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.1.62-1.el8pc | 0:3.1.62-1.el8pc |
python3.11-lxmlRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el8pc | 0:4.9.2-5.el8pc |
python3.11-lxml-debuginfoRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el8pc | 0:4.9.2-5.el8pc |
python3.11-pulpcoreRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.49.39-4.el8pc | 0:3.49.39-4.el8pc |
python3.11-sqlparseRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:0.6.0-1.el8pc | 0:0.6.0-1.el8pc |
satelliteRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el8sat | 0:6.16.14-1.el8sat |
satellite-capsuleRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el8sat | 0:6.16.14-1.el8sat |
satellite-commonRed Hat:satellite_capsule:6.16::el8 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el8sat | 0:6.16.14-1.el8sat |
satelliteRed Hat:satellite_utils:6.16::el8 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el8sat | 0:6.16.14-1.el8sat |
satellite-cliRed Hat:satellite_utils:6.16::el8 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el8sat | 0:6.16.14-1.el8sat |
python-gitpythonRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.1.62-1.el8pc | 0:3.1.62-1.el8pc |
python-lxmlRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el8pc | 0:4.9.2-5.el8pc |
python-lxml-debugsourceRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el8pc | 0:4.9.2-5.el8pc |
python-pulpcoreRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.49.39-4.el8pc | 0:3.49.39-4.el8pc |
python-sqlparseRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:0.6.0-1.el8pc | 0:0.6.0-1.el8pc |
python3.11-gitpythonRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.1.62-1.el8pc | 0:3.1.62-1.el8pc |
python3.11-lxmlRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el8pc | 0:4.9.2-5.el8pc |
python3.11-lxml-debuginfoRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el8pc | 0:4.9.2-5.el8pc |
python3.11-pulpcoreRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:3.49.39-4.el8pc | 0:3.49.39-4.el8pc |
python3.11-sqlparseRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:0.6.0-1.el8pc | 0:0.6.0-1.el8pc |
rubygem-katelloRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:4.14.0.23-1.el8sat | 0:4.14.0.23-1.el8sat |
rubygem-safemodeRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:1.5.0-2.el8sat | 0:1.5.0-2.el8sat |
satelliteRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el8sat | 0:6.16.14-1.el8sat |
satellite-cliRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el8sat | 0:6.16.14-1.el8sat |
satellite-commonRed Hat:satellite:6.16::el8 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el8sat | 0:6.16.14-1.el8sat |
python-gitpythonRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
python-lxmlRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el9pc | 0:4.9.2-5.el9pc |
python-lxml-debugsourceRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el9pc | 0:4.9.2-5.el9pc |
python-pulpcoreRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.49.39-4.el9pc | 0:3.49.39-4.el9pc |
python-sqlparseRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
python3.11-gitpythonRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
python3.11-lxmlRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el9pc | 0:4.9.2-5.el9pc |
python3.11-lxml-debuginfoRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el9pc | 0:4.9.2-5.el9pc |
python3.11-pulpcoreRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.49.39-4.el9pc | 0:3.49.39-4.el9pc |
python3.11-sqlparseRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
satelliteRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el9sat | 0:6.16.14-1.el9sat |
satellite-capsuleRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el9sat | 0:6.16.14-1.el9sat |
satellite-commonRed Hat:satellite_capsule:6.16::el9 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el9sat | 0:6.16.14-1.el9sat |
satelliteRed Hat:satellite_utils:6.16::el9 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el9sat | 0:6.16.14-1.el9sat |
satellite-cliRed Hat:satellite_utils:6.16::el9 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el9sat | 0:6.16.14-1.el9sat |
python-gitpythonRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
python-lxmlRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el9pc | 0:4.9.2-5.el9pc |
python-lxml-debugsourceRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el9pc | 0:4.9.2-5.el9pc |
python-pulpcoreRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.49.39-4.el9pc | 0:3.49.39-4.el9pc |
python-sqlparseRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
python3.11-gitpythonRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.1.62-1.el9pc | 0:3.1.62-1.el9pc |
python3.11-lxmlRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el9pc | 0:4.9.2-5.el9pc |
python3.11-lxml-debuginfoRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:4.9.2-5.el9pc | 0:4.9.2-5.el9pc |
python3.11-pulpcoreRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:3.49.39-4.el9pc | 0:3.49.39-4.el9pc |
python3.11-sqlparseRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:0.6.0-1.el9pc | 0:0.6.0-1.el9pc |
rubygem-katelloRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:4.14.0.23-1.el9sat | 0:4.14.0.23-1.el9sat |
rubygem-safemodeRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:1.5.0-2.el9sat | 0:1.5.0-2.el9sat |
satelliteRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el9sat | 0:6.16.14-1.el9sat |
satellite-cliRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el9sat | 0:6.16.14-1.el9sat |
satellite-commonRed Hat:satellite:6.16::el9 From an advisory covering 31 CVEs |
before 0:6.16.14-1.el9sat | 0:6.16.14-1.el9sat |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | EUVD | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-12541 is a high vulnerability (CVSS 8.2) in Theforeman Foreman, published October 1, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.24%, the 69th percentile. No source names a fixed version.
