A denial of service vulnerability exists in the Go encoding/asn1 package used by LVMS 4.18. An attacker can supply a specially crafted, deeply nested ASN.1 structure that causes excessive recursion during unmarshalling, leading to stack exhaustion and service unavailability. Red Hat has released an update for LVMS 4.18 in OpenShift Container Platform that addresses this and related CVEs by bumping the Go version. Users are advised to upgrade to the latest version to mitigate these issues.
Red Hat AI Base Images 3.0.8 (CUDA) have been identified with multiple security vulnerabilities, including CVE-2025-8869 and others. These vulnerabilities affect components within Red Hat OpenShift AI and Red Hat AI Inference Server. One notable vulnerability (CVE-2025-13327) allows arbitrary code execution via specially crafted ZIP archives during package installation, requiring user interaction. Red Hat has not yet provided fixes for these issues. The advisory rates the overall severity as critical.
A vulnerability exists in OpenSSL's low-level CRYPTO_ocb128_encrypt() and CRYPTO_ocb128_decrypt() functions when called with non-block-aligned lengths on hardware-accelerated builds. This flaw can expose the last 1-15 bytes of a message in cleartext, bypassing authentication protections. However, typical OpenSSL usage via higher-level EVP APIs and TLS protocols are not affected. Red Hat AI Base Images 3.5.6 (CUDA 12.9) include this OpenSSL flaw, but no fix is currently available. The impact is rated low for Red Hat products due to limited exposure and usage scenarios.
CVE-2026-96889 affects Red Hat AI Base Images 3.5.6 (Spyre). It is associated with vulnerabilities in the Google Brotli decoder, specifically an out-of-bounds write triggered by crafted Brotli-compressed streams. This flaw can lead to memory disclosure, denial of service, or potentially arbitrary code execution when decompressing untrusted Brotli data. Red Hat rates this issue as Important with high attack complexity due to required conditions for exploitation and platform hardenings that mitigate reliable code execution. No fix is currently available for the Red Hat AI Base Images 3.5.6 (Spyre).
A security update for SUSE's sssd addresses multiple vulnerabilities including use-after-free, heap out-of-bounds reads, uninitialized heap memory disclosure, access control bypasses, NULL pointer dereference, and various denial of service issues. These flaws affect different components such as PAM, NSS, LDAP, autofs responder, NFS idmap plugin, and certificate mapping. The update fixes these issues to prevent potential memory corruption, unauthorized access, and service disruptions.
This security update for SUSE's apache2 addresses multiple vulnerabilities affecting various modules such as mod_dav, mod_auth_digest, mod_rewrite, mod_http2, mod_proxy_ftp, and others. The issues include memory corruption, denial of service, authentication bypass, use-after-free, buffer overflow, and information disclosure. These vulnerabilities could allow remote attackers to cause server crashes, execute arbitrary code, bypass authentication, or access unauthorized data. The update fixes these issues to improve the security and stability of the apache2 server.
This security update for curl addresses multiple vulnerabilities including incomplete mutual TLS configuration matching, cross-origin Digest authentication state leaks, SSH verification bypass, and several others affecting protocols like IMAP, FTP, TFTP, and SFTP. The update fixes issues that could lead to credential leaks, command injection, stack overflow, and improper host verification. These vulnerabilities collectively pose a high security risk if left unpatched.
A security update for curl addresses multiple vulnerabilities including issues with mTLS configuration, referer header handling, QUIC protocol, memory exhaustion, cross-origin information leaks, host verification bypasses, use-after-free bugs, and credential leaks. The update upgrades curl to version 8.22.0 to fix these issues.
This security update for amazon-ssm-agent addresses multiple vulnerabilities in the golang.org/x/crypto/ssh and golang.org/x/crypto/ssh/agent packages. The issues include client process termination due to unexpected message types, a panic caused by non-validated message sizes leading to out-of-bounds reads, and unbounded memory consumption triggered by an invalid number of mechanisms. The update also includes upgrades to dependencies and the Go language version.
This SUSE Linux Enterprise Kernel update addresses multiple security vulnerabilities affecting various kernel components including virtiofs, IPv6, netfs, xfrm, sctp, ipvs, SUNRPC, nfsd, and IPv4. The update fixes issues such as use-after-free, infinite loops, buffer overruns, stale pointers, overflow conditions, and error path bugs. These vulnerabilities have been assigned CVE identifiers ranging from CVE-2026-53381 to CVE-2026-98432. The update is part of Live Patch 19 for SUSE Linux Enterprise 15 SP7.
This SUSE Linux Enterprise Kernel update (Live Patch 83 for version 4.12.14-122.310) addresses multiple security vulnerabilities affecting various kernel components including crypto, xfrm, sctp, ipvs, SUNRPC, nfsd, and ipv4. The update fixes issues such as incorrect handling of initialization vectors, stale skb pointers, transport count overflow, improper clearing of IPv4 options, error path bugs, buffer length underflows, XDR length miscalculations, and freeing of options after RCU grace periods.
A security update for python-sqlparse addresses CVE-2026-112307, which involves arbitrary code execution through unescaped PHP output formatting. This vulnerability allows an attacker to execute arbitrary code by exploiting improper handling of PHP output within the affected software.