A high severity vulnerability (CVE-2026-69248) exists in the python3.14-cryptography package for Red Hat Enterprise Linux 9. The issue allows the verifier to accept wildcard DNS names that can escape from permittedSubtrees. Red Hat has released patches to address this vulnerability in updated packages.
A critical security vulnerability (CVE-2026-18922) affects the 389 Directory Server (389-ds-base) used in Red Hat Enterprise Linux 7 Extended Lifecycle Support. The flaw involves SASL PLAIN authentication allowing privilege escalation to the Directory Manager via a stale identity in the Cyrus SASL auxiliary property. This vulnerability is part of a security update that also addresses other issues in 389-ds-base. Red Hat has released a security advisory and updated packages to fix these vulnerabilities.
Multiple critical security vulnerabilities have been identified and fixed in the 389 Directory Server (389-ds-base) package for Red Hat Enterprise Linux 9.4. These include a heap buffer overflow, a pre-authentication NULL pointer dereference, privilege escalation via SASL PLAIN authentication, and bypass of bind-rule checks by anonymous LDAP clients. The update addresses these issues and includes additional bug fixes and enhancements.
A heap-based buffer overflow vulnerability exists in the HDR file parsing component of GIMP's use of the GEGL (Generic Graphics Library) framework. This flaw could allow arbitrary code execution. The issue is tracked as CVE-2026-2050 and affects certain versions of GEGL used in Red Hat Enterprise Linux 8. A security update addressing this vulnerability is available from Red Hat.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: crypto: pcrypt - Fix handling of MAY_BACKLOG requests (CVE-2026-43493)
* kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002)
* kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CVE-2026-64007)
* kernel: rhashtable: clear stale iter->p on table restart (CVE-2026-64563)
* kernel: smb: client: validate DFS referral PathConsumed (CVE-2026-68343)
* kernel: nvmet-rdma: handle inline data with a nonzero offset (CVE-2026-72129)
* kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to multiple libxml2 packages. The advisory addresses several CVEs related to these packages and provides a bug fix and enhancement update for libxml2 version 2.15.4-0.1.hum1 on aarch64 and x86_64 architectures. No specific exploit details or CVSS scores are provided. Users are directed to apply the update as detailed on Red Hat's official site.
A security vulnerability (CVE-2026-80844) affecting the Linux kernel packages in Red Hat Enterprise Linux for ARM 64 10 has been identified. The issue involves improper validation of the routing header segments_left in the xfrm ah6 kernel component. Red Hat has issued a security advisory and released an update to address this vulnerability. The update requires a system reboot to take effect. The vulnerability is rated as high severity by Red Hat Product Security. No CVSS score is provided in the advisory. The affected kernel versions are specific builds of Red Hat Enterprise Linux for ARM 64 10.
A security vulnerability identified as CVE-2026-74582 affects the Linux kernel packages in Red Hat Enterprise Linux 8.8 and related update services. The issue involves inconsistent handling of the hard_header_len parameter in non-ring send paths within the kernel's packet subsystem. Red Hat has issued a security advisory and released updated kernel packages to address this vulnerability. The update requires a system reboot to take effect. No CVSS score is provided, but the severity is rated as high by Red Hat. There are no known exploits in the wild at this time.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error (CVE-2026-53073)
* kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() (CVE-2026-63808)
* kernel: KEYS: fix overflow in keyctl_pkey_params_get_2() (CVE-2026-63824)
* kernel: smb: client: fix query directory replay double-free (CVE-2026-64387)
* kernel: iomap: fix out-of-bounds bitmap_set() with zero-length range (CVE-2026-68145)
* kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat Satellite 6.16.13 for RHEL 8 and 9 addresses multiple security vulnerabilities affecting components such as jackson-databind, ruby-jwt, python-aiohttp, Eclipse Jetty, and jackson-core. These vulnerabilities include arbitrary code execution, authentication bypass, denial of service, HTTP request smuggling, and information disclosure. The update fixes these issues and also resolves a bug related to content view filtering.