{"id":"RHSA-2026:92861","summary":"Red Hat Security Advisory: Satellite 6.19 security update","modified":"2026-11-14T13:00:38.612992032Z","published":"2026-11-13T18:48:48Z","withdrawn":"2026-11-14T13:00:38.612991901Z","related":["GO-2026-6089","GO-2026-6607","GO-2026-6608","GO-2026-6609","GO-2026-6611","GO-2026-6809"],"upstream":["CVE-2026-110856","CVE-2026-110857","CVE-2026-110858","CVE-2026-110859","CVE-2026-111497","CVE-2026-111943","CVE-2026-112390","CVE-2026-112391","CVE-2026-112392","CVE-2026-112393","CVE-2026-112397","CVE-2026-112398","CVE-2026-112399","CVE-2026-112400","CVE-2026-112402","CVE-2026-112403","CVE-2026-112404","CVE-2026-112405","CVE-2026-112406","CVE-2026-112892","CVE-2026-112893","CVE-2026-112894","CVE-2026-112895","CVE-2026-112896","CVE-2026-112897","CVE-2026-114145","CVE-2026-15307","CVE-2026-18660","CVE-2026-19203","CVE-2026-56853","CVE-2026-59646","CVE-2026-68497","CVE-2026-73619","CVE-2026-78667","CVE-2026-78669","CVE-2026-78677","CVE-2026-84445","CVE-2026-87819","CVE-2026-89407","CVE-2026-89425","CVE-2026-94440","CVE-2026-96640","CVE-2026-96643","CVE-2026-96778","CVE-2026-97031","CVE-2026-97687","CVE-2026-97689"],"references":[{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2026:92861"},{"type":"ARTICLE","url":"https://access.redhat.com/security/updates/classification/#critical"},{"type":"ADVISORY","url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92861.json"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-15307"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511095"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-15307"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15307"},{"type":"ARTICLE","url":"https://docs.djangoproject.com/en/dev/releases/security/"},{"type":"ARTICLE","url":"https://github.com/django/django/commit/115ffd0463a765ab1cc93de18e94b5459b8a300e"},{"type":"ARTICLE","url":"https://github.com/django/django/commit/208f80cb682868b584ed0a78f23e4ba6304212aa"},{"type":"ARTICLE","url":"https://github.com/django/django/commit/39b3e2d0c743a338def6c473086ebc06865e86b6"},{"type":"ARTICLE","url":"https://github.com/django/django/commit/f1949c1f9758947ade984c895ff16bef46f56520"},{"type":"ARTICLE","url":"https://groups.google.com/g/django-announce"},{"type":"ARTICLE","url":"https://www.djangoproject.com/weblog/2026/aug/04/security-releases/"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-18660"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553134"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-18660"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18660"},{"type":"ARTICLE","url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-7wfj-j486-mxrf"},{"type":"ARTICLE","url":"https://gitlab.eclipse.org/security/cve-assignment/-/work_items/212"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-19203"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529768"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-19203"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19203"},{"type":"ARTICLE","url":"https://github.com/jetty/jetty.project/security/advisories/GHSA-xc35-c22g-239h"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-56853"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515827"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-56853"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-56853"},{"type":"ARTICLE","url":"https://go.dev/cl/795540"},{"type":"ARTICLE","url":"https://go.dev/issue/80205"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-announce/c/94pEornpRlI"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6089"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-59646"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510193"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-59646"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59646"},{"type":"ARTICLE","url":"https://github.com/bcgit/bc-java/commit/2d98721e71bbd822ffa0f84e088eea645cf679fa"},{"type":"ARTICLE","url":"https://github.com/bcgit/bc-java/commit/2ea38942c7917f6d7ab4de93d8a5336d021df0d9"},{"type":"ARTICLE","url":"https://github.com/bcgit/bc-java/wiki/CVE-2026-59646"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-68497"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531964"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-68497"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68497"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-databind/pull/6127"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-73619"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2515265"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-73619"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73619"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-539m-9xh6-q6rr"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-read-via-repo-archive"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-78667"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548334"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-78667"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78667"},{"type":"ARTICLE","url":"https://go.dev/cl/847309"},{"type":"ARTICLE","url":"https://go.dev/issue/81858"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-announce/c/U2fTuyDJznI"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6609"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-78669"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548344"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-78669"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78669"},{"type":"ARTICLE","url":"https://go.dev/cl/847186"},{"type":"ARTICLE","url":"https://go.dev/cl/847308"},{"type":"ARTICLE","url":"https://go.dev/issue/81742"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-announce/c/ZPwCyRUuGBs"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6611"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-78677"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2523215"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-78677"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78677"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-8mcc-hrx5-hvxc"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/gitpython-before-path-traversal-via-separate-git-dir"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-84445"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533175"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-84445"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84445"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/commit/3822494d8ea03b992c089fd2a195f041762fffb7"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/commit/8668b69c167df908b6b3666dcbf40992b9e932a4"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/commit/93e31b48545e2a8aaeb6e06b47fb249f94e6297f"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/issues/9354"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/pull/9365"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/pull/9366"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/pull/9367"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/releases/tag/v1.82.2"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/releases/tag/v1.83.2"},{"type":"ARTICLE","url":"https://github.com/grpc/grpc-go/security/advisories/GHSA-2v4p-qf9q-27wj"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-87819"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2530742"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-87819"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87819"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-g5vv-9gxw-82hx"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/gitpython-before-3.1.60-denial-of-service-via-redos"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89407"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2538720"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-89407"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89407"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/issues/1649"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/pull/1650"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/pull/1701"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-89425"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539084"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-89425"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89425"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/pull/1698"},{"type":"ARTICLE","url":"https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-94440"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548341"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-94440"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94440"},{"type":"ARTICLE","url":"https://go.dev/cl/847307"},{"type":"ARTICLE","url":"https://go.dev/issue/81741"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6608"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-96640"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558576"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