Two security vulnerabilities were addressed in the gstreamer1-plugins-bad-free package for Red Hat Enterprise Linux 10. These include a heap out-of-bounds write in the rfbsrc/librfb Hextile with 16bpp framebuffer (CVE-2026-59691) and a stack buffer overflow in the DTLS certificate Subject DN verification callback (CVE-2026-59692). Red Hat has released an important security update to fix these issues.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.22.7. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:44229
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/
Security Fix(es):
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
* cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall (CVE-2026-12505)
* podman: Podman: Information disclosure via malicious container image environment variables (CVE-2026-57231)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.22 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.
Multiple security vulnerabilities have been identified and fixed in the Linux kernel packages used by Red Hat and related distributions. These include issues such as use-after-free, double-free, null pointer dereference, and refcount corruption affecting various kernel subsystems including networking, memory management, and device drivers. The update addresses these flaws to prevent potential system compromise. Users must apply the provided patches and reboot to ensure protection.
Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon (epmd) via connection slot exhaustion. The do_accept function in erts/epmd/src/epmd_srv.c calls epmd_cleanup_exit() when accept(2) returns EMFILE (per-process file descriptor limit reached) or ENFILE (system-wide file descriptor limit reached), rather than treating these as recoverable conditions. An attacker can exhaust epmd's file descriptor slots by holding many TCP connections open while periodically sending a single byte to reset the idle timeout, then causing accept(2) to return EMFILE, which kills the daemon. epmd has no per-source-IP connection cap, making the attack feasible from a single source. On Debian/Ubuntu default packaging the impact is amplified: the systemd unit inherits a low file descriptor soft limit, and repeated daemon deaths trigger systemd's start-rate-limit, permanently failing both epmd.service and epmd.socket and requiring manual operator intervention to recover. This issue affects OTP from OTP 17.0 before OTP 29.0.4, OTP 28.5.0.4 and OTP 27.3.4.15.
Red Hat Advanced Cluster Management for Kubernetes provides the
capabilities to address common challenges that administrators and site
reliability engineers face as they work across a range of public and
private cloud environments. Clusters and applications are all visible and
managed from a single console—with security policy built in.
This advisory contains the container images for Red Hat Advanced Cluster
Management for Kubernetes, which add new features and enhancements, bug
fixes, and updated container images. See the following
Release Notes documentation, which will be updated shortly for this
release, for additional details about this release:
https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.16/html-single/release_notes/index#acm-release-notes
A heap buffer overflow vulnerability (CVE-2026-66035) exists in libssh2 used by Red Hat Hardened Images RPMs. A malicious SSH server can exploit this flaw during cipher negotiation to corrupt heap memory on the client side before authentication, potentially leading to arbitrary code execution. Exploitation requires the client to connect to a malicious server, limiting the attack surface. Red Hat has issued an advisory but no official fix has been released yet for the affected packages.
OpenShift Virtualization is Red Hat's virtualization solution designed for Red Hat OpenShift Container Platform.
This advisory contains OpenShift Virtualization v4.19 images.
Multiple denial of service vulnerabilities and a crash issue have been identified in libreswan, an IPsec and IKE implementation for Linux. These include DoS via RSA-SHA1 authentication payloads in IKEv1 and IKEv2, DoS via malformed fragmentation in IKEv2, and an assertion failure caused by a badly formatted X.509 certificate that crashes the daemon. Red Hat has released an important security update for libreswan in Red Hat Enterprise Linux 10 to address these issues.
Multiple vulnerabilities have been identified in FreeRDP, a Remote Desktop Protocol implementation used by the xfreerdp client in Red Hat Enterprise Linux 10 and related CodeReady Linux Builder packages. These include heap-buffer-overflow, use-after-free, out-of-bounds write, and crafted packet issues that could lead to remote code execution or denial of service. Red Hat has released security updates addressing these issues.
A vulnerability in the Node.js permission model allows bypass of intended security boundaries via path misvalidation in the process.report.writeReport() function. This affects multiple supported Node.js release lines including versions 22, 24, and 26. Red Hat has released updated hardened image RPMs that address this flaw. The vulnerability can lead to confidentiality impacts or security boundary bypass under affected configurations. The issue is tracked as CVE-2026-48617 and is rated with high severity.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to multiple systemd-related packages. The advisory addresses a vulnerability identified as CVE-2026-15059, classified with medium severity. The update provides bug fixes and enhancements to systemd components across aarch64 and x86_64 architectures. No specific affected versions are detailed, and no known exploits are reported in the wild. The advisory includes instructions to apply the update via Red Hat's image repository.
Multiple vulnerabilities affecting Red Hat Hardened Images RPMs for nginx have been addressed in a security update. These include CVE-2026-42533 related to the map directive and regex matching, and CVE-2026-56434 involving a heap buffer over-read in the ngx_http_ssi_module. The vulnerabilities can lead to memory modification or denial of service. A patch is available and users are advised to apply the update to mitigate these issues.