Our takeRed Hat updated the satellite/iop-vmaas-rhel9 container image to fix a critical flaw rated CVSS 9.8. Update the image now if you run Satellite on-prem; hosted users are already covered.Cyber Resilience desk
Sources (1)
- auscert_bulletins · auscert_bulletins
What this means for you — Security leader:Update the satellite/iop-vmaas-rhel9 container image to the patched version immediately; this is a confirmed critical (CVSS 9.8) vulnerability.
What this means for you — Lean IT orgs:Ask your managed service provider or hosting vendor whether they run Red Hat Satellite and if this container image has been updated.
What this means for you — MSP:Check all client Red Hat Satellite deployments for the iop-vmaas-rhel9 container image and update it to the patched release.
What this means for you — Researcher:Confirmed critical vulnerability (CVSS 9.8) in the satellite/iop-vmaas-rhel9 container image; see AUSCERT ESB-2026.11335 for details.