-96640"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96640"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/6f0e7ee1f9c2fe227906f8a4b926e6622b702bc7"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/pull/10093"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/releases/tag/13.0.0"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-mrfp-p49p-3hf2"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-96643"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558566"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-96643"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96643"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/806e38381c781f32bbd22f4cd026678acd40fd6c"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/pull/10073"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-g4qv-2jxx-769h"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-96778"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558567"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-96778"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96778"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/02561b8dc6117d5670d4b469fecdd02c70854f9b"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/pull/10124"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-g7cr-3p24-7wf7"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-97031"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2548336"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-97031"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97031"},{"type":"ARTICLE","url":"https://go.dev/cl/847312"},{"type":"ARTICLE","url":"https://go.dev/issue/81855"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6607"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-97687"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543255"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-97687"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97687"},{"type":"ARTICLE","url":"https://github.com/urllib3/urllib3/commit/07408cec79d1856d81bb42c74a904a24fdb9e465"},{"type":"ARTICLE","url":"https://github.com/urllib3/urllib3/commit/b6447295fff7b38fdffc67e0df9712d60cef3cc3"},{"type":"ARTICLE","url":"https://github.com/urllib3/urllib3/pull/5093"},{"type":"ARTICLE","url":"https://github.com/urllib3/urllib3/releases/tag/2.8.0"},{"type":"ARTICLE","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-8988-9cw3-xx77"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-97689"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2543245"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-97689"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97689"},{"type":"ARTICLE","url":"https://github.com/urllib3/urllib3/commit/cd770b059b543be29298ea5c52afb0b1b090f5ed"},{"type":"ARTICLE","url":"https://github.com/urllib3/urllib3/security/advisories/GHSA-vxq7-64xx-v4gw"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-110856"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552977"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-110856"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110856"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/gitpython-before-3.2.0-redos-via-re-actor-epoch-in-parse-actor-and-date"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-110857"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552966"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-110857"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110857"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/gitpython-before-3.2.0-command-execution-via-ls-remote-ext-urls"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-110858"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552959"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-110858"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110858"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-f9j4-qggq-h239"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/gitpython-3.1.30-before-3.2.0-command-injection-via-remote-pull-refspec"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-110859"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2552989"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-110859"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110859"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2"},{"type":"ARTICLE","url":"https://www.vulncheck.com/advisories/gitpython-before-3.2.0-arbitrary-file-read-via-head-checkout-branch-name"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-111497"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558973"},{"type":"ARTICLE","url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-015"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-111497"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111497"},{"type":"ARTICLE","url":"https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high"},{"type":"ARTICLE","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-111943"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556068"},{"type":"ARTICLE","url":"https://access.redhat.com/security/vulnerabilities/RHSB-2026-012"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-111943"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111943"},{"type":"ARTICLE","url":"https://github.com/golang/go/issues/82345"},{"type":"ARTICLE","url":"https://groups.google.com/g/golang-nuts/c/K22sG2AYnKU"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6809"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112390"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555848"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112390"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112390"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/26cb3ed061173b817b9ee4b6f507cb0e1e293218"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-22hg-r758-rrw9"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112391"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555851"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112391"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112391"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/94cb11c44ff7345414da17ebfea1598a529ad9cd"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-254f-3936-288h"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112392"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555866"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112392"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112392"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/443e3130a8c11594fd0e296afad497e11e678961"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-27h8-gf7j-v5hc"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112393"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555846"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112393"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112393"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/11582e5ffbdceb973d5ee593f3105af5a9852b40"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-332p-7hrc-92wf"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112397"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555868"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112397"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112397"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/18f7c0dfee93063c51db6ed0ca8c4da2999dcb64"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-58r4-6rv3-gfh8"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112398"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555867"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112398"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112398"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/242a059aedc1935097d9aa1dc3f099750467ba75"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-5x8w-8jj5-q52h"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112399"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555863"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112399"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112399"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/f1acfc54c53502948d0d14121872061df931db48"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xm2-6676-qcp9"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112400"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555864"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112400"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112400"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/6faed707cfb760a4cbd726ddc8406f576cf35bf7"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-65qm-jvmh-6pqg"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112402"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555859"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112402"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112402"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/aafa6c75f7cdabb9f409a8aac7c780bea31d08d9"