A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a %() macro construct causes rpm to execute an attacker-controlled shell command via popen() while relocating the source file list. This allows arbitrary command execution as the invoking (typically non-root) user, simply by installing, rebuilding, or otherwise processing an untrusted .src.rpm.
A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using `rpm -q -p` or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened, allowing embedded shell commands to run with the privileges of the `rpm` process. Successful exploitation can lead to a full compromise of confidentiality, integrity, and availability for the affected account.
CVE-2026-94416 is an authorization bypass vulnerability in Red Hat Ansible Automation Platform 2.6 for RHEL 9. It allows an authenticated administrator to create a service key indistinguishable from a legitimate one, enabling forging of service-authentication tokens. This can be exploited to impersonate the Controller service and, combined with the gateway OIDC workload-identity endpoint, to sign Workload Identity Tokens for arbitrary workloads. Downstream resource servers trusting the gateway OIDC key may accept these forged tokens and disclose credentials beyond the attacker's authorization boundary. Red Hat has released an important security update addressing this issue.
Multiple high-severity security vulnerabilities have been identified in PostgreSQL, affecting various components such as tsvector and tsquery functions, psql COPY FROM STDIN, logical decoding plugins, and others. These vulnerabilities include arbitrary code execution, privilege escalation, and information disclosure. Red Hat has issued security advisories and updates addressing these issues for affected Red Hat Enterprise Linux versions, including Red Hat Update Infrastructure 5.3. The vulnerabilities impact critical database operations and require applying the provided updates.
A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specific role do not properly check for individual group visibility permissions. This allows a delegated administrator with basic search privileges to view detailed information about all groups assigned to a role, bypassing intended security restrictions that should limit their view to specific groups.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.16.71. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHSA-2026:67934
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/
CVE-2026-97185 is a high-severity vulnerability in the GIMP image manipulation program included with Red Hat Enterprise Linux 8. The flaw exists in the GIMPressionist plugin, where improper validation of vector indices when processing crafted preset files can cause out-of-bounds writes, leading to memory corruption. Exploitation requires convincing a user to load a malicious preset file, potentially causing application crashes or arbitrary code execution. Red Hat has issued an important security update addressing this issue in GIMP 3.0.4-4.el9_8.14 for Red Hat Enterprise Linux 9. The update fixes this vulnerability along with several others in GIMP. Users should apply the vendor-provided patch to mitigate the risk.
CVE-2026-56859 is a high severity vulnerability affecting Red Hat Ansible Automation Platform 2.2 and related components, specifically the Automation Portal Operator used for managing Ansible Automation Portal deployments on OpenShift. The vulnerability is documented by Red Hat but no specific fix or patch has been explicitly stated in the advisory. No known exploits are reported in the wild at this time.
A flaw was found in the user update mechanism of the Keycloak Admin REST API. When Fine-Grained Admin Permissions are enabled, the system fails to check for specific password reset authorizations during a general user profile update. This allows a delegated administrator, who should be restricted from resetting passwords, to change a user's credentials and take over their account.
A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management solution. The issue occurs when a client specifically requires a higher security level for a user who already has an active session at a lower level. Due to a logic error in how session re-evaluations are handled, Keycloak may incorrectly issue a token at the lower security level instead of enforcing the required higher level, potentially allowing unauthorized access to sensitive resources that rely on these security claims.
Multiple security vulnerabilities and bugs have been fixed in the Linux kernel packages distributed by Red Hat. These include issues such as use-after-free, double-free, out-of-bounds reads, permission checks, and memory corruption across various kernel subsystems. The update addresses these flaws to improve system security and stability. A patch is available and users are advised to apply the update and reboot to ensure protection. The kernel update requires recompilation of third-party kernel modules due to ABI changes.
Multiple security vulnerabilities have been identified and fixed in the Red Hat kernel-rt packages, which provide the Real Time Linux Kernel. These include issues in AMD GPU driver fence handling, netfilter queue device reference management, PPPoE memory corruption, IPVS denial of service via stale memory references, and NVMe TCP read handling. The vulnerabilities affect various kernel subsystems and architectures. A patch is available to address these issues.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: drm/amdgpu: Fix use-after-free race in VM acquire (CVE-2026-43370)
* kernel: mac802154: llsec: add skb_cow_data() before in-place crypto (CVE-2026-63831)
* kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)
* kernel: ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control (CVE-2026-72261)
* kernel: xfrm: ah6: validate routing header segments_left (CVE-2026-80844)
* kernel: net: tun: bound receive headroom (CVE-2026-81000)
* kernel: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read (CVE-2026-89846)
Bug Fix(es) and Enhancement(s):
* sctp: prevent peer transport count overflow [rhel-8.10.z] (JIRA:RHEL-216297)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Multiple security vulnerabilities affecting the buildah package in Red Hat Enterprise Linux 9 have been identified and fixed. These include denial of service issues in several Go packages and a cross-site scripting vulnerability in Go html/template. Additionally, a flaw in Podman allows an attacker to achieve arbitrary file write on the host system by supplying a specially crafted OCI archive to the podman load command. Exploitation requires the attacker to have the ability to run podman load with user privileges. The vulnerabilities impact container image building and handling security.
Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.
For details about this release, refer to the release notes listed in the References section.
Red Hat Ansible Automation Platform 2.5 for RHEL 9 contains multiple critical security vulnerabilities affecting its automation-controller and related components. These vulnerabilities include remote code execution, privilege escalation, information disclosure, denial of service, command injection, cross-tenant data exposure, and other serious flaws. The issues impact features such as GitPython integration, workflow job templates, credential handling, Jinja template rendering, and mesh certificate issuance. Red Hat has issued a security advisory with updates to address these vulnerabilities.
CVE-2026-75887 is a path traversal vulnerability in the Red Hat OpenShift Container Platform 4.12 console. An unauthenticated attacker can manipulate the lng and ns query parameters in the /locales/resource.json endpoint to read arbitrary .json files from the pod filesystem, including sensitive plugin manifests and configuration files. This flaw also enables path traversal against registered dynamic-plugin backends, increasing the risk of information disclosure. No official fix or mitigation meeting Red Hat's criteria is currently available.
VolSync v0.16, a Kubernetes operator used for asynchronous replication of persistent volumes, has security vulnerabilities identified by CVE-2026-46603 and CVE-2026-84445 affecting Red Hat Advanced Cluster Management for Kubernetes versions 0.32.14-r1 and earlier. Red Hat has released updated container images and patches to address these issues. The update is rated as having an important security impact. No active exploits are currently known in the wild.