A special build of the kernel packages for Red Hat Enterprise Linux for
NVIDIA.
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
For detailed information on changes in this release, see the RHEL for NVIDIA Release Notes linked from the References section.
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.14.70. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHBA-2026:43251
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html/release_notes/
Security Fix(es):
* kernel: netfilter: flowtable: strictly check for maximum number of
actions (CVE-2026-43329)
* glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier
and large width (CVE-2026-5450)
* openssl: openssl: Information Disclosure from Uninitialized Memory via
Invalid RSA Public Key (CVE-2026-31790)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.14 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.14/html-single/updating_clusters/index#updating-cluster-cli.
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
This update for java-21-openjdk fixes the following issues:
- CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize (bsc#1264994).
- CVE-2026-46917: partial denial of service via TLS (bsc#1272223).
- CVE-2026-46968: unauthorized creation, deletion or modification access to critical data (bsc#1272224).
- CVE-2026-47010: unauthorized update, insert or delete access (bsc#1272225).
- CVE-2026-47021: partial denial of service via multiple network protocols (bsc#1272227).
- CVE-2026-47027: partial denial of service via multiple network protocols (bsc#1272228).
- CVE-2026-47059: partial denial of service via multiple network protocols (bsc#1272235).
- CVE-2026-47063: unauthorized creation, deletion or modification access to critical data (bsc#1272236).
- CVE-2026-60147: unauthorized update, insert or delete access (bsc#1272237).
Changes for java-21-openjdk:
- Update to upstream tag jdk-21.0.12+8 (July 2026 CPU):
+ JDK-7184899: Test sun/java2d/X11SurfaceData/
/SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fail
+ JDK-8015444: java/awt/Focus/KeyStrokeTest.java sometimes fails
+ JDK-8064922: [macos] Test javax/swing/JTabbedPane/4624207/
/bug4624207.java fails
+ JDK-8068293: [TEST_BUG] Test closed/com/sun/java/swing/plaf/
/motif/InternalFrame/4150591/bug4150591.java fails with
GTKLookAndFeel
+ JDK-8068310: [TEST_BUG] Test javax/swing/JColorChooser/
/Test4234761.java fails with GTKL&F
+ JDK-8068378: [TEST_BUG]The java/awt/Modal/PrintDialogsTest/
/PrintDialogsTest.java instruction need to update
+ JDK-8129418: JShell: better highlighting of errors in imports
on demand
+ JDK-8144124: [macosx] The tabs can't be aligned when we
pressing the key of 'R','B','L','C' or 'T'.
+ JDK-8183336: Better cleanup for jdk/test/java/lang/module/
/customfs/ModulesInCustomFileSystem.java
+ JDK-8203004: UnixMultiResolutionSplashTest.java fails on
Ubuntu16.04
+ JDK-8212084: G1: Implement UseGCOverheadLimit
+ JDK-8213530: Test java/awt/Modal/ToFront/
/DialogToFrontModeless1Test.java fails on Linux
+ JDK-8221451: PIT: sun/java2d/X11SurfaceData/
/SharedMemoryPixmapsTest/SharedMemoryPixmapsTest.sh fails
+ JDK-8225787: java/awt/Window/GetScreenLocation/
/GetScreenLocationTest.java fails on Ubuntu
+ JDK-8255463: java/nio/channels/spi/SelectorProvider/
/inheritedChannel/InheritedChannelTest.java failed with
ThreadTimeoutException
+ JDK-8274082: Wrong test name in jtreg run tag for
java/awt/print/PrinterJob/SwingUIText.java
+ JDK-8277444: Data race between
JvmtiClassFileReconstituter::copy_bytecodes and class linking
+ JDK-8278102: containers/docker/TestJcmd.java failed with
"RuntimeException: Could not find specified process"
+ JDK-8286258: [Accessibility,macOS,VoiceOver] VoiceOver reads
the spinner value wrong and sometime partially
+ JDK-8286865: vmTestbase/vm/mlvm/meth/stress/jni/nativeAndMH/
/Test.java fails with Out of space in CodeCache
+ JDK-8293484: AArch64:
TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails on CPU
with SHA512 feature support
+ JDK-8297191: [macos] Printing a page range with starting
page > 1 results in missing pages
+ JDK-8298783: java/lang/ref/FinalizerHistogramTest.java failed
with "RuntimeException: MyObject is not found in test output"
+ JDK-8298823: [macos] java/awt/Mouse/EnterExitEvents/
/DragWindowTest.java continues to fail with "No MouseReleased
event on label!"
