Multiple security vulnerabilities have been identified in the Skia graphics library component used by Google Chrome and Microsoft Edge browsers. These include various memory safety issues such as heap buffer overflows, out-of-bounds reads and writes, integer overflows, use-after-free conditions, and insufficient validation of untrusted input. The vulnerabilities affect the rendering engine and could potentially be exploited by crafted web content to compromise the browser. A critical security update addressing these issues has been released as part of the webkit2gtk3 package for Red Hat Enterprise Linux 9.
Red Hat Ansible Automation Platform versions prior to 5.36.00.16 contain multiple security vulnerabilities affecting several components including node-tar, linkify-it, protobufjs, brace-expansion, fast-uri, and DOMPurify. These vulnerabilities are addressed in version 5.36.00.16. The platform is an end-to-end automation solution for system configuration, software deployment, and workflow orchestration. Red Hat has released security advisories and updated images to fix these issues.
This entry reports multiple vulnerabilities in the Linux kernel, which is the core component of the Linux operating system. No specific details about the nature, impact, or affected versions of these vulnerabilities are provided.
Multiple vulnerabilities have been identified in the FasterXML Jackson library, a widely used open-source JSON processing library for Java. One of the notable vulnerabilities (CVE-2026-59888) involves a bypass of the @JsonIgnore annotation in Java Records, which could lead to unintended data exposure or processing. These issues have been addressed in version 5.36.00.16 of the library. Red Hat has issued security advisories confirming the importance of these fixes and providing updates for related products such as Red Hat Lightspeed and OpenShift Dev Spaces.
Multiple vulnerabilities in the Linux kernel have been identified that could allow denial of service conditions. The Linux kernel is the core component of the Linux operating system. No specific affected versions or detailed technical information are provided.
Multiple vulnerabilities have been identified in Apache Tomcat, including an incorrect URL decoding issue in the RewriteValve that may allow security constraint bypass. These issues affect Apache Tomcat versions prior to 9.0.120. Red Hat has released updates in JBoss Web Server 7.0.1 to address these vulnerabilities, which are rated with a moderate security impact. The fixes include corrections for misleading security logs, error handling when configuring CRLs, and control flow issues in the rewrite valve.
Multiple vulnerabilities have been identified in Grafana, an open-source analytics and visualization software. These include a denial of service vulnerability caused by excessive memory allocation from large API request payloads (CVE-2026-33382), as well as other issues such as privilege escalation, unauthorized access, and additional denial of service flaws. The vulnerabilities affect versions prior to 11.6.15. A security update addressing these issues is available.
A directory traversal vulnerability exists in the Go programming language's os.Root function due to symlink following, allowing potential information disclosure. This affects Go versions prior to 1.26.5. The issue has been fixed in version 1.26.5. The vulnerability is rated as important by Red Hat in their advisory for the buildah package, which uses Go. No known exploits are reported in the wild.
Multiple vulnerabilities have been identified in OpenSSH, an open source implementation of the Secure Shell protocol. These issues affect Red Hat Hardened Images RPMs, with updates available to address them. The vulnerabilities are tracked under CVE-2026-59995 through CVE-2026-60002. Red Hat has released updated packages to mitigate these security flaws.
A vulnerability in the Icinga open source monitoring system allows the display of false information. This issue affects versions prior to 2.12.7 and is fixed in version 2.12.7.
This entry references multiple vulnerabilities related to the Linux kernel and AMD EPYC 5th generation processors, specifically transient scheduler attacks (TSAs) that may leak sensitive information via side channels. The vulnerabilities affect certain AMD EPYC processors and potentially allow attackers to infer data across privilege boundaries. Mitigations include updating guest operating systems and applying vendor fixes. No direct exploit in the wild is reported for the Linux kernel vulnerability CVE-2026-53359. The advisory primarily details AMD CPU vulnerabilities and their mitigations rather than specifics about the Linux kernel flaw.
Multiple security vulnerabilities have been identified in the Skia graphics library used by Google Chrome and Microsoft Edge browsers. These vulnerabilities include heap buffer overflows, integer overflows, use-after-free conditions, out-of-bounds reads and writes, insufficient validation of untrusted input, type confusion, uninitialized use, and side-channel information leakage. The issues could potentially allow remote attackers to exploit compromised renderer processes via crafted web content. Red Hat has issued a critical security advisory addressing these vulnerabilities in the webkit2gtk3 package for Red Hat Enterprise Linux 9, which includes patches for the affected components.
A vulnerability in libxml2, a C XML parser and toolkit used by the Gnome project and others, allows for arbitrary code execution via a buffer overflow in the xmlcatalog utility. This flaw is identified as CVE-2026-11979. The issue affects versions prior to 5.36.00.16. Red Hat has issued security advisories and released updates to address this vulnerability in their hardened images and Red Hat Enterprise Linux 10 distributions.
Multiple vulnerabilities have been identified in the Linux kernel, which is the core component of the Linux operating system. The information provided is limited and does not specify the nature, impact, or affected versions of these vulnerabilities.
CVE-2026-54825 is a critical Blind SQL Injection vulnerability in the TMS wpDataTables plugin affecting versions prior to 7.4.1. This flaw allows an attacker to inject SQL commands without authentication, potentially leading to unauthorized data disclosure. The vulnerability has been fixed in version 7.4.1.
Multiple security vulnerabilities have been identified in the FasterXML Jackson library, a widely used open-source JSON processing library for Java. These include security bypasses that allow arbitrary code execution, information disclosure, and data manipulation via various bypasses and improper handling of properties. The vulnerabilities are addressed in version 5.36.00.16. Red Hat has issued security advisories for related products including Red Hat Build of Apache Camel and Red Hat build of Quarkus, which include fixes for these Jackson vulnerabilities along with other related issues. The overall security impact is rated as Important by Red Hat.
Multiple vulnerabilities have been identified in cURL, a client software used for file transfers over protocols such as HTTP and FTP. These vulnerabilities affect versions prior to 5.36.00.16. A fixed version, 5.36.00.16, is available. Red Hat has issued a security advisory providing updated packages that address these issues in their Hardened Images RPMs.
Multiple security vulnerabilities have been identified in OpenSSH as used in Red Hat Enterprise Linux 10. These include a local man-in-the-middle attack on X11 forwarding, a client-side denial of service due to a double free, a heap out-of-bounds read, a use-after-free during host key re-exchange, and a file misplacement issue in scp. Red Hat has released security updates addressing these issues.
A use-after-free vulnerability in the libxml2 library can lead to a denial of service (DoS) when processing crafted XML input. This issue affects Red Hat Enterprise Linux 9 and related variants. Red Hat has released security updates to address this vulnerability. The advisory rates the impact as Moderate and provides patches for affected packages.
Multiple security vulnerabilities have been identified in the Node.js packages distributed as part of Red Hat Hardened Images. These vulnerabilities are tracked under CVE-2026-48618, CVE-2026-48933, and CVE-2026-48615. Red Hat has released updated RPM packages for Node.js versions 22 and 24 to address these issues. The updates include new package versions such as nodejs22-22.23.1-1.hum1 and nodejs24-24.18.0-0.1.hum1. No specific technical details or impact descriptions are provided in the advisory. No known exploits in the wild have been reported.