Red Hat Security Advisory: Satellite 6.18.6 Async Update

02 / AFFECTED SOFTWARE

Affected packages

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

05 / REFERENCES

Further evidence

• https://access.redhat.com/documentation/en-us/red_hat_satellite/6.18/html/updating_red_hat_satellite/index
• https://access.redhat.com/errata/RHSA-2026:28385
• https://access.redhat.com/security/cve/CVE-2026-25990
• https://access.redhat.com/security/cve/CVE-2026-27830
• https://access.redhat.com/security/cve/CVE-2026-32282
• https://access.redhat.com/security/updates/classification/#important
• https://bugzilla.redhat.com/show_bug.cgi?id=2439170
• https://bugzilla.redhat.com/show_bug.cgi?id=2442908
• https://bugzilla.redhat.com/show_bug.cgi?id=2456336
• https://github.com/python-pillow/Pillow/commit/9000313cc5d4a31bdcdd6d7f0781101abab553aa
• https://github.com/python-pillow/Pillow/security/advisories/GHSA-cfh3-3jmp-rvhc
• https://github.com/swaldman/c3p0/commit/e14cbd8166e423e2e9a9d6f08b2add3433492d6e
• https://github.com/swaldman/c3p0/security/advisories/GHSA-5476-xc4j-rqcv
• https://go.dev/cl/763761
• https://go.dev/issue/78293
• https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU
• https://issues.redhat.com/browse/SAT-45570
• https://issues.redhat.com/browse/SAT-45571
• https://issues.redhat.com/browse/SAT-45836
• https://issues.redhat.com/browse/SAT-45883
• https://mogwailabs.de/en/blog/2025/02/c3p0-you-little-rascal
• https://nvd.nist.gov/vuln/detail/CVE-2026-25990
• https://nvd.nist.gov/vuln/detail/CVE-2026-27830
• https://nvd.nist.gov/vuln/detail/CVE-2026-32282
• https://pkg.go.dev/vuln/GO-2026-4864
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_28385.json
• https://www.cve.org/CVERecord?id=CVE-2026-25990
• https://www.cve.org/CVERecord?id=CVE-2026-27830
• https://www.cve.org/CVERecord?id=CVE-2026-32282
• https://www.mchange.com/projects/c3p0/#configuring_security
• https://www.mchange.com/projects/c3p0/#security-note