References
access.redhat.com/errata/RHSA-2026:74503
access.redhat.com/errata/RHSA-2026:74504
access.redhat.com/errata/RHSA-2026:74505
access.redhat.com/errata/RHSA-2026:74506
access.redhat.com/security/cve/CVE-2026-12541
bugzilla.redhat.com/show_bug.cgi?id=2489970
Show 194 moreShow less
openwall.com/lists/oss-security/2026/10/07/8
nvd.nist.gov/vuln/detail/CVE-2026-12541
github.com/advisories/GHSA-rcq3-9wpf-p347
access.redhat.com/security/updates/classification
issues.redhat.com/browse/SAT-50183
issues.redhat.com/browse/SAT-50184
issues.redhat.com/browse/SAT-50185
issues.redhat.com/browse/SAT-50187
issues.redhat.com/browse/SAT-50584
issues.redhat.com/browse/SAT-50904
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74503.json
access.redhat.com/security/cve/CVE-2026-12405
bugzilla.redhat.com/show_bug.cgi?id=2488952
cve.org/CVERecord?id=CVE-2026-12405
nvd.nist.gov/vuln/detail/CVE-2026-12405
access.redhat.com/security/cve/CVE-2026-12423
bugzilla.redhat.com/show_bug.cgi?id=2488956
cve.org/CVERecord?id=CVE-2026-12423
nvd.nist.gov/vuln/detail/CVE-2026-12423
access.redhat.com/security/cve/CVE-2026-12540
bugzilla.redhat.com/show_bug.cgi?id=2489969
cve.org/CVERecord?id=CVE-2026-12540
nvd.nist.gov/vuln/detail/CVE-2026-12540
cve.org/CVERecord?id=CVE-2026-12541
access.redhat.com/security/cve/CVE-2026-12542
bugzilla.redhat.com/show_bug.cgi?id=2489971
cve.org/CVERecord?id=CVE-2026-12542
nvd.nist.gov/vuln/detail/CVE-2026-12542
access.redhat.com/security/cve/CVE-2026-12544
bugzilla.redhat.com/show_bug.cgi?id=2489992
cve.org/CVERecord?id=CVE-2026-12544
nvd.nist.gov/vuln/detail/CVE-2026-12544
access.redhat.com/security/cve/CVE-2026-12545
bugzilla.redhat.com/show_bug.cgi?id=2489993
cve.org/CVERecord?id=CVE-2026-12545
nvd.nist.gov/vuln/detail/CVE-2026-12545
access.redhat.com/security/cve/CVE-2026-33154
bugzilla.redhat.com/show_bug.cgi?id=2449774
cve.org/CVERecord?id=CVE-2026-33154
nvd.nist.gov/vuln/detail/CVE-2026-33154
github.com/dynaconf/dynaconf/commit/2fbb45ee36b8c0caa5b924fe19f3c1a5e8603fa7
github.com/dynaconf/dynaconf/releases/tag/3.2.13
github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35p
access.redhat.com/security/cve/CVE-2026-33818
bugzilla.redhat.com/show_bug.cgi?id=2515815
cve.org/CVERecord?id=CVE-2026-33818
nvd.nist.gov/vuln/detail/CVE-2026-33818
go.dev/cl/814980
go.dev/issue/80405
groups.google.com/g/golang-announce/c/94pEornpRlI
pkg.go.dev/vuln/GO-2026-5972
access.redhat.com/security/cve/CVE-2026-42504
bugzilla.redhat.com/show_bug.cgi?id=2484204
cve.org/CVERecord?id=CVE-2026-42504
nvd.nist.gov/vuln/detail/CVE-2026-42504
go.dev/cl/774481
go.dev/issue/79217
groups.google.com/g/golang-announce/c/tKs3rmcBcKw
pkg.go.dev/vuln/GO-2026-5038
access.redhat.com/security/cve/CVE-2026-45623
bugzilla.redhat.com/show_bug.cgi?id=2507595
cve.org/CVERecord?id=CVE-2026-45623
nvd.nist.gov/vuln/detail/CVE-2026-45623
github.com/postcss/postcss/security/advisories/GHSA-6g55-p6wh-862q
access.redhat.com/security/cve/CVE-2026-54284
bugzilla.redhat.com/show_bug.cgi?id=2517527
cve.org/CVERecord?id=CVE-2026-54284
