A stack buffer overflow vulnerability exists in the GNU C Library (glibc) versions 2.1 through 2.44 due to unchecked stack growth in the tdelete function. This overflow can occur when tdelete is called on a very large tree with at least a million nodes, potentially causing application crashes. No common applications have been identified as affected. Red Hat has released security updates for their hardened images to address this issue.
Red Hat has released a security advisory addressing multiple vulnerabilities in Red Hat Hardened Images RPMs, including OpenSSL packages. The update provides bug fixes and enhancements for affected OpenSSL components on aarch64 and x86_64 architectures. Specific vulnerability details and exploitation methods are not disclosed in the advisory. The update includes several RPM packages such as openssl, openssl-config-fips, openssl-devel, and others at version 3.5.8-0.1.hum1. The advisory references multiple CVEs including CVE-2026-14457 and others. No known exploits in the wild have been reported. The update is intended to improve security and stability of the affected packages.
nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage.
Security Fix(es):
* nginx: NGINX: Heap buffer over-read allows memory modification or denial of service (CVE-2026-56434)
* nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module (CVE-2026-60005)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat OpenShift Container Platform 4.22.11 includes important security fixes addressing multiple vulnerabilities in the bind9 DNS server and the Linux kernel's openvswitch module. These issues involve potential memory usage beyond configured limits, cache poisoning, unexpected process exits, DNSSEC validation bypass, and rejection of oversized nested action attributes. Users of OpenShift Container Platform 4.22 are advised to upgrade to version 4.22.11 to mitigate these vulnerabilities.
This release of Red Hat build of Apicurio Registry 3.3.1 GA includes the following security fixes.
Security Fix(es):
* DOMPurify: Cross-site scripting vulnerability allows code execution [rhint-serv-3] (CVE-2026-49978)
* apicurio-registry: Unhardened SAXParser in content-type detection leads to blind XXE / SSRF / billion-laughs DoS [rhint-serv-3] (CVE-2026-12975)
* apicurio-registry: SSRF via wsdl4j import dereference in WSDL FULL validation [rhint-serv-3] (CVE-2026-12992)
* apicurio-registry: XML entity-expansion denial of service via internal DTD subset [rhint-serv-3] (CVE-2026-12993)
* Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name [rhint-serv-3] (CVE-2026-44496)
* DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization [rhint-serv-3] (CVE-2026-41240)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.22.10. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:54768
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/
A vulnerability in libgit2 prior to versions 1.8.6 and 1.9.5 causes incorrect validation of IP-literal HTTPS URLs when using OpenSSL. This flaw allows a network attacker with a CA-trusted certificate containing any IP SubjectAltName to intercept connections. The issue affects only OpenSSL builds and does not impact DNS SubjectAltName validation or other TLS backends. The vulnerability is fixed in libgit2 versions 1.8.6 and 1.9.5. Red Hat has released updated packages including libgit2-1.9.7-1.hum1 to address this issue.
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.
Security Fix(es):
* pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values (CVE-2026-59886)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.
For details about this release, refer to the release notes listed in the References section.
A vulnerability in vLLM, the inference engine used by Red Hat AI Inference Server, allows unauthenticated attackers to execute arbitrary code by loading malicious HuggingFace models when vLLM runs in Python optimized mode. This affects Red Hat AI Inference Server versions prior to 0.22.0 that include the vulnerable pooler activation loader. Exploitation requires supplying untrusted models and running with Python optimization enabled. Red Hat rates the impact as Important for AI Inference Server and OpenShift AI vLLM serving images, and Moderate for RHEL AI bootc images bundling vLLM. No fix is currently available. Mitigations include avoiding Python optimization mode, loading models only from trusted sources, restricting deployment permissions, and applying network controls.
Two heap-based buffer overflow vulnerabilities in the gstreamer1-plugins-good package for Red Hat Enterprise Linux 10 can lead to remote code execution. These flaws occur during parsing of MRF and PNG files. Red Hat has issued an important security update to address these issues.
Red Hat Ansible Automation Platform 2.5 has multiple security vulnerabilities affecting components such as automation-controller, automation-gateway, python3.12-aiohttp, python3.12-django, and python3.12-gitpython. These include remote code execution, server-side request forgery (SSRF), path traversal, denial of service, command injection, and memory exhaustion issues. The vulnerabilities allow attackers to execute arbitrary code, leak credentials, perform directory escapes, and cause service disruptions. A security update addressing these issues is available from Red Hat.
CVE-2026-17527 is a high-severity vulnerability in Red Hat OpenShift Virtualization's containerized-data-importer (CDI) component. The aggregated cdi.kubevirt.io:view ClusterRole, which is intended to provide read-only access, incorrectly grants create permission on the datavolumes/source subresource. This flaw allows a user or service account with view role cluster-wide and write access to any namespace to clone and exfiltrate the contents of any PersistentVolumeClaim (PVC) across namespaces, bypassing namespace isolation. The vulnerability affects default aggregated RBAC roles in CDI and downstream consumers including OpenShift Virtualization. No fix is currently available, and mitigation involves avoiding cluster-wide binding of the vulnerable role and auditing role bindings to prevent combined view and write access across namespaces.
A high severity security vulnerability identified as CVE-2026-67214 affects the jaeger package version 2.20.0-0.7.hum1 included in Red Hat Hardened Images RPMs. Red Hat has issued a security update addressing this vulnerability. The advisory does not provide detailed technical information about the nature of the vulnerability or its exploitation but confirms the availability of an update to fix the issue.
The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file managers.
Security Fix(es):
* libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack() (CVE-2026-14164)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: SSL_select_next_proto buffer overread (CVE-2024-5535)
* openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() (CVE-2026-45447)
Bug Fix(es) and Enhancement(s):
* Openssl builds failing in rhel6 due to failing tests (JIRA:RHEL-184262)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A security update for Red Hat Hardened Images RPMs addresses multiple vulnerabilities including CVE-2026-65898 and related CVEs. The update involves the grafana12.4 package version 12.4.8-0.1.2.hum1 for aarch64 and x86_64 architectures. These vulnerabilities have medium severity and are fixed in this update. The advisory covers several CVEs related to these packages and provides a link for applying the update.
Multiple security vulnerabilities have been identified and fixed in apr-util, including a timing attack vulnerability in apr_password_validate(), XML stack recursion crash, SQL injection in apr_dbd_oracle, and heap buffer overflows in Redis and memcached clients. The timing attack vulnerability allows potential leakage of password hash content via side-channel timing differences but is assessed as low impact due to practical exploitation difficulties. Red Hat has released updated apr-util packages to address these issues.