{"id":"RHSA-2026:92858","summary":"Red Hat Security Advisory: Satellite 6.16 EUS security update","modified":"2026-11-14T13:00:38.380330881Z","published":"2026-11-13T18:48:47Z","withdrawn":"2026-11-14T13:00:38.380330764Z","related":["GO-2026-5970","GO-2026-6607","GO-2026-6608","GO-2026-6609","GO-2026-6611","GO-2026-6809"],"upstream":["CVE-2026-111943","CVE-2026-18660","CVE-2026-19203","CVE-2026-56852","CVE-2026-59646","CVE-2026-63072","CVE-2026-63076","CVE-2026-68494","CVE-2026-68497","CVE-2026-78667","CVE-2026-78669","CVE-2026-84445","CVE-2026-8924","CVE-2026-89407","CVE-2026-89425","CVE-2026-94440","CVE-2026-97031"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:92858"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#important"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496765"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2504233"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510193"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511026"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517560"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517561"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529768"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531964"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533175"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2538720"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539084"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548334"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548336"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548341"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548344"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553134"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556068"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92858.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-8924"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-8924"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8924"},{"type":"ARTICLE","url":"https://curl.se/docs/CVE-2026-8924.html"},{"type":"ARTICLE","url":"https://curl.se/docs/CVE-2026-8924.json"},{"type":"ARTICLE","url":"https://hackerone.com/reports/3733905"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-18660"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-18660"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18660"},{"type":"ARTICLE","url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-7wfj-j486-mxrf"},{"type":"ARTICLE","url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/212"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-19203"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-19203"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19203"},{"type":"ARTICLE","url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-xc35-c22g-239h"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-56852"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-56852"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56852"},{"type":"ARTICLE","url":"https://go.dev/cl/794100"},{"type":"ARTICLE","url":"https://go.dev/issue/80142"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-5970"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-59646"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-59646"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59646"},{"type":"ARTICLE","url":"https://github.com/bcgit/bc-java/commit/2d98721e71bbd822ffa0f84e088eea645cf679fa"},{"type":"ARTICLE","url":"https://github.com/bcgit/bc-java/commit/2ea38942c7917f6d7ab4de93d8a5336d021df0d9"},{"type":"ARTICLE","url":"https://github.com/bcgit/bc-java/wiki/CVE-2026-59646"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-63072"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-63072"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63072"},{"type":"ARTICLE","url":"https://openssl-library.org/news/secadv/20260825.txt"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-63076"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-63076"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63076"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-68494"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-68494"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68494"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/pull/1611"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-72hv-8253-57qq"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-18401"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-68497"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-68497"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68497"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-databind/pull/6127"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-78667"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-78667"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78667"},{"type":"ARTICLE","url":"https://go.dev/cl/847309"},{"type":"ARTICLE","url":"https://go.dev/issue/81858"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6609"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-78669"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-78669"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669"},{"type":"ARTICLE","url":"https://go.dev/cl/847186"},{"type":"ARTICLE","url":"https://go.dev/cl/847308"},{"type":"ARTICLE","url":"https://go.dev/issue/81742"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6611"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-84445"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-84445"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84445"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/issues/9354"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/pull/9365"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/pull/9366"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/pull/9367"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/releases/tag/v1.82.2"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/releases/tag/v1.83.2"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89407"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-89407"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89407"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/issues/1649"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/pull/1650"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/pull/1701"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89425"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-89425"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89425"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/pull/1698"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-94440"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-94440"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94440"},{"type":"ARTICLE","url":"https://go.dev/cl/847307"},{"type":"ARTICLE","url":"https://go.dev/issue/81741"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6608"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-97031"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-97031"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97031"},{"type":"ARTICLE","url":"https://go.dev/cl/847312"},{"type":"ARTICLE","url":"https://go.dev/issue/81855"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6607"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-111943"},{"type":"ARTICLE","url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-012"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-111943"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111943"},{"type":"ARTICLE","url":"https://github.com/golang/go/issues/82345"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6809"}],"affected":[{"package":{"name":"openvox-agent","ecosystem":"Red Hat:satellite_capsule:6.16::el8","purl":"pkg:rpm/redhat/openvox-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.31.1-1.el8sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92858.json"}},{"package":{"name":"openvox-agent","ecosystem":"Red Hat:satellite:6.16::el8","purl":"pkg:rpm/redhat/openvox-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.31.1-1.el8sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92858.json"}},{"package":{"name":"openvox-agent","ecosystem":"Red Hat:satellite_capsule:6.16::el9","purl":"pkg:rpm/redhat/openvox-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.31.1-1.el9sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92858.json"}},{"package":{"name":"openvox-agent","ecosystem":"Red Hat:satellite:6.16::el9","purl":"pkg:rpm/redhat/openvox-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.31.1-1.el9sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92858.json"}},{"package":{"name":"openvox-server","ecosystem":"Red Hat:satellite_capsule:6.16::el8","purl":"pkg:rpm/redhat/openvox-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.17.0-1.el8sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92858.json"}},{"package":{"name":"openvox-server","ecosystem":"Red Hat:satellite:6.16::el8","purl":"pkg:rpm/redhat/openvox-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.17.0-1.el8sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92858.json"}},{"package":{"name":"openvox-server","ecosystem":"Red Hat:satellite_capsule:6.16::el9","purl":"pkg:rpm/redhat/openvox-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.17.0-1.el9sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92858.json"}},{"package":{"name":"openvox-server","ecosystem":"Red Hat:satellite:6.16::el9","purl":"pkg:rpm/redhat/openvox-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.17.0-1.el9sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92858.json"}},{"package":{"name":"yggdrasil-worker-forwarder","ecosystem":"Red Hat:satellite:6.16::el8","purl":"pkg:rpm/redhat/yggdrasil-worker-forwarder"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-1.el8sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92858.json"}},{"package":{"name":"yggdrasil-worker-forwarder","ecosystem":"Red Hat:satellite:6.16::el9","purl":"pkg:rpm/redhat/yggdrasil-worker-forwarder"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-1.el9sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92858.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N"}]}