nvd.nist.gov/vuln/detail/CVE-2026-54284
github.com/andialbrecht/sqlparse/commit/939b129e24c0ad5d51368b1aa72fffcaca76f06f
github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9f
access.redhat.com/security/cve/CVE-2026-56097
bugzilla.redhat.com/show_bug.cgi?id=2490543
cve.org/CVERecord?id=CVE-2026-56097
nvd.nist.gov/vuln/detail/CVE-2026-56097
access.redhat.com/security/cve/CVE-2026-56098
bugzilla.redhat.com/show_bug.cgi?id=2490542
cve.org/CVERecord?id=CVE-2026-56098
nvd.nist.gov/vuln/detail/CVE-2026-56098
access.redhat.com/security/cve/CVE-2026-56858
bugzilla.redhat.com/show_bug.cgi?id=2515838
cve.org/CVERecord?id=CVE-2026-56858
nvd.nist.gov/vuln/detail/CVE-2026-56858
go.dev/cl/807100
go.dev/issue/80435
pkg.go.dev/vuln/GO-2026-6091
access.redhat.com/security/cve/CVE-2026-56860
bugzilla.redhat.com/show_bug.cgi?id=2515820
cve.org/CVERecord?id=CVE-2026-56860
nvd.nist.gov/vuln/detail/CVE-2026-56860
go.dev/cl/803681
go.dev/issue/80494
pkg.go.dev/vuln/GO-2026-6218
access.redhat.com/security/cve/CVE-2026-56862
bugzilla.redhat.com/show_bug.cgi?id=2515839
cve.org/CVERecord?id=CVE-2026-56862
nvd.nist.gov/vuln/detail/CVE-2026-56862
go.dev/cl/804261
go.dev/issue/80528
pkg.go.dev/vuln/GO-2026-6090
access.redhat.com/security/cve/CVE-2026-59879
bugzilla.redhat.com/show_bug.cgi?id=2498158
cve.org/CVERecord?id=CVE-2026-59879
nvd.nist.gov/vuln/detail/CVE-2026-59879
github.com/immutable-js/immutable-js/commit/a1a1ee412dcaa380ab325196283d06594ffe4b84
github.com/immutable-js/immutable-js/commit/f0bc997d8eb9886aff2236635aa210a95a04304a
github.com/immutable-js/immutable-js/releases/tag/v4.3.9
github.com/immutable-js/immutable-js/releases/tag/v5.1.8
github.com/immutable-js/immutable-js/security/advisories/GHSA-v56q-mh7h-f735
access.redhat.com/security/cve/CVE-2026-59893
bugzilla.redhat.com/show_bug.cgi?id=2517523
cve.org/CVERecord?id=CVE-2026-59893
nvd.nist.gov/vuln/detail/CVE-2026-59893
github.com/andialbrecht/sqlparse/commit/d1d80602741f77ec78e5a04ce4719244cf32352e
github.com/andialbrecht/sqlparse/security/advisories/GHSA-prg7-hcfm-mfcr
access.redhat.com/security/cve/CVE-2026-71491
bugzilla.redhat.com/show_bug.cgi?id=2517518
cve.org/CVERecord?id=CVE-2026-71491
nvd.nist.gov/vuln/detail/CVE-2026-71491
github.com/andialbrecht/sqlparse/commit/ef2012a5eeb491e604dea2b00d516904a3830c87
github.com/andialbrecht/sqlparse/security/advisories/GHSA-f2ff-p2ww-7p4p
access.redhat.com/security/cve/CVE-2026-73086
bugzilla.redhat.com/show_bug.cgi?id=2514175
cve.org/CVERecord?id=CVE-2026-73086
nvd.nist.gov/vuln/detail/CVE-2026-73086
github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4
github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3
github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac
github.com/ai/nanoid/releases/tag/3.3.12
github.com/ai/nanoid/releases/tag/5.1.11
github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w
access.redhat.com/security/cve/CVE-2026-75899
bugzilla.redhat.com/show_bug.cgi?id=2521778
cve.org/CVERecord?id=CVE-2026-75899
nvd.nist.gov/vuln/detail/CVE-2026-75899
