This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-284.134.1.el9_2.
Security Fix(es):
* kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)
* kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-4.18.0-477.130.1.el8_8.
Security Fix(es):
* kernel: RDMA/rxe: Fix double free in rxe_srq_from_init (CVE-2026-45852)
* kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)
* kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the buildah package to version 1.45.1-1.hum1 for aarch64 and x86_64 architectures. The update addresses security issues identified by CVE-2026-56851 and CVE-2026-63209. This advisory provides a bug fix and enhancement update for the affected RPMs.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the loki3.6 packages to address multiple vulnerabilities including CVE-2026-21729. The advisory classifies these issues as high severity but does not provide detailed technical information. Updated RPM packages version 3.6.17-0.3.hum1 are available for aarch64 and x86_64 architectures. The update addresses several CVEs including CVE-2026-93450, CVE-2026-63209, CVE-2026-21729, CVE-2026-56851, and CVE-2024-24786. No explicit fixed version is stated beyond the updated package version. The vendor advisory provides official updates and instructions for applying the update.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs addressing multiple vulnerabilities in the grafana13.2 package, including CVE-2026-63209. The update includes version 13.2.1-0.8.hum1 for aarch64 and x86_64 architectures. No explicit patch or fix details are provided in the advisory. The vulnerabilities are considered high severity.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating multiple glibc packages. The advisory addresses vulnerabilities identified by CWE-367 and CWE-120. The update includes numerous language pack RPMs and core glibc components for aarch64 and x86_64 architectures. No specific exploitation details or active exploits in the wild have been reported. The advisory provides updated RPM versions to mitigate the vulnerabilities.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released (CVE-2025-40323)
* kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026-45942)
* kernel: drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg (CVE-2026-46230)
* kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing IB (CVE-2026-46204)
* kernel: drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg (CVE-2026-46199)
* kernel: arm64: tlb: Flush walk cache when unsharing PMD tables (CVE-2026-63875)
* kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034)
* kernel: perf/core: Detach event groups during remove_on_exec (CVE-2026-64556)
* kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)
* kernel: libceph: refresh auth->authorizer_buf{,_len} after authorizer update (CVE-2026-68156)
* kernel: Linux kernel (libceph): Denial of Service due to malformed monitor maps (CVE-2026-68155)
* kernel: drm/amdgpu: Fix context pstate override handling (CVE-2026-68273)
* kernel: perf: Reject exited events as group leaders (CVE-2026-74753)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has issued a security update for Red Hat Hardened Images RPMs addressing two high severity vulnerabilities (CVE-2026-61709 and CVE-2026-86472) in the grafana13.1 package. The update provides new RPM versions for aarch64 and x86_64 architectures. A patch is available and should be applied to affected systems to mitigate these vulnerabilities.
A high severity security vulnerability identified as CVE-2026-9496 affects the grafana12.4 package within Red Hat Hardened Images RPMs. Red Hat has released updated RPM packages for aarch64 and x86_64 architectures to address this issue. No detailed technical information or CVSS score is provided in the advisory. The update is available and should be applied to remediate the vulnerability.
Multiple security vulnerabilities have been identified in Vim (Vi IMproved) affecting Red Hat Enterprise Linux 10.0 Extended Update Support and related packages. These include arbitrary code execution via crafted inputs such as directory names, Python omni-completion, PHP files, tags files, and insecure shell command handling. Additionally, denial of service vulnerabilities exist due to stack out-of-bounds writes and out-of-bounds writes in spell file word counts. Red Hat has issued security advisories and updates addressing these vulnerabilities.
A stack buffer overflow vulnerability (CVE-2025-6170) exists in the libxml2 library's xmllint interactive shell command handling on Red Hat Enterprise Linux 8 and related products. Red Hat has rated the security impact as low. A security update is available that addresses this vulnerability by updating the libxml2 package. No known exploits are reported in the wild.
Red Hat has issued a security update for PostgreSQL 12 addressing multiple vulnerabilities that allow arbitrary code execution during restore operations and via untrusted data inclusion in pg_dump. These vulnerabilities could enable an attacker to execute code on affected systems. The update is rated as important by Red Hat Product Security. The advisory applies to Red Hat Enterprise Linux 8.6 and related variants. Users are advised to apply the provided updates to mitigate these issues.
Node DOMPurify versions before 3.4.13 contain a cross-site scripting (XSS) vulnerability related to IN_PLACE sanitization where element-removal hooks fail to neutralize malicious input. Red Hat has issued an advisory updating the grafana13.2 package to address this and other vulnerabilities. The update is available for specific versions on aarch64 and x86_64 architectures. The vulnerability is classified as medium severity.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the RPM packages for Red Hat OpenShift Container Platform 4.13.61. See the following advisory for the container images for this release:
https://access.redhat.com/errata/RHSA-2025:18241
Security Fix(es):
* golang-jwt/jwt: jwt-go allows excessive memory allocation during header parsing (CVE-2025-30204)
* helm.sh/helm/v3: Helm Chart Code Execution (CVE-2025-53547)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.
A vulnerability in the python-cryptography library allows duplicate self-signed intermediate certificates to cause exponential path-building. This can lead to performance degradation or denial of service. The issue affects multiple versions of the library and has been assigned CVE-2026-69249. A security update addressing this vulnerability is available from Red Hat.
Multiple security vulnerabilities were identified in the libxml2 library, including arbitrary code execution via heap-based and stack-based buffer overflows, data integrity issues from integer overflow, information disclosure, SSRF, denial of service, and double-free/use-after-free in Python bindings. These issues affect various versions of libxml2 used in Red Hat Enterprise Linux and Ubuntu distributions. Fixes have been released and are available through standard system updates or Ubuntu Pro for extended support versions.