Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing set intersection, union and difference; or getting the member with highest ranking in a sorted set. In order to achieve its outstanding performance, Valkey works with an in-memory dataset. Depending on your use case, you can persist it either by dumping the dataset to disk every once in a while, or by appending each command to a log. Valkey also supports trivial-to-setup master-slave replication, with very fast non-blocking first synchronization, auto-reconnection on net split and so forth. Other features include Transactions, Pub/Sub, Lua scripting, Keys with a limited time-to-live, and configuration settings to make Valkey behave like a cache. You can use Valkey from most programming languages also.
Security Fix(es):
* redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)
* valkey: Valkey: Remote code execution via use-after-free in stream deserialization (CVE-2026-63639)
* valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free (CVE-2026-56684)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2026-2340 is a high-severity vulnerability in the Samba vfs_worm module of Red Hat OpenShift Container Platform versions 4.12.0 through 4.12.98. The vulnerability arises from improper handling of directory modification permissions, where the vfs_worm module fails to block directory modifications as intended. Red Hat has released official patches addressing this issue and advises users to upgrade to the latest versions to mitigate this and other related vulnerabilities.
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.18.55. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHSA-2026:66385
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/
Security Fix(es):
* bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated
zone (CVE-2026-1519)
* samba: group policy certificate enrollment uses http:// without
validation (CVE-2026-3012)
* bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation
(CVE-2026-3039)
* bind: BIND: Denial of Service via specially crafted DNS messages
(CVE-2026-5946)
* dracut: dracut: Root code execution via DHCP options command injection
(CVE-2026-6893)
* bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)
* sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text
search data (CVE-2026-11822)
* sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer
overflow in FTS5 (CVE-2026-11824)
* bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
(CVE-2026-13321)
* dracut: dracut: root code execution via unescaped error message written
to sourced emergency hook script in die() (CVE-2026-15816)
* sg3_utils: sg3_utils: arbitrary command execution via udev property
injection in sg_inq --export (CVE-2026-16313)
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege
escalation via incorrect Punycode label processing (CVE-2026-39821)
* kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
(CVE-2026-43112)
* samba: vfs_worm does not block directory modification (CVE-2026-2340)
* gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints
comparison (CVE-2026-3833)
* bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)
* libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via
dangling filtered_buf pointer in init_unpack() (CVE-2026-14164)
* systemd: systemd: Arbitrary code execution or Denial of Service via
spurious IPC API call data (CVE-2026-29111)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.18 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.
Multiple security vulnerabilities affecting the Real Time Linux Kernel (kernel-rt) have been addressed in a Red Hat security advisory. These include issues such as use-after-free, out-of-bounds reads and writes, integer overflows, and improper locking in various kernel subsystems including networking, IPv6, netfilter, and others. The advisory covers a broad range of CVEs impacting kernel components that could potentially be exploited to compromise system stability or security. A patch is available to remediate these vulnerabilities.
Red Hat has issued a security advisory for multiple vulnerabilities in the Linux kernel packages of Red Hat Enterprise Linux 10. These include out-of-bounds reads, buffer overflows, use-after-free conditions, denial of service, and privilege escalation issues. The update also contains bug fixes and enhancements. A system reboot is required after applying the update. Red Hat recommends prompt installation to mitigate potential risks.
A moderate severity vulnerability (CVE-2026-15711) exists in the libsoup library used by GNOME, where an oversized control frame in the WebSocket implementation can cause a remote denial of service. Red Hat has issued a security advisory and released updates for Red Hat Enterprise Linux 8 to address this issue.
Two security vulnerabilities have been identified in the libsoup HTTP client and server library for GNOME, affecting Red Hat Enterprise Linux 9. These include a remote denial of service caused by unbounded decompression in the WebSocket permessage-deflate extension (CVE-2026-15709) and a remote denial of service via an oversized control frame protocol violation in WebSocket connections (CVE-2026-15711). Red Hat has released security updates addressing these issues with a moderate severity rating.
An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.
