A vulnerability in Perl's regular expression engine used in Red Hat Hardened Images involves a signed 32-bit integer overflow in the superlinear cache size calculation. This can lead to out-of-bounds heap memory reads and writes during regex matching. Exploitation requires a very large input (~273 MiB) matched against a complex pattern with at least 15 participating WHILEM nodes. The primary impact is denial of service due to process crashes; arbitrary code execution has not been demonstrated. Red Hat has deferred fixing this issue due to its complexity and limited exposure. Mitigations include limiting untrusted input size and avoiding complex regex patterns on untrusted data.
Multiple security vulnerabilities were identified in the libevent library used in Red Hat Hardened Images and various Ubuntu LTS distributions. These vulnerabilities include denial of service, HTTP request smuggling, buffer overflows, access control bypass, and arbitrary code execution. The issues affect HTTP parsing, RPC data handling, and AF_UNIX socket processing. Official patches are available from Red Hat and Ubuntu, including extended support via Ubuntu Pro. Users are advised to apply these updates to mitigate the risks.
Red Hat Satellite 6.18 prior to version 6.18.9 contains multiple security vulnerabilities affecting various components such as aiohttp, Eclipse Jetty, jackson-core, ansible-core, puppetserver, and ruby-jwt. These vulnerabilities include HTTP request smuggling, denial of service, information disclosure, arbitrary code execution, and authentication bypass. The update to version 6.18.9 addresses these security issues along with several bugs related to upgrade and functionality.
GitPython versions up to and including 3.1.50 contain a vulnerability in the Repo.clone_from() method where environment variables in the remote URL are expanded before cloning. This behavior allows an attacker who controls the URL to embed environment variable tokens that are expanded server-side and exfiltrated to an attacker-controlled host. A fix for this issue is available.
Red Hat Quay versions from 3.15.0 up to but not including 3.15.8 contain multiple high severity security vulnerabilities, including CVE-2026-15927. Red Hat has released version 3.15.8 to address these issues. There are no known exploits reported in the wild. Users are advised to apply the official update to remediate these vulnerabilities.
A Server-Side Template Injection (SSTI) vulnerability (CVE-2026-12894) exists in the ReflectionValueResolver component of the Qute template engine used by Red Hat Build of Apache Camel 4.18 for Quarkus. This flaw allows an attacker who can influence template text to bypass restrictions and execute unauthorized commands on the server. Red Hat has released an update (RHBQ 3.33.3.SP1) that addresses this and other vulnerabilities. The update is rated as important by Red Hat Product Security.
Red Hat has released a security advisory for Red Hat Hardened Images RPMs, specifically updating the grafana13.1 package to version 13.1.3-0.5.hum1. This update addresses multiple security vulnerabilities including CVE-2026-8595 and others. The advisory covers both aarch64 and x86_64 architectures. The update is a bug fix and enhancement release.
A vulnerability in the Node.js qs library causes qs.stringify to throw a TypeError when serializing an object whose own constructor property has a truthy, non-callable isBuffer member. Red Hat has issued an advisory for Red Hat Hardened Images RPMs, including an update to the grafana13.2 package, addressing this and other vulnerabilities. The update is available and should be applied to affected systems. No active exploitation has been reported.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs addressing multiple vulnerabilities in util-linux packages affecting components such as libblkid, libfdisk, liblastlog2, libmount, libsmartcols, libuuid, and python3-libmount on aarch64 and x86_64 architectures. The advisory provides updated RPM packages to remediate these issues. No active exploits are known in the wild at this time.
A use-after-free vulnerability (CVE-2025-11234) exists in the qemu-kvm component's VNC WebSocket handshake in Red Hat Enterprise Linux 9. This vulnerability is rated moderate severity by Red Hat Product Security and is addressed in the Red Hat OpenShift Container Platform 4.12.97 update. The update fixes the issue specifically in qemu-kvm but does not include additional security fixes for OpenShift itself. Users running affected versions of Red Hat Enterprise Linux 9 are advised to apply the update to remediate the vulnerability.
Red Hat has issued a security advisory for an important update to Erlang packages used in Red Hat OpenStack Services on OpenShift 18.0. The update addresses two security vulnerabilities in the Erlang OTP public_key module: certificate chain forgery due to improper trust chain validation (CVE-2026-42789) and certificate validation bypass allowing hostname spoofing (CVE-2026-42790). These issues could undermine the security of certificate validation processes. A patch is available and should be applied to affected systems.
Multiple security vulnerabilities were identified and fixed in curl, including authentication bypass due to incorrect connection reuse with Negotiate authentication, token leakage during redirects, proxy connection reuse issues, and use-after-free in SMB connection reuse. These vulnerabilities affect various versions of curl across multiple Linux distributions, including Red Hat Enterprise Linux and SUSE. A security update is available to address these issues.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.17.57. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHSA-2026:60018
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.17/html/release_notes/
This Red Hat Security Advisory addresses multiple vulnerabilities and bugs in the Linux kernel packages for Red Hat Enterprise Linux 8. The update includes fixes for several use-after-free issues, out-of-bounds accesses, and other kernel-level security flaws. These vulnerabilities affect core kernel components such as CPU hotplug handling, network bonding, NFS, RDMA, and IPv6. The advisory recommends updating the kernel packages and rebooting the system to apply the fixes.
This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-5.14.0-570.17.1.el9_6.
Security Fix(es):
* kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)
* kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114)
* kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)
* kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323)
* kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module is targeted for kernel-6.12.0-211.16.1.el10_2.
Security Fix(es):
* kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CVE-2026-43114)
* kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CVE-2026-43112)
* kernel: Linux kernel: Use-After-Free in net/gro due to improper handling of zerocopy skbs (CVE-2026-46323)
* kernel: futex: Drop CLONE_THREAD requirement for private default hash alloc (CVE-2026-52973)
* kernel: net/sched: act_api: use RCU with deferred freeing for action lifecycle (CVE-2026-53264)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This Red Hat Security Advisory addresses multiple important vulnerabilities and bugs in the Linux kernel packages for Red Hat Enterprise Linux 9.6 Extended Update Support. The update fixes security issues including symbolic link size checks in Squashfs, race conditions in Bluetooth SCO connections, use-after-free vulnerabilities in Bluetooth and IPv6 components, and validation errors in cryptographic operations. The advisory also includes various bug fixes and enhancements. A system reboot is required to apply the update.