Multiple security vulnerabilities have been identified in the libkcapi library used by Red Hat Enterprise Linux 10. These include an IV reuse issue causing cipher state resets, memory corruption via uncanceled asynchronous I/O requests, and an infinite loop denial of service due to unhandled timeout returns. Red Hat has issued a security advisory with patches addressing these moderate severity issues.
This entry references multiple vulnerabilities in the Linux kernel, which is the core component of the Linux operating system. No specific details about the nature, impact, or affected versions of these vulnerabilities are provided.
A heap-buffer overflow vulnerability exists in the tiff2pdf utility of libtiff due to an integer truncation error when processing crafted BigTIFF files. This flaw causes a 64-bit StripByteCounts value to be truncated to 32 bits, leading to undersized memory allocation and out-of-bounds memory copy, resulting in a crash and severe memory corruption. Exploitation requires convincing a user or automated pipeline to process a malicious BigTIFF file. The impact is limited to local execution with the privileges of the process running tiff2pdf.
The nscd service in the GNU C Library (eglibc) versions from 2.3.4 onwards may crash due to a stack overflow triggered by a malicious DNS server returning an excessively large DNS response. This can degrade DNS resolution performance on affected systems. Exploitation requires nscd to be enabled and configured to use an untrusted DNS server capable of sending large DNS records. While a remote attacker might cause nscd cache corruption, the service typically runs isolated with limited privileges, reducing risk. The issue does not cause a denial of service but may impact DNS resolution efficiency.
Multiple vulnerabilities have been identified in Netty, an asynchronous event-driven network application framework used for developing maintainable and high-performance protocol servers and clients. The information provided does not specify the nature, impact, or affected versions of these vulnerabilities.
A denial of service vulnerability exists in the Qt software toolkit due to uncontrolled recursion in XML serialization. This flaw affects the qtbase component used for string, XML, and network handling. Red Hat has issued an important security update addressing this issue in qt6-qtbase for Red Hat Enterprise Linux 10.0 Extended Update Support.
This entry references multiple vulnerabilities in the Linux kernel, which is the core component of the Linux operating system. No specific details about the nature, impact, or affected versions of these vulnerabilities are provided in the available data.
Multiple security vulnerabilities have been identified in the Skia graphics library component used by Chromium-based browsers such as Google Chrome and Microsoft Edge. These include use-after-free, information disclosure, cross-origin data disclosure, uninitialized resource usage, integer overflow, out-of-bounds read, memory corruption, and improper input validation issues. The vulnerabilities affect the WebKitGTK port on the GTK platform and have been addressed in updated packages by Red Hat for their Enterprise Linux 9 distribution.
A vulnerability in the zlib compression library allows specially crafted input to trigger a heap buffer overflow. This flaw can lead to denial of service or arbitrary code execution. The issue arises from incorrect handling of certain non-blocking write operations. Fixed package versions have been released for multiple Ubuntu releases.
A vulnerability in golang-defaults allows a malicious peer to flood a channel's incomingRequests before the channel is fully established, causing a deadlock of the entire connection. The issue arises because the channel is not usable until established, and packets other than open confirmation/failure were not properly handled, leading to blocking. The fix introduces an atomic established state to drop packets until the channel is usable, preventing deadlocks.
A vulnerability in golang-defaults allows a malicious peer to send crafted messages after a channel is established, causing the entire connection to deadlock. The issue arises from improper handling of RFC 4254 channel messages, where unexpected messages were buffered and blocked instead of being treated as protocol errors. The fix involves explicitly handling global requests and treating other unexpected messages as protocol errors, tearing down the connection to prevent deadlocks.
A vulnerability in util-linux's X-mount.subdir option affects versions 2.42 through 2.42.2 when used with Linux kernel 6.15 and later. The issue arises because the open_tree() call uses AT_SYMLINK_NOFOLLOW, which does not prevent traversal of intermediate symlinks, allowing a local unprivileged user with an fstab-authorized X-mount.subdir entry to mount a host path at the intended mountpoint. This can lead to unauthorized file system access and modification.
A vulnerability in util-linux's nsenter tool (introduced in v2.40) allows a privileged operator using the --join-cgroup option to open the target cgroup.procs file as root and leave the file descriptor open across namespace and credential changes. This behavior enables an unprivileged user in an attacker-controlled target to inherit root's ability to migrate and terminate unrelated root processes. The issue is fixed in util-linux versions 2.41.6 and 2.42.3.
Multiple security vulnerabilities affecting the Skia graphics library used in the chromium-browser component of WebKitGTK have been identified and addressed. These include information leaks, use-after-free, cross-origin data disclosure, improper input validation, integer overflow, out-of-bounds reads, and memory corruption issues. The vulnerabilities impact Red Hat Enterprise Linux 8 variants through the webkit2gtk3 package. Red Hat has released security updates to fix these issues.
Multiple security vulnerabilities were fixed in Mozilla Firefox and Firefox ESR versions, including high-impact issues such as privilege escalation, use-after-free bugs, sandbox escapes, information disclosure, and other security-relevant defects. These vulnerabilities were internally found or reported by external researchers and affect components like DOM, Audio/Video, Graphics, WebGPU, WebExtensions, and Remote Settings Client. The fixes were released in Firefox 155 and Firefox ESR 115.40 and later versions.
A vulnerability in GDB's STABS debug format parser allows an out-of-bounds write due to a linked list removal bug in separating destructor and non-destructor member functions. This flaw can be triggered by opening a crafted ELF binary with malicious .stab and .stabstr sections in GDB, leading to potential arbitrary command execution within the GDB process without executing the inferior process.
CVE-2026-78002 is a denial of service vulnerability in rsyslog caused by a heap buffer overflow in the RainerScript replace() function. This flaw allows a remote attacker to crash the rsyslog daemon by sending specially crafted input that triggers incorrect buffer size calculations during string replacement. The issue affects rsyslog version 7.3 and various Linux distributions including Red Hat Enterprise Linux 9 and multiple Ubuntu LTS releases. Security updates addressing this vulnerability have been released by Red Hat and Ubuntu. Applying these updates and restarting the rsyslog service mitigates the risk.
A vulnerability in golang-go.crypto allows source-address restrictions set by certain authentication callbacks to be ignored. The source-address critical option was only enforced for PublicKeyCallback and VerifiedPublicKeyCallback, but not for PasswordCallback, KeyboardInteractiveCallback, NoClientAuthCallback, and GSSAPIWithMICConfig.AllowLogin callbacks. This flaw means that source-address restrictions from these callbacks were silently bypassed. The issue has been addressed by applying the source-address check to permissions returned by all authentication callbacks.
CVE-2026-18374 is a vulnerability in the GNU libc (glibc) library, which is the core C library used by Linux and other Unix-like operating systems. The flaw involves a heap buffer overflow triggered via an attacker-controlled fopen mode string. This vulnerability is part of a set of security issues addressed in a glibc update. The Red Hat advisory rates this vulnerability as having a moderate security impact and provides patches in glibc updates for Red Hat Enterprise Linux 9. No known exploits in the wild have been reported.