Security Fix(es):
* Apache HttpComponents Core: Denial of Service via excessive HTTP headers (CVE-2026-54399)
* Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks (CVE-2026-54428)
* Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects (CVE-2026-15075)
* Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation (CVE-2026-15076)
* SeaweedFS: Information disclosure via S3 API gateway path traversal (CVE-2026-55874)
* SeaweedFS: Unauthorized data deletion via path traversal in S3 gateway (CVE-2026-58372)
* protobufjs: Denial of Service via crafted .proto schema (CVE-2026-59877)
* Quarkus REST: Unbounded multipart MIME part-header accumulation allows remote OOM denial of service (CVE-2026-16308)
* Netty: Denial of Service via SPDY header decompression amplification (CVE-2026-55833)
* Netty: Denial of Service via SPDY SETTINGS frame processing (CVE-2026-55831)
* Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message (CVE-2026-55851)
* Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec (CVE-2026-56745)
* Netty: Security control bypass allows unauthorized requests via null origin header (CVE-2026-56746)
* Netty: Denial of Service via HTTP/2 DATA frame memory leak (CVE-2026-56819)
* Netty: Memory exhaustion in netty-codec-http (decompression bomb) (CVE-2026-59899)
* Apache Thrift: Denial of Service via integer overflow or wraparound (CVE-2026-55969)
* Apache Thrift: Denial of Service via improper handling of highly compressed data (CVE-2026-48586)
* Apache Thrift: Denial of Service due to uncontrolled resource allocation (CVE-2026-45112)
* brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation (CVE-2026-69152)
* ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192)
* jackson-core: Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494)
* DOMPurify: Cross-site scripting vulnerability allows code execution (CVE-2026-49978)
* OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178)
* Go net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)
* Go encoding/xml: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)
* Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
* Go crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
* Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
* js-yaml: Denial of Service via crafted YAML documents (CVE-2026-59869)
* golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions (CVE-2026-56854)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has issued a security advisory for its Hardened Images RPMs, specifically updating multiple python3.13 packages to address several vulnerabilities including CVE-2026-82049. The update provides security fixes for these RPMs on aarch64 and x86_64 architectures. No explicit patch version ranges are provided in the advisory. The severity of the vulnerabilities addressed is high.
Red Hat has issued a security update for the Red Hat build of Keycloak 26.4.16 images used in OpenShift Container Platform. The update addresses multiple vulnerabilities including privilege escalation via impersonation roles, information leakage through SAML Redirect DEFLATE helpers, account lockout caused by username collisions, incomplete fixes for filesystem path probing and policy enforcer bypass, TLS hostname verification bypass, and an unauthenticated denial-of-service via unbounded locale caching. These issues affect the Red Hat build of Keycloak versions from 26.4.0 up to and including 26.4.16. The update is important to maintain the security and integrity of authentication services in OpenShift environments.
Red Hat has issued a security update for the Red Hat build of Keycloak 26.6.7 images used in OpenShift Container Platform. The update addresses multiple security vulnerabilities including information disclosure, privilege escalation, authorization bypasses, remote code execution, and denial of service. Users are advised to apply the update to mitigate these risks.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the opentelemetry-collector-contrib package version 0.161.0-0.1.hum1 for aarch64 and x86_64 architectures. This update addresses multiple security vulnerabilities identified by several CVEs. The advisory provides updated RPMs and directs users to apply the update via Red Hat's image repository. No detailed fix information or exploit data is provided in the advisory.
This Red Hat security advisory addresses multiple vulnerabilities in the BIND DNS software included in Red Hat Hardened Images RPMs. The update fixes issues such as unauthenticated application of IXFR deltas before TSIG verification, use-after-free crashes in recursive resolvers, remote assertion failures, and denial of service via cached AliasMode trees. These vulnerabilities could lead to crashes, data leakage, or denial of service conditions. The update is provided in bind version 9.20.29-0.1.hum1 for aarch64 and x86_64 architectures. The severity is assessed as high due to the potential impact on DNS resolution.
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 6.2.4 serves as a replacement for Red Hat JBoss Web Server 6.2.3. This release includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes that are linked to in the References section.
Security Fix(es):
* tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated (CVE-2026-41293)
* tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy (CVE-2026-43514)
* tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication (CVE-2026-43512)
* tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm (CVE-2026-43513)
* tomcat-coyote: tomcat: Improper Authorization allows security bypass (CVE-2026-43515)
* tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication (CVE-2026-42498)
* tomcat-catalina: Apache Tomcat: Denial of Service due to uncontrolled resource allocation (CVE-2026-41284)
* tomcat-catalina: Apache Tomcat: Incorrect control flow in rewrite valve allows unexpected rule processing (CVE-2026-53404)
* tomcat-catalina: Apache Tomcat: Improper Authorization Allows Security Constraint Bypass (CVE-2026-55956)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A heap-based buffer overflow vulnerability (CVE-2026-81665) exists in the Corosync Cluster Engine's totempg assembly buffer during fragmented message reassembly. This vulnerability affects multiple architectures and versions of Corosync used in Red Hat Enterprise Linux 8 and related products. Red Hat has issued security updates to address this flaw. The vulnerability is rated as high severity and could allow memory corruption during cluster communication message processing.