Red Hat has issued a security update for osbuild-composer, a service that builds customized OS artifacts including VM images and OSTree commits. The update addresses multiple vulnerabilities primarily involving denial of service and man-in-the-middle attack vectors in various Go language components used by osbuild-composer. These include issues in MongoDB Go Driver, gRPC-Go, golang net/http, crypto/tls, mime/multipart, HTTP/2 handling, and crypto/x509. The vulnerabilities affect Red Hat Enterprise Linux 10.0 Extended Update Support across multiple architectures.
A local privilege escalation vulnerability exists in the Multi Router Traffic Grapher (MRTG) daemon due to symlink-following chown operations on the PID file path. This flaw allows a local attacker to manipulate the PID file path to escalate privileges. Red Hat has issued a security update for MRTG in Red Hat Enterprise Linux 9.6 Extended Update Support to address this issue.
Red Hat has issued a security advisory for a kernel live patch module targeting kernel-5.14.0-427.100.1.el9_4. The update addresses multiple vulnerabilities in the Linux kernel, including issues in netfilter, pppoe, bridge, packet, and xfrm subsystems. These vulnerabilities involve improper memory handling and validation errors that could potentially be exploited. The advisory rates the security impact as Important and notes known exploitation in the wild. The update is available as kpatch patches for Red Hat Enterprise Linux 9.4 variants.
Multiple security vulnerabilities have been identified and fixed in the WebKitGTK port of the WebKit rendering engine for the GTK platform. These include use-after-free, out-of-bounds read and write, buffer overflow, type confusion, and uninitialized resource issues in the ANGLE component used by chromium-browser. The vulnerabilities affect Red Hat Enterprise Linux 8 across various architectures. Red Hat has released an important security update to address these issues.
Red Hat has issued a critical security advisory for webkitgtk4, addressing multiple vulnerabilities in the ANGLE component used by the chromium-browser within WebKitGTK+. These vulnerabilities include out-of-bounds memory access, heap buffer overflows, use-after-free, integer overflows, type confusion, and insufficient validation of untrusted input. The advisory covers a wide range of CVEs spanning from 2024 to 2026. The update is targeted for Red Hat Enterprise Linux 7 Extended Lifecycle Support. No specific affected versions are detailed in the advisory.
A security vulnerability (CVE-2026-94422) in xdg-dbus-proxy, a filtering proxy for D-Bus connections, allows message filtering bypass via reply serial, which can lead to sandbox escape. This issue affects Red Hat Enterprise Linux 9.6 Extended Update Support and related variants. Red Hat has released an update to address this vulnerability.
A denial of service vulnerability exists in the X.Org X11 libXtst runtime library due to an out-of-bounds read in the RECORD reply parser (CVE-2026-94286). This issue affects Red Hat Enterprise Linux 10 and related variants. Red Hat has issued a security advisory and released updated libXtst packages to address this vulnerability.
Red Hat has issued an important security advisory for the Linux kernel packages addressing multiple vulnerabilities including denial of service, missing permission checks, out-of-bounds reads, use-after-free, and improper handling of cryptographic requests. These vulnerabilities affect core kernel components such as the SCSI driver, rtnetlink, crypto subsystems, procfs, mac802154, nvmet, selinux, and others. The advisory recommends updating the kernel packages and rebooting the system to apply the fixes.
A denial of service vulnerability exists in the Tornado Python library's CurlAsyncHTTPClient due to a decompression bomb. This issue is tracked as CVE-2026-103262 and affects Red Hat Enterprise Linux 10.0 Extended Update Support versions. The vulnerability allows an attacker to cause resource exhaustion by exploiting the decompression mechanism. Red Hat has issued a security advisory and released updated python-tornado packages to address this issue.
A vulnerability in the Linux kernel's p54 wifi firmware parser allows reading beyond the bounds of firmware records due to insufficient validation of record lengths. This flaw can cause the parser to read past the intended data fields when processing malformed firmware records. The issue has been addressed by validating component ID and version record lengths and rejecting descriptor values that cause underflow or empty ranges before updating driver state.
Red Hat has released a security advisory for multiple vulnerabilities and bug fixes in the Linux kernel packages for Red Hat Enterprise Linux 10.2 Extended Update Support. The update addresses several security issues including privilege restrictions, use-after-free bugs, and kernel panic fixes. The kernel is a critical component of the operating system, and these fixes improve overall system security and stability. Systems must be rebooted after applying the update for changes to take effect.
This Red Hat security advisory addresses multiple vulnerabilities and bugs in the Linux kernel packages for Red Hat Enterprise Linux 9.4. The update includes fixes for several security issues such as denial of service, out-of-bounds reads, use-after-free, race conditions, and improper validation in various kernel subsystems including SCSI drivers, Bluetooth, netfilter, crypto, and others. The advisory also includes bug fixes and enhancements to improve kernel stability and security. Systems must be rebooted after applying the update to activate the fixes.
Red Hat has issued a security advisory for multiple vulnerabilities in the Linux kernel packages used in Red Hat Enterprise Linux 8.6. The update addresses five distinct security issues affecting kernel components such as network bridging, cryptography, MAC layer security, SELinux TCP Fast Open permissions, and SCSI device handling. These vulnerabilities could potentially impact system security due to the kernel's critical role. The advisory recommends applying the update and rebooting the system to ensure the fixes take effect.
Red Hat Service Interconnect 2.2 creates a service network that links TCP and HTTP services across hybrid cloud environments, enabling geographically distributed services to communicate as if they were in the same site. A security advisory was issued for the 2.2.4 release of this product. No specific vulnerability details, fixes, or patches are provided in the advisory. The advisory emphasizes applying previously released errata before updating to this release.
Red Hat OpenShift Container Platform 4.22.20 includes multiple security fixes addressing critical vulnerabilities across various components such as the kernel, libpcap, bind, OpenSSH, libevent, libxml2, pcre2, and others. These fixes mitigate issues including privilege escalation, arbitrary code execution, denial of service, information disclosure, and security bypasses. The update is rated critical by Red Hat Product Security.
A security update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 (RHBQ 3.33.4.SP1) addresses a vulnerability in the jackson-databind library. The vulnerability (CVE-2026-110879) involves a PolymorphicTypeValidator bypass via generic type arguments and array element types, allowing arbitrary class instantiation. This is an incomplete fix for a previous related vulnerability (CVE-2026-54512). The issue is rated as important by Red Hat Product Security.
A denial of service vulnerability (CVE-2026-93543) exists in the X.Org X11 libXi runtime library due to an out-of-bounds read in the XI2 class parser. Red Hat has issued a security advisory for this moderate severity issue affecting Red Hat Enterprise Linux 8 variants. The advisory provides updated libXi packages to address the flaw.
X.Org X11 libXrender runtime library
Security Fix(es):
* libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats (CVE-2026-88807)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.