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-7mwm-ghpf-9vrm"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112403"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555871"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112403"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112403"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-8g5g-8vmr-9782"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112404"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555874"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112404"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112404"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/1d4773e6cea0c4a2814e6d4cdc099bbcf56da6ce"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-c6hw-5grf-ff96"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112405"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555873"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112405"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112405"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/b6ee66e8b2c2c0932bdf65f963268d9f2927ef86"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-cp9v-662q-vvx9"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112406"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2556322"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112406"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112406"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/b3ebf20c694f2f12537a629c30229a1d5a53f777"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-f2g6-542v-9j58"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112892"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2559393"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112892"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112892"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/5dcb630b9798efd91929cb873d677aeee6ed0bb3"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-gg2r-wvfm-q9rx"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112893"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555878"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112893"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112893"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/a7416de7f3a43128179d2cf68df3240ea8dafe13"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-j4m9-6w36-pw47"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112894"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555875"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112894"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112894"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/f6a852555f1a1bdff7781abf25f1a3b8bd6ce6cb"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-jg86-v3jv-hrpm"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112895"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555879"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112895"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112895"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/e2ae7eacad6de68c37eb28b633a97bebacf2c5bf"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-p4wg-p73j-c528"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112896"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555890"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112896"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112896"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/commit/d03dc3c587a9b0bdc9e4304d70d59a635a87b742"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-pchr-8j38-3x4p"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-112897"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2555888"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-112897"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112897"},{"type":"ARTICLE","url":"https://github.com/python-pillow/Pillow/security/advisories/GHSA-q45j-58j2-45rg"},{"type":"REPORT","url":"https://access.redhat.com/security/cve/CVE-2026-114145"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2558563"},{"type":"ADVISORY","url":"https://www.cve.org/CVERecord?id=CVE-2026-114145"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114145"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/commit/97eadb888d2f99567e3113f4e455be4ca128f697"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/pull/2264"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/releases/tag/3.2.1"},{"type":"ARTICLE","url":"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-83vg-56qc-22m7"}],"affected":[{"package":{"name":"python3.12-django","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/python3.12-django"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.30-3.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-django","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/python3.12-django"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.30-3.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"openvox-server","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/openvox-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.17.0-1.el9sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"openvox-server","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/openvox-server"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.17.0-1.el9sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"yggdrasil-worker-forwarder","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/yggdrasil-worker-forwarder"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.1-1.el9sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-gitpython","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/python3.12-gitpython"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-gitpython","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/python3.12-gitpython"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.1-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"openvox-agent","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/openvox-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.31.1-1.el9sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"openvox-agent","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/openvox-agent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.31.1-1.el9sat"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-pillow","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/python3.12-pillow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-pillow-debuginfo","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/python3.12-pillow-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-pillow-debugsource","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/python3.12-pillow-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-pillow","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/python3.12-pillow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-pillow-debuginfo","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/python3.12-pillow-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-pillow-debugsource","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/python3.12-pillow-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.0.0-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-urllib3","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/python3.12-urllib3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-urllib3","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/python3.12-urllib3"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-brotli","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/python3.12-brotli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-brotli-debuginfo","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/python3.12-brotli-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-brotli-debugsource","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/python3.12-brotli-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-brotli","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/python3.12-brotli"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-brotli-debuginfo","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/python3.12-brotli-debuginfo"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-brotli-debugsource","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/python3.12-brotli-debugsource"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.1-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-pulp-ansible","ecosystem":"Red Hat:satellite_capsule:6.19::el9","purl":"pkg:rpm/redhat/python3.12-pulp-ansible"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.28.10-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}},{"package":{"name":"python3.12-pulp-ansible","ecosystem":"Red Hat:satellite:6.19::el9","purl":"pkg:rpm/redhat/python3.12-pulp-ansible"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.28.10-1.el9pc"}]}],"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2026:92861.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}