The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: fanotify: fix false positive on permission events (CVE-2026-46150)
* kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() (CVE-2026-46120)
* kernel: af_unix: Set gc_in_progress to true in unix_gc() (CVE-2026-53361)
* kernel: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (CVE-2026-64002)
* kernel: net: bridge: stop fast-leave after deleting a port group (CVE-2026-74480)
* kernel: packet: use consistent hard_header_len in non-ring send paths ()
* kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer (CVE-2026-74581)
Bug Fix(es) and Enhancement(s):
* [kABI] protect struct alt_instr [rhel-10.0] (JIRA:RHEL-122758)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A denial of service vulnerability (CVE-2026-80212) exists in the Ruby resolv gem used in Red Hat Hardened Images and related Ruby 4.0 packages. The vulnerability is caused by uncontrolled memory growth triggered by crafted DNS responses. Red Hat has issued updated RPM packages to address this issue. No known exploits are reported in the wild. The severity is assessed as high due to the potential impact of denial of service.
This update includes the following RPMs:
tempo3.0:
* tempo3.0-3.0.3-0.2.hum1 (aarch64, x86_64)
* tempo3.0-3.0.3-0.2.hum1.src (src)
Security Fix(es):
tempo3.0:
* CVE-2026-81092
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including multiple erlang27 packages, addressing several vulnerabilities. The update provides bug fixes and enhancements for these packages across aarch64 and x86_64 architectures. The advisory references multiple CVEs related to these packages and indicates a high severity level. A patch is available to address these issues.
A vulnerability in dracut allows an attacker controlling a rogue DHCP server on an adjacent network to inject shell commands that execute as root during boot failure handling. This occurs because the die() error-handling function writes unescaped messages derived from the DHCP ROOT_PATH option into a shell script sourced by dracut's emergency hook. The flaw affects multiple versions of dracut in SUSE and Ubuntu distributions, as well as Red Hat Enterprise Linux 9. A security update is available from Red Hat and other vendors to address this issue.
Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development.
The 3.30 release is based on Eclipse Che 7.121 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2.
Users still using the v1 standard should migrate as soon as possible.
https://devfile.io/docs/2.2.0/migrating-to-devfile-v2
Dev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates.
https://access.redhat.com/support/policy/updates/openshift#crw
This Red Hat Security Advisory addresses multiple vulnerabilities and bugs in the Linux kernel packages for Red Hat Enterprise Linux 10 and related products. The update includes fixes for several security issues such as use-after-free, out-of-bounds reads, heap overflows, race conditions, and arbitrary code execution vulnerabilities. The advisory also contains bug fixes and enhancements for various kernel subsystems. Red Hat rates the security impact as Important and recommends applying the update promptly, requiring a system reboot for changes to take effect.
Multiple remote code execution vulnerabilities have been identified in Valkey, an advanced key-value store used in Red Hat Enterprise Linux and Red Hat Hardened Images. These include use-after-free flaws in stream deserialization and TLS pending-data processing. An update rebasing Valkey to version 8.0.10 and later 9.0.6 addresses these issues. The vulnerabilities are rated with high severity by Red Hat Product Security.
Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds,
identifies, and reports environment data, or facts, such as the number of physical and virtual
systems on a network, their operating systems, and relevant configuration data stored within
them. Discovery also identifies and reports more detailed facts for some versions of key
Red Hat packages and products that it finds in the network.
A flaw was found in the Windows Machine Config Operator (WMCO) for Red Hat OpenShift Container Platform. The WICD CSR auto-approver validates that a Certificate Signing Request contains the organization system:wicd-nodes but does not reject additional organization values such as system:masters. A compromised Windows worker node that holds WICD credentials can submit a CSR that is auto-approved and signed by the cluster, yielding a client certificate that grants cluster-administrator privileges and enabling full cluster takeover.
A vulnerability in GNU C Library (eglibc) versions 2.3 to 2.44 causes an infinite loop when converting crafted SHIFT_JISX0213 input if the output buffer is too small. This flaw affects the SHIFT_JISX0213 character set, which is not commonly used. A patch is available to fix this issue.
This advisory concerns OpenShift Virtualization v4.12 images from Red Hat, which address security issues identified by CVE-2026-67320. The vulnerability is rated as high severity and relates to Red Hat's virtualization solution for the OpenShift Container Platform. The advisory does not specify any fixes for this CVE in the current update but recommends applying all previously released errata before updating. No known exploits are reported in the wild.
A vulnerability (CVE-2026-19025) was found in the HDF5 library used in Red Hat Hardened Images RPMs. The flaw allows an attacker to craft a malicious HDF5 file with mismatched chunk-layout dimensionality and dataspace rank. When such a file is opened by an application using vulnerable HDF5 versions, it triggers a divide-by-zero error causing the application to crash and resulting in a denial of service (DoS).
A security vulnerability in iperf3 allows the server to accept unbounded peer-controlled JSON parameters, which can lead to remote denial of service via resource exhaustion. This issue is tracked as CVE-2026-71217 and affects Red Hat Enterprise Linux 9 and its variants. Red Hat has issued a security advisory and provided updated packages to address this vulnerability.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
* kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)
Bug Fix(es) and Enhancement(s):
* [RHEL 10] Bonding reports unknown speed/duplex for tg3 interface [rhel-10.0.z] (JIRA:RHEL-182769)
* CLONE -RHEL 10.0.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (JIRA:RHEL-224218)
* vhost: reset the vring metadata cache on vring reconfiguration [rhel-10.0.z] (JIRA:RHEL-224544)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift.
This solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage
applications for faster migration to OpenShift via the user interface.
Multiple security vulnerabilities have been identified and fixed in PHP packages distributed by Red Hat for Red Hat Enterprise Linux 8 and 9. These include a memory corruption issue in the OpenSSL extension (CVE-2026-14355), an SQL injection vulnerability in the PostgreSQL extension due to improper backslash escaping (CVE-2026-17543), and a denial of service vulnerability caused by circular symbolic links in phar archives (CVE-2026-7260). The vulnerabilities affect PHP versions 7.4 and 8.0 as packaged in Red Hat Enterprise Linux. Red Hat has released updated packages with backported fixes for these issues. The overall security impact is rated low to important depending on the PHP version and specific vulnerability.
Two moderate security vulnerabilities were identified in PipeWire, a multimedia server for Linux and Unix-like systems. The issues include a NULL pointer dereference in the RAOP RTSP component (CVE-2026-14324) and a stack overflow in the Pulse Server alloca function (CVE-2026-14330). Red Hat has released security updates for these vulnerabilities affecting Red Hat Enterprise Linux 9 and its variants. These flaws could potentially lead to application crashes or other unintended behavior. No CVSS scores are provided, and no known exploits in the wild have been reported. Users of affected Red Hat Enterprise Linux 9 versions are advised to apply the available updates to mitigate these issues.