+ JDK-8299304: Test "java/awt/print/PrinterJob/
/PageDialogTest.java" fails on macOS 13 x64 because the Page
Dialog blocks the Toolkit
+ JDK-8310645: CancelledResponse.java does not use HTTP/2 when
testing the HttpClient
+ JDK-8311538: CDS InternSharedString test fails on huge pages
host - cannot find shared string
+ JDK-8315588: JShell does not accept underscore from JEP 443
even with --enable-preview
+ JDK-8318365: Test runtime/cds/appcds/sharedStrings/
/InternSharedString.java fails after JDK-8311538
+ JDK-8318662: Refactor some jdk/java/net/httpclient/http2 tests
to JUnit
+ JDK-8319326: GC: Make TestParallelRefProc use
createTestJavaProcessBuilder
+ JDK-8319540: GC: Make TestSelectDefaultGC use
+ JDK-8320677: Printer tests use invalid '@run main/manual=yesno
+ JDK-8321303: Intermittent open/test/jdk/java/awt/
/KeyboardFocusmanager/ConsumeNextMnemonicKeyTypedTest/
/ConsumeNextMnemonicKeyTypedTest.java failure on Linux
+ JDK-8321687: Test vmTestbase/nsk/jvmti/scenarios/contention/
/TC03/tc03t002/TestDescription.java failed:
JVMTI_ERROR_THREAD_NOT_ALIVE
+ JDK-8322532: JShell : Unnamed variable issue
+ JDK-8323089: networkaddress.cache.ttl is not a system property
+ JDK-8323545: java/awt/GraphicsDevice/CheckDisplayModes.java
fails with "exit code: 133"
+ JDK-8323672: Suppress unwanted autoconf added flags in CC and
CXX
+ JDK-8323792: ThreadSnapshot::initialize can cause assert in
Thread::check_for_dangling_thread_pointer (possibility of
dangling Thread pointer)
+ JDK-8326458: Menu mnemonics don't toggle in Windows LAF when
This update includes the following RPMs:
prometheus3.5:
* prometheus3.5-3.5.5-0.6.hum1 (aarch64, x86_64)
* prometheus3.5-3.5.5-0.6.hum1.src (src)
Security Fix(es):
prometheus3.5:
* CVE-2026-53669
This security update provides a functional equivalent of RHSA-2026:62583.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2026:62583.
Two security vulnerabilities have been identified in the Hewlett-Packard Linux Imaging and Printing Project (HPLIP) packages used in Red Hat Enterprise Linux 8. These include a privilege escalation and arbitrary code execution vulnerability via operating system command injection (CVE-2026-8632) and an arbitrary code execution and privilege escalation vulnerability via integer overflow in the hpcups component (CVE-2026-8631). Red Hat has issued security updates addressing these issues for multiple architectures and variants of Red Hat Enterprise Linux 8.6 and 8.10. The vulnerabilities are rated with high severity by Red Hat Product Security.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the grafana13.1 package to address two high severity vulnerabilities identified as CVE-2026-67213 and CVE-2026-67214. The update provides new package versions for aarch64 and x86_64 architectures. This update remediates the vulnerabilities by upgrading to grafana13.1-13.1.1-0.3.hum1. No exploits in the wild are currently known.
The golang packages provide the Go programming language compiler.
Security Fix(es):
* crypto/tls: Unexpected session resumption in crypto/tls (CVE-2025-68121)
* crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation (CVE-2026-32281)
* golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root (CVE-2026-32282)
* crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages (CVE-2026-32283)
* crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* golang: cmd/compile: no-op interface conversion bypasses overlap checking (CVE-2026-27144)
* golang: cmd/compile: possible memory corruption after bound check elimination (CVE-2026-27143)
Bug Fix(es) and Enhancement(s):
* Update Go to version 1.25.9+2 [rhel-9.2.z] (JIRA:RHEL-182118)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.
