Red Hat has issued a security advisory for multiple vulnerabilities in the Linux kernel packages included in Red Hat Enterprise Linux 7 Extended Lifecycle Support. The update addresses several issues including out-of-bounds reads, use-after-free conditions, missing locking mechanisms, and permission checks in various kernel subsystems such as netfilter, Bluetooth, procfs, device mapper cache policy, IPv6 extension headers, SELinux, and IPv4 checksum validation. These vulnerabilities could potentially impact system stability and security, including local privilege escalation. The advisory recommends applying the kernel update and rebooting the system to ensure the fixes take effect.
A regression introduced in FRR after fixing CVE-2024-55553 caused the software to stop processing RPKI updates after the first one, preventing route revalidation when RPKI data changed. Additionally, on Ubuntu 20.04 LTS, the BGP daemon failed to start when the RPKI module was enabled. This issue was fixed in updated FRR package versions.
A security update for the SUSE Linux Enterprise 12 SP5 kernel addresses multiple security vulnerabilities across various kernel components including btrfs, scsi, smb client, netfilter, Bluetooth, drm, and others. The update fixes issues such as out-of-bounds reads and writes, memory leaks, improper resource handling, and validation errors. These fixes collectively improve the security posture of the kernel by mitigating potential risks related to memory corruption, information leaks, and denial of service.
A regression in HAProxy on Ubuntu 22.04 LTS caused by an update fixed in USN-8972-1 led to improper handling of certain chunked HTTP/1.1 requests and truncated HTTP/2 PING frames. These issues could allow a remote attacker to cause HAProxy to consume excessive CPU resources, resulting in denial of service. The problem has been fixed in version 2.4.30-0ubuntu0.22.04.4.
Two security vulnerabilities affecting Ruby 2.5 have been addressed in a Red Hat security update. The first vulnerability (CVE-2026-80212) involves the resolv gem, where crafted DNS responses can cause uncontrolled memory growth leading to denial of service. The second vulnerability (CVE-2026-88030) affects the MongoDB Ruby Driver (rubygem-mongo), allowing data disclosure and denial of service via query-operator injection. Red Hat has released updated packages for Red Hat Enterprise Linux 8.8 to remediate these issues.
A security vulnerability in the pgvector extension for PostgreSQL allows arbitrary code execution due to an out-of-bounds write during the IVFFlat index build process. This issue affects Red Hat Enterprise Linux 10.0 Extended Update Support versions of postgresql16-pgvector. Red Hat has released an important security update to address this vulnerability.
Multiple critical security vulnerabilities have been identified and fixed in the ANGLE component used by Chromium-based browsers within the webkit2gtk3 package on Red Hat Enterprise Linux 9.4. These include arbitrary code execution, information disclosure, use-after-free, buffer overflow, improper input validation, and uninitialized resource vulnerabilities. The update addresses these issues and also fixes a regression affecting Eclipse IDE WebKit-based views on CentOS Stream 9.
A heap-based buffer overflow vulnerability exists in the libX11 core X11 protocol client library, which can be triggered by a malicious X server. This vulnerability is identified as CVE-2026-88806 and affects Red Hat Enterprise Linux 10.0 Extended Update Support across multiple architectures. Red Hat has issued a security advisory and released updated libX11 packages to address this issue.
Two security vulnerabilities have been identified in RESTEasy, a JBoss project framework for building RESTful web services and Java applications. The first vulnerability (CVE-2026-89059) involves an unbounded image decode in IIOImageProvider that can lead to a decompression-bomb denial of service (DoS). The second vulnerability (CVE-2026-89058) involves the CorsFilter reflecting arbitrary origins with credentials when configured with a wildcard, potentially allowing unauthorized cross-origin requests. Red Hat has released security updates addressing these issues in Red Hat Enterprise Linux 9.6 Extended Update Support. The update is rated as having an important security impact. No CVSS score is provided in the advisory. No known exploits in the wild have been reported.
This security update for BIND addresses multiple vulnerabilities including unauthenticated application of IXFR deltas before TSIG verification, use-after-free crashes in the recursive resolver, resource exhaustion via excessive DNSSEC cryptographic material, acceptance of out-of-zone NSEC as wildcard-nonexistence proof, message parser amplification issues, insecure NSEC3 referral proofs, and out-of-zone database nodes becoming authoritative zone cuts.
The Rust crate 'ocipkg' has been declared unmaintained by its author, with version 0.4.1 as the final release. No further updates, including security fixes, will be provided. Users requiring similar functionality are advised to use the 'oci-client' from the ORAS project for OCI registry interactions or to fork and maintain 'ocipkg' themselves for specific features not covered by 'oci-client'.
Red Hat issued a security advisory for Multicluster Global Hub version 1.7.4, addressing multiple vulnerabilities. The Multicluster Global Hub enables management of multiple hub clusters from a single cluster. The update includes security fixes and updated container images. Red Hat rates the security impact as Important (high severity). No specific affected versions are detailed in the advisory. The advisory references multiple CVEs but does not specify individual vulnerability details or fixed versions.
This Red Hat security advisory addresses multiple vulnerabilities in BIND 9, an implementation of DNS protocols. The issues include memory exhaustion, denial of service via crafted DNS messages, DNSSEC validation bypass, cache poisoning, unexpected server exits, incorrect record acceptance, and arbitrary code execution via GSS-TSIG UDP message replay. The update also includes bug fixes and enhancements such as a new root trust anchor key for DNSSEC. These vulnerabilities affect Red Hat Enterprise Linux 8.4 Extended Life Cycle Long Life and related products.