Red Hat Security Advisory: satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview

🔗 CVE IDs covered (3)

📋 Description

🎯 Affected products2

• Red Hat Satellite 6.19
• registry.redhat.io/satellite/iop-vulnerability-engine-rhel9@sha256:7d12195a351b1b4e3f0483f472adcf9ceb2bebb275e7182ee6289898d879cd57_amd64 as a component of Red Hat Satellite 6.19

✅ Remediation

For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation. Workaround: Update GitPython to version 3.1.60 or later. Validate and sanitize git repository sources before processing. Enable git fsck validation (receive.fsckObjects) on git servers to reject malformed commit objects. Implement length limits on commit metadata fields before processing.

🔗 References (10)

• selfhttps://access.redhat.com/errata/RHSA-2026:92619
• externalhttps://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index
• externalhttps://access.redhat.com/security/cve/CVE-2026-84782
• externalhttps://access.redhat.com/security/cve/CVE-2026-87819
• externalhttps://access.redhat.com/security/cve/CVE-2026-93599
• externalhttps://access.redhat.com/security/updates/classification/
• externalhttps://catalog.redhat.com/software/containers/search
• externalhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/installing_satellite_server_in_a_connected_network_environment/performing-additional-configuration-on-server_satellite#installing-and-configuring-red-hat-lightspeed-in-satellite
• externalhttps://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/installing_satellite_server_in_a_disconnected_network_environment/performing-additional-configuration#installing-and-configuring-red-hat-lightspeed-in-satellite
• selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92619.json