Security Fix(es):
* netty-handler: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)
* netty-resolver-dns: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)
* netty-handler: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)
* io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)
* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)
* netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)
* netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)
* netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)
* io.quarkus/quarkus-vertx-http: Authorization bypass in HTTP path-based policies via encoded characters (CVE-2026-50559)
* jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)
* jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)
* eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name (CVE-2026-6860)
* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
* golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
* golang.org/x/net/html: Cross-Site Scripting allowing arbitrary code execution (CVE-2026-25681)
* golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data (CVE-2026-46599)
* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder (CVE-2026-46384)
* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration (CVE-2026-46385)
* net: golang: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* mime: golang: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)
* form-data: Form field override via CRLF injection (CVE-2026-12143)
* ws: Denial of Service via memory exhaustion from small WebSocket fragments (CVE-2026-48779)
* ws: Uninitialized memory disclosure via websocket.close() with TypedArray (CVE-2026-45736)
* undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)
* undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697)
* undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)
* js-cookie: Cookie attribute manipulation via prototype pollution (CVE-2026-46625)
* brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)
* protobufjs: Denial of Service via crafted schema (CVE-2026-44290)
* protobufjs: Data integrity impact due to prototype pollution (CVE-2026-44292)
* protobufjs: Denial of Service via crafted JSON descriptors (CVE-2026-45740)
* protobufjs: Arbitrary Code Execution via prototype pollution (CVE-2026-44291)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
The multicluster engine for Kubernetes provides the foundational components
that are necessary for the centralized management of multiple
Kubernetes-based clusters across data centers, public clouds, and private
clouds.
You can use the engine to create new Red Hat OpenShift Container Platform
clusters or to bring existing Kubernetes-based clusters under management by
importing them. After the clusters are managed, you can use the APIs that
are provided by the engine to distribute configuration based on placement
policy.
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/
Security Fix(es):
* kernel: netfilter: flowtable: strictly check for maximum number of
actions (CVE-2026-43329)
* kernel: Linux kernel: Use-After-Free in net/gro due to improper handling
of zerocopy skbs (CVE-2026-46323)
* kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role
(CVE-2026-53359)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.18 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.19.40. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHBA-2026:44228
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/
Security Fix(es):
* kernel: netfilter: flowtable: strictly check for maximum number of
actions (CVE-2026-43329)
* kernel: eventpoll: fix ep_remove struct eventpoll / struct file UAF
(CVE-2026-46242)
* kernel: KVM: arm64: vgic-its: Drop the translation cache reference only
for the erased entry (CVE-2026-46316)
* kernel: Linux kernel: Use-After-Free in net/gro due to improper handling
of zerocopy skbs (CVE-2026-46323)
* kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected role
(CVE-2026-53359)
* openssl: openssl: Information Disclosure from Uninitialized Memory via
Invalid RSA Public Key (CVE-2026-31790)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.19 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.
This Red Hat security advisory addresses multiple vulnerabilities in libssh, including a stack buffer overflow in the SFTP server longname construction (CVE-2026-15370) and several denial of service issues, information disclosure, integrity downgrade, and use-after-free vulnerabilities. The update to libssh version 0.12.2-1.hum1 fixes these issues and includes various bug fixes and enhancements. The advisory applies to Red Hat Hardened Images RPMs and related packages. No known exploits in the wild have been reported.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including an update to grafana12.4 (version 12.4.6-0.2.hum1) that addresses multiple vulnerabilities identified by CVE-2026-42127 and related CVEs. The update is a bug fix and enhancement release for affected RPM packages on aarch64 and x86_64 architectures. The advisory indicates a high severity level but does not provide detailed vulnerability or exploitation information. No known exploits are reported in the wild at this time.
Multiple heap buffer overflow vulnerabilities have been identified in the X.Org X11 libXfont2 runtime library affecting Red Hat Enterprise Linux 8. These include an integer overflow in BitmapScaleBitmaps (CVE-2026-56001), a heap buffer overflow in PCF font parsing (CVE-2026-56002), and a heap buffer overflow in computeProps property buffer (CVE-2026-56003). Red Hat has issued an important security advisory with updates to address these issues. The vulnerabilities could potentially lead to memory corruption. A security update is available for Red Hat Enterprise Linux 8 and related CodeReady Linux Builder packages. Users are advised to apply the update as per Red Hat's guidance.