Red Hat has released a new container image for the satellite/iop-insights-engine-rhel9 component used in Red Hat Satellite 6.19. This component, Red Hat Lightspeed in Satellite, analyzes system health and configuration locally by applying predefined rules to limited local data. The advisory references CVE-2026-69243 and CVE-2026-69244 but does not provide details on fixes or exploitation. The container image is now generally available, and Red Hat provides documentation for installation and configuration.
CVE-2026-39820 is a critical denial of service vulnerability in the Go net/mail package affecting Red Hat build of MicroShift 4.19, a lightweight Kubernetes orchestration solution for edge devices. The flaw can be triggered by crafted email inputs. Red Hat has released updated packages and container images to address this issue. Users are advised to apply these patches to mitigate the risk. The vulnerability impacts Red Hat OpenShift Container Platform 4.19 for RHEL 9 across multiple architectures. No known exploits in the wild have been reported.
OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.22 images.
Red Hat has announced the general availability of the satellite/iop-host-inventory-frontend-rhel9 container image for Red Hat Satellite 6.19. This container image supports Red Hat Lightspeed, which analyzes system health and configuration locally by applying predefined rules to limited system data. No specific security fixes or patches are mentioned in the advisory. The advisory references multiple CVEs but does not detail any remediation or active exploitation. The container image enables generating recommendations without sending data to Red Hat services.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the helm4 package version 4.3.0-0.2.hum1 for aarch64 and x86_64 architectures. The update addresses multiple vulnerabilities including CVE-2026-81871 and others. The advisory does not provide detailed exploitation or impact scenarios but classifies the severity as high. No explicit patch status beyond the availability of updated RPMs is stated.
Red Hat has released a security update for its Hardened Images RPM packages addressing CVE-2026-81871. The update includes distribution package version 3.1.1-0.2.hum1 for aarch64 and x86_64 architectures. This advisory fixes a medium severity vulnerability related to the distribution RPMs. No known exploits are reported in the wild at this time.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.13.71. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHSA-2026:65838
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html/release_notes
Security Fix(es):
None
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.13 users are advised to upgrade to these updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.13/html-single/updating_clusters/index#updating-cluster-within-minor.
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.
Security Fix(es):
* Apache Tomcat: Apache Tomcat: Improper Input Validation vulnerability due to incomplete fix (CVE-2026-32990)
* tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication (CVE-2026-43512)
* tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated (CVE-2026-41293)
* tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication. (CVE-2026-42498)
* tomcat-coyote: tomcat: Improper Authorization allows security bypass (CVE-2026-43515)
* tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513)
* tomcat: Apache Tomcat: Security constraint bypass via improper URL encoding in rewrite valve (CVE-2026-59083)
* tomcat: Apache Tomcat: Insufficient documentation for EncryptInterceptor may lead to insecure configurations (CVE-2026-59084)
Bug Fix(es) and Enhancement(s):
* Tomcat fails to respond to client connections when using Java 8 [rhel-9.8] (JIRA:RHEL-257456)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A critical authentication bypass vulnerability (CVE-2024-52316) affecting Apache Tomcat 10.1.33 and related versions has been addressed in a security update provided by Red Hat and SUSE. The vulnerability involves improper handling of Jakarta Authentication failures that could lead to incorrect HTTP status codes. The update also includes fixes for WebDAV compliance, cache handling, logging, and concurrency issues. Patches are available for multiple affected versions across Red Hat Enterprise Linux and Ubuntu distributions.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Linux kernel t7xx WWAN driver: Denial of Service via buffer overflow (CVE-2026-23172)
* kernel: xfrm: hold dev ref until after transport_finish NF_HOOK (CVE-2026-31663)
* kernel: RDMA/rxe: Fix race condition in QP timer handlers (CVE-2026-45910)
* kernel: RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv (CVE-2026-46043)
* kernel: RDMA/rxe: Reject unknown opcodes before ICRC processing (CVE-2026-46133)
* kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads (CVE-2026-46114)
* kernel: net: ena: PHC: Fix potential use-after-free in get_timestamp (CVE-2026-52971)
* kernel: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN (CVE-2026-53176)
* kernel: ALSA: timer: Forcibly close timer instances at closing (CVE-2026-53193)
* kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info() (CVE-2026-53196)
* kernel: xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() (CVE-2026-53239)
* kernel: ALSA: timer: Fix UAF at snd_timer_user_params() (CVE-2026-53192)
* kernel: wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap (CVE-2026-63869)
* kernel: ALSA: seq: Serialize UMP output teardown with event_input (CVE-2026-64029)
* kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (CVE-2026-63921)
* kernel: xfrm: input: hold netns during deferred transport reinjection (CVE-2026-63919)
* kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink() (CVE-2026-63917)
* kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check (CVE-2026-63913)
* kernel: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices (CVE-2026-64176)
* kernel: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (CVE-2026-64174)
* kernel: wifi: iwlwifi: mld: stop TX during firmware restart (CVE-2026-64175)
