Threat database

Red Hat has released a critical security update for Red Hat OpenShift Developer Tools - OpenShift Jenkins 4.16. The update addresses multiple vulnerabilities identified by several CVEs, including CVE-2024-38827 and numerous others. Users of OpenShift Jenkins 4.16 are recommended to upgrade to the latest version to mitigate these security issues.

This update for librsvg fixes the following issues: Update to version 2.60.2: - CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867). - CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950).

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites. Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.

Red Hat has issued a security update for PHP 8.3 addressing three vulnerabilities: a denial of service via unbounded recursion in the SOAP parser (CVE-2026-91765), an out-of-memory bailout during request parsing that can lead to memory corruption and remote code execution (CVE-2026-109618), and a use-after-free vulnerability due to stale request state retention in fatal error handling (CVE-2026-109619). These issues affect Red Hat Enterprise Linux 9 across multiple architectures. The update is rated as Important by Red Hat Product Security.

A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process.

CVE-2026-114438 is an authentication flaw in the Red Hat Build of Keycloak identity and access management solution. The issue occurs when the Update User Locale required action is executed before the Configure OTP action within a realm, potentially allowing users to bypass mandatory multi-factor authentication (MFA) enrollment. An attacker with a valid password may access an account without setting up the required one-time password (OTP) credential. The vulnerability has a medium severity rating with a CVSS score of 4.2. No affected versions or patch information are explicitly provided in the available data.

A local privilege escalation vulnerability exists in the Multi Router Traffic Grapher (MRTG) daemon when started as root and subsequently dropping privileges. The flaw involves symlink-following chown operations on the PID file path, allowing a local low-privileged attacker to escalate privileges. This issue is tracked as CVE-2026-72694 and affects multiple MRTG versions. A security update addressing this vulnerability is available from Red Hat.

A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control (RBAC) permissions that grant cluster-wide impersonation of arbitrary users, groups, and service accounts without restriction. An attacker who compromises the operator or obtains its service account credentials can exploit this flaw to achieve privilege escalation, gaining full administrative control over the cluster.