Threat database

CVE-2025-11395 is a medium severity vulnerability affecting Podman on Red Hat Enterprise Linux 10. It allows an attacker who can supply a crafted tar archive to the 'podman load' command to create files on the host system with the privileges of the user running Podman. This could lead to limited confidentiality, integrity, and availability impacts. No explicit affected versions are stated. The vendor advisory does not provide direct patch information for this CVE but references a Red Hat advisory for related container tools. The CVSS score is 5.5, indicating a moderate risk.

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. SDK version: 10.0.112 Runtime version: 10.0.12 Security Fix(es): * dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649) * dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806) Bug Fix(es) and Enhancement(s): * Update .NET 10.0 to SDK 10.0.112 and Runtime 10.0.12 [rhel-9.8.z] (JIRA:RHEL-252319) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2026-85234 is a vulnerability in the tftp-hpa component of Red Hat Enterprise Linux 10. It involves an out-of-bounds read/write in the in.tftpd remap engine when processing certain inverse remap rules with custom error messages. A remote unauthenticated attacker can exploit this flaw by sending a crafted request to cause the daemon to crash, resulting in a denial of service. Red Hat has issued a security advisory with a patch to address this issue for Red Hat Enterprise Linux 8, but no explicit patch information is provided for version 10 in the input data.

A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header (e.g. victim/.wh.) can