cna.openjsf.org/security-advisories.html
github.com/fastify/fast-uri/security/advisories/GHSA-fph4-wmhf-6fwf
access.redhat.com/security/cve/CVE-2026-75931
bugzilla.redhat.com/show_bug.cgi?id=2521777
cve.org/CVERecord?id=CVE-2026-75931
nvd.nist.gov/vuln/detail/CVE-2026-75931
github.com/fastify/fast-uri/security/advisories/GHSA-5jgf-p345-68v8
access.redhat.com/security/cve/CVE-2026-75975
bugzilla.redhat.com/show_bug.cgi?id=2521779
cve.org/CVERecord?id=CVE-2026-75975
nvd.nist.gov/vuln/detail/CVE-2026-75975
github.com/fastify/fast-uri/security/advisories/GHSA-f65p-4m7j-42xc
access.redhat.com/security/cve/CVE-2026-78679
bugzilla.redhat.com/show_bug.cgi?id=2523205
cve.org/CVERecord?id=CVE-2026-78679
nvd.nist.gov/vuln/detail/CVE-2026-78679
github.com/gitpython-developers/GitPython/security/advisories/GHSA-3wxw-xv34-2frg
vulncheck.com/advisories/gitpython-before-arbitrary-file-read-via-tagreference-create
access.redhat.com/security/cve/CVE-2026-79654
bugzilla.redhat.com/show_bug.cgi?id=2523348
cve.org/CVERecord?id=CVE-2026-79654
nvd.nist.gov/vuln/detail/CVE-2026-79654
github.com/Katello/katello/pull/11847
projects.theforeman.org/issues/39701
access.redhat.com/security/cve/CVE-2026-84292
bugzilla.redhat.com/show_bug.cgi?id=2527747
cve.org/CVERecord?id=CVE-2026-84292
nvd.nist.gov/vuln/detail/CVE-2026-84292
github.com/fastify/fast-uri/security/advisories/GHSA-qw65-cvwx-89v3
bugzilla.redhat.com/show_bug.cgi?id=2527756
cve.org/CVERecord?id=CVE-2026-84394
nvd.nist.gov/vuln/detail/CVE-2026-84394
github.com/fastify/fast-uri/security/advisories/GHSA-58mr-gqgx-xq4g
bugzilla.redhat.com/show_bug.cgi?id=2530744
cve.org/CVERecord?id=CVE-2026-87817
nvd.nist.gov/vuln/detail/CVE-2026-87817
github.com/gitpython-developers/GitPython/security/advisories/GHSA-239g-whfq-7xj9
vulncheck.com/advisories/gitpython-before-3.1.60-remote-code-execution-via-git-directory-impersonation
bugzilla.redhat.com/show_bug.cgi?id=2534185
cve.org/CVERecord?id=CVE-2026-96658
nvd.nist.gov/vuln/detail/CVE-2026-96658
bugzilla.redhat.com/show_bug.cgi?id=2536844
cve.org/CVERecord?id=CVE-2026-96659
nvd.nist.gov/vuln/detail/CVE-2026-96659
issues.redhat.com/browse/SAT-50952
issues.redhat.com/browse/SAT-50953
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74504.json
github.com/gitpython-developers/GitPython/releases/tag/3.1.47
go.dev/cl/795540
go.dev/issue/80205
pkg.go.dev/vuln/GO-2026-6089
issues.redhat.com/browse/SAT-50544
issues.redhat.com/browse/SAT-50545
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74505.json
vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-and-read
vulncheck.com/advisories/gitpython-before-environment-variable-exfiltration-via-remote-add
vulncheck.com/advisories/gitpython-before-remote-code-execution-via-template
vulncheck.com/advisories/gitpython-before-arbitrary-file-overwrite-via-diff
vulncheck.com/advisories/gitpython-before-remote-code-execution-via-kwarg-value-smuggling
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74506.json
Left out here: 53 references. The JSON record has them.