Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.
Security Fix(es):
* rubygem-katello: missing repository authorization in content_uploads exposes cross-product content existence (CVE-2026-12515)
* openvox-server: HTTP request smuggling via chunked extension quoted-string parsing (CVE-2026-2332)
* rubygem-faraday: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday_middleware: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday-cookie_jar: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday-em_http: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday-em_synchrony: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday-excon: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday-httpclient: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday-multipart: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday-net_http: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday-net_http_persistent: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday-patron: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday-rack: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-faraday-retry: Faraday: Denial of Service via crafted nested query strings (CVE-2026-54297)
* rubygem-nokogiri: Nokogiri: Denial of Service or Information Disclosure via invalid encoding handling (CVE-2026-57236)
* python-pillow: Pillow: Denial of Service via crafted PCF font data (CVE-2026-54059)
* python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files (CVE-2026-54060)
* python-pillow: Pillow: Denial of Service via crafted BDF font file (CVE-2026-55379)
* python-pillow: Pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380)
This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes.
Breaking changes:
* None
Deprecations:
* None
Technology Preview features:
* None
Enhancements:
* None
Bug fixes:
* None
Known issues:
* None
A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1.7.1, XP 6.0.5.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Security Fix(es):
* memory exhaustion in io.netty:netty-codec-haproxy (CVE-2026-48059)
* DNS cache poisoning in io.netty:netty-resolver-dns (CVE-2026-47691)
* DDoS in io.netty:netty-codec-http2 (CVE-2026-50560)
* memory exhaustion in io.netty:netty-codec-redis (CVE-2026-50011)
* memory exhaustion in io.netty:netty-codec-redis (CVE-2026-44250)
* memory exhaustion in io.netty:netty-codec-redis (CVE-2026-44890)
* IPv6 subnet filter bypass in io.netty:netty-handler (CVE-2026-44249)
* request smuggling in io.netty:netty-codec-http (CVE-2026-50020)
* memory leak in io.netty:netty-codec-haproxy (CVE-2026-44893)
* TLS hostname verification accidentally disabled in io.netty:netty-handler (CVE-2026-50010)
* DNS cache poisoning in io.netty:netty-resolver-dns (CVE-2026-45673)
* excessive memory usage from SNIHandler in io.netty:netty-handler (CVE-2026-45416)
* file descriptor leak in io.netty:netty-transport-native-epoll and io.netty:netty-transport-native-kqueue (CVE-2026-45536)
* DNS cache poisoning in io.netty:netty-resolver-dns (CVE-2026-45674)
* memory exhaustion in io.netty:netty-transport-sctp (CVE-2026-46340)
* denial of service in io.netty:netty-codec-http2 (CVE-2026-47244)
* memory exhaustion in io.netty:netty-codec-redis (CVE-2026-48006)
* memory exhaustion in io.netty:netty-codec-http2 (CVE-2026-48043)
* netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression (CVE-2026-42587)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood.
Security Fix(es):
* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)
* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)
* encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818)
* net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860)
* net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853)
* html/template: golang: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858)
* crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862)
* encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating multiple thrift-related packages to version 0.24.0-0.1.hum1. This update addresses several vulnerabilities identified by multiple CVEs including CVE-2026-41608. The advisory indicates that a patch is available for affected versions prior to 0.24.0. The update is classified as a high severity security advisory.
Bouncy Castle for Java versions before 1.85 and LTS versions before 2.73.12 contain a vulnerability in RSA PKCS#1 signature verification. The verification process incorrectly skips the last two hash bytes when the NULL byte is omitted in the signature. This flaw can lead to incorrect signature validation.
GNU Tar provides the ability to create tar archives, as well as various other kinds of manipulation. For example, you can use Tar on previously created archives to extract files, to store additional files, or to update or list files which were already stored.
Security Fix(es):
A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction.(CVE-2026-18508)
A security update for Red Hat Hardened Images RPMs addresses multiple vulnerabilities including CVE-2026-72816, which involves an IP spoofing flaw in the go-chi/chi RealIP middleware. This flaw allows remote attackers to supply arbitrary IP addresses in client-controlled headers, potentially bypassing IP-based access controls and evading rate limiting. The update provides new versions of spire1.15 packages for aarch64 and x86_64 architectures. The vendor advisory confirms the update is available and provides mitigation guidance. No explicit patch details are provided for CVE-2026-72815. The vulnerabilities affect Red Hat Hardened Images versions from 1.15.0 up to and including 1.15.2-0.4.hum1.
Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime.
This asynchronous patch is an update for Red Hat JBoss Enterprise Application Platform 8.1. See Release Notes for information about the most significant bug fixes and enhancements included in this release.
Security Fix(es):
* netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)
* netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)
* netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)
* netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)
* netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime.
This asynchronous patch is an update for Red Hat JBoss Enterprise Application Platform 8.1. See Release Notes for information about the most significant bug fixes and enhancements included in this release.
Security Fix(es):
* netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)
* netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)
* netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)
* netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)
* netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A denial of service vulnerability (CVE-2026-37460) exists in FRRouting (frr10) via a crafted BGP UPDATE message. FRRouting is a routing software supporting multiple protocols including BGP4. Red Hat has issued an important security advisory with an update for Red Hat Enterprise Linux 9 to address this issue. The update also fixes SELinux denials related to Python site-packages on RHEL-9. No CVSS score is provided, but the vulnerability is rated as high severity by Red Hat. The advisory includes updated packages for various RHEL 9 architectures and extended update support versions.
Archive::Tar provides an object oriented mechanism for handling tar files. It provides class methods for quick and easy files handling while also allowing for the creation of tar file objects for custom manipulation. If you have the IO::Zlib module installed, Archive::Tar will also support compressed or gzipped tar files.
Security Fix(es):
* perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size (CVE-2026-9538)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A security vulnerability (CVE-2026-5056) affecting the gstreamer1-plugins-good package in Red Hat Enterprise Linux 10 allows arbitrary code execution via a stack-based buffer overflow in the qtdemux plugin. This vulnerability is rated as important by Red Hat Product Security. A security update addressing this issue is available for multiple architectures of Red Hat Enterprise Linux 10 and its extended support versions.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.22.16. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHSA-2026:71445
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/
A medium severity vulnerability (CVE-2026-18477) affecting the tar utility in Red Hat Hardened Images and SUSE Linux Enterprise has been addressed by Red Hat. The issue is classified under CWE-367 and fixed in tar version 1.35-9.1.hum1 for relevant architectures including aarch64 and x86_64. No known exploits are reported in the wild. The update is available as part of Red Hat Hardened Images RPMs security update RHSA-2026:49361.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: ipc: limit next_id allocation to the valid ID range (CVE-2026-52923)
* kernel: tipc: fix double-free in tipc_buf_append() (CVE-2026-52993)
* kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle ()
* kernel: net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CVE-2026-64530)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
This update for freeipmi fixes the following issue:
- CVE-2026-33554: improper memory handling and data validation can lead to stack buffer overflows and acceptance of
malformed payloads/responses (bsc#1260414).
The libsolv packages provide a library for resolving package dependencies using a satisfiability algorithm.
Security Fix(es):
* libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums (CVE-2026-9150)
* libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file (CVE-2026-9149)
* libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data (CVE-2026-48864)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems.
Security Fix(es):
* python-pillow: Pillow: Denial of Service via crafted BDF font file (CVE-2026-55379)
* python-pillow: Pillow: Denial of Service via crafted GD 2.x image file (CVE-2026-55380)
* python-pillow: Pillow: Denial of Service via crafted PCF font data (CVE-2026-54059)
* python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files (CVE-2026-54060)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.