A flaw was found in SSSD. When configured with the LDAP access provider and `ldap_access_order` including `ppolicy` or `lockout`, a fail-open condition in the LDAP ppolicy access check can occur if a user lookup returns zero results. This can incorrectly return success and cache an allow decision, permitting continued authorization for a deleted or deprovisioned user. A remote attacker with prior valid account context could exploit this to maintain access to information and potentially make limited modifications to resources that should no longer be available.
A vulnerability in the rpcbind service of Red Hat Enterprise Linux 10 allows a remote unauthenticated attacker to cause a denial of service by sending numerous unique requests. The service tracks RPC statistics in unbounded in-memory lists, leading to persistent memory growth and increased CPU usage, which can degrade or exhaust service availability. A security update addressing this issue is available for Red Hat Enterprise Linux 9, but no explicit patch information is provided for version 10 in the advisory.
Red Hat JBoss Enterprise Application Platform 8.1.8 addresses multiple security vulnerabilities affecting various components including Jackson libraries, Netty, Bouncy Castle, Undertow, Artemis server, Apache CXF, and WildFly Elytron. The update replaces version 8.1.7 and mitigates issues such as denial of service, privilege escalation, authentication bypass, information disclosure, and remote code execution. These vulnerabilities impact Red Hat JBoss EAP 8.1 for RHEL 8 and have been rated with an important security impact by Red Hat Product Security.
An integer overflow vulnerability exists in the libstdc++ library used by Red Hat Hardened Images. The flaw occurs when processing large inputs to the aligned operator new in the C++ library, potentially causing undersized memory allocation. This can lead to memory corruption or application instability. A security advisory from Red Hat provides updated RPM packages addressing this issue.
Multiple security vulnerabilities have been identified and fixed in the Linux kernel packages used by Red Hat and Ubuntu. These include issues in memory management and SCTP protocol handling that could lead to privilege escalation or system compromise. The vulnerabilities affect various kernel versions and architectures. Official patches are available to address these flaws.
A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting in denial of service and potentially arbitrary code execution in the host process. The default interface MTU is not affected.
Red Hat has released OpenShift Source To Image version 1.6.4 to address multiple security vulnerabilities affecting earlier versions. These vulnerabilities include a file escape flaw in BuildKit that allows a client with valid permissions to access files outside the intended directory. The issues have a high severity rating and affect versions prior to 1.6.4. Users are advised to upgrade to version 1.6.4 to mitigate these vulnerabilities.
A flaw was found in the Kerberos federation provider of Keycloak, an open-source identity and access management solution. When Kerberos password authentication is used without SPNEGO, the system fails to verify the identity of the Key Distribution Center (KDC) by requesting a server ticket. This allows an attacker on the same network to spoof the KDC and bypass the authentication process, potentially gaining unauthorized access to user accounts.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns (CVE-2026-31692)
* kernel: fanotify: fix false positive on permission events (CVE-2026-46150)
* kernel: netfilter: conntrack: remove sprintf usage (CVE-2026-53002)
* kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)
* kernel: zram: fix use-after-free in zram_bvec_write_partial() (CVE-2026-53185)
* kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (CVE-2026-63888)
* kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf (CVE-2026-63887)
* kernel: Kernel: Remote out-of-bounds write in RDMA/siw (CVE-2026-64268)
* kernel: sctp: don't free the ASCONF's own transport in DEL-IP processing (CVE-2026-64564)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
PostgreSQL is an advanced object-relational database management system (DBMS).
Security Fix(es):
* postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662)
* postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)
* postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680)
* postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)
* postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677)
* postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742)
* postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)
* postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)
* postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A use-after-free vulnerability (CVE-2026-6653) exists in the libxml2 library, which can cause denial of service or potentially allow arbitrary code execution when parsing specially crafted XML input. This issue affects multiple specific versions of libxml2 used in Red Hat Enterprise Linux and Ubuntu distributions. Official patches are available from both Red Hat and Ubuntu to address this vulnerability. The vulnerability is rated as moderate severity by Red Hat Product Security. No known exploits are reported in the wild at this time.
A flaw was found in libstoragemgmt. An attacker with control over a local or virtual storage device could provide specially crafted SCSI (Small Computer System Interface) Vital Product Data (VPD) page 0x80 data. This malformed data, specifically an untrusted page length field, can lead to a stack buffer overflow in the `_sg_parse_vpd_80()` function during serial number parsing. Successful exploitation could result in a denial of service by crashing or destabilizing the process querying the serial number.
An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves the stream's single transfer buffer permanently unsubmitted, defeating the bounds check in usbredirhost_iso_packet() and allowing a usbredir peer to write past the end of the packet descriptor array on every subsequent isochronous packet.
CVE-2026-102422 is a vulnerability in the node-shell-quote package where the quote() function emits a comment token that can comment out the rest of a shell line. This vulnerability is associated with CWE-78 and has a CVSS score of 8.1, indicating high severity. The affected versions are 1.6.1+20160617-git72fb5a8ce29b-1 and 1.10.0-1. The Red Hat advisory references this CVE but does not explicitly state patch availability or remediation details for node-shell-quote. The advisory mainly discusses updates to prometheus3.13 packages. No known exploits are reported in the wild.
A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like retries and circuit breakers for microservices. The issue occurs when using the ApplyGuard or ApplyFaultTolerance annotations, where the library fails to release internal tracking objects after each request. This causes a steady increase in memory usage that eventually leads to the application slowing down and crashing due to lack of memory.
Red Hat OpenShift AI 3.5.1 includes important security updates addressing multiple vulnerabilities identified by several CVEs including CVE-2026-19913. The advisory rates the severity of these issues as high but does not provide specific technical details or fixes. Updated images are available, and users are advised to upgrade their clusters following Red Hat's guidance to apply the errata. There are no known exploits in the wild at this time.