* kernel: RDMA/rxe: Fix a use-after-free problem in rxe_mmap (CVE-2026-64582)
* kernel: Linux kernel: libceph stack out-of-bounds write via crafted OSDMap (CVE-2026-68159)
* kernel: Linux kernel: ALSA timer use-after-free vulnerability allows privilege escalation (CVE-2026-68200)
* kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL (CVE-2026-68128)
* kernel: Linux kernel: ath9k Wi-Fi driver use-after-free vulnerability leading to system crash (CVE-2026-68363)
* kernel: xfrm: fix stale skb->prev after async crypto steals a GSO segment (CVE-2026-68426)
* kernel: dm_early_create: fix freeing used table on dm_resume failure (CVE-2026-72102)
* kernel: net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() (CVE-2026-72298)
* kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame (CVE-2026-72003)
* kernel: selinux: check connect-related permissions on TCP Fast Open (CVE-2026-72243)
Bug Fix(es) and Enhancement(s):
* gfs2: filesystem withdrawal rework [rhel-9.8.z] (JIRA:RHEL-252540)
* The slab cache entries for gfs2 and dlm grow very large for gfs2 filesystems [rhel-9.8.z] (JIRA:RHEL-252544)
* gfs2: Get rid of sd_async_glock_wait [rhel-9.8.z] (JIRA:RHEL-253986)
* [RHEL9.8z] watchdog: System panics during reboot when pretimeout is disabled (0) (JIRA:RHEL-255217)
* [usb/xhci] kdump on Arrow Lake systems hangs system with dracut-initqueue Timed out errors [rhel-9.8.z] (JIRA:RHEL-256733)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.
Security Fix(es):
* redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)
* valkey: Valkey: Remote code execution via use-after-free in stream deserialization (CVE-2026-63639)
* valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free (CVE-2026-56684)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2026-2340 is a high-severity vulnerability in the Samba vfs_worm module of Red Hat OpenShift Container Platform versions 4.12.0 through 4.12.98. The vulnerability arises from improper handling of directory modification permissions, where the vfs_worm module fails to block directory modifications as intended. Red Hat has released official patches addressing this issue and advises users to upgrade to the latest versions to mitigate this and other related vulnerabilities.
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.18.55. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHSA-2026:66385
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/
Security Fix(es):
* bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated
zone (CVE-2026-1519)
* samba: group policy certificate enrollment uses http:// without
validation (CVE-2026-3012)
* bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation
(CVE-2026-3039)
* bind: BIND: Denial of Service via specially crafted DNS messages
(CVE-2026-5946)
* dracut: dracut: Root code execution via DHCP options command injection
(CVE-2026-6893)
* bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)
* sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text
search data (CVE-2026-11822)
* sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer
overflow in FTS5 (CVE-2026-11824)
* bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
(CVE-2026-13321)
* dracut: dracut: root code execution via unescaped error message written
to sourced emergency hook script in die() (CVE-2026-15816)
* sg3_utils: sg3_utils: arbitrary command execution via udev property
injection in sg_inq --export (CVE-2026-16313)
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege
escalation via incorrect Punycode label processing (CVE-2026-39821)
* kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
(CVE-2026-43112)
* samba: vfs_worm does not block directory modification (CVE-2026-2340)
* gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints
comparison (CVE-2026-3833)
* bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)
* libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via
dangling filtered_buf pointer in init_unpack() (CVE-2026-14164)
* systemd: systemd: Arbitrary code execution or Denial of Service via
spurious IPC API call data (CVE-2026-29111)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.18 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.
Multiple security vulnerabilities affecting the Real Time Linux Kernel (kernel-rt) have been addressed in a Red Hat security advisory. These include issues such as use-after-free, out-of-bounds reads and writes, integer overflows, and improper locking in various kernel subsystems including networking, IPv6, netfilter, and others. The advisory covers a broad range of CVEs impacting kernel components that could potentially be exploited to compromise system stability or security. A patch is available to remediate these vulnerabilities.
Red Hat has issued a security advisory for multiple vulnerabilities in the Linux kernel packages of Red Hat Enterprise Linux 10. These include out-of-bounds reads, buffer overflows, use-after-free conditions, denial of service, and privilege escalation issues. The update also contains bug fixes and enhancements. A system reboot is required after applying the update. Red Hat recommends prompt installation to mitigate potential risks.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.18.55. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHSA-2026:66385
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/
A moderate severity vulnerability (CVE-2026-15711) exists in the libsoup library used by GNOME, where an oversized control frame in the WebSocket implementation can cause a remote denial of service. Red Hat has issued a security advisory and released updates for Red Hat Enterprise Linux 8 to address this issue.
Two security vulnerabilities have been identified in the libsoup HTTP client and server library for GNOME, affecting Red Hat Enterprise Linux 9. These include a remote denial of service caused by unbounded decompression in the WebSocket permessage-deflate extension (CVE-2026-15709) and a remote denial of service via an oversized control frame protocol violation in WebSocket connections (CVE-2026-15711). Red Hat has released security updates addressing these issues with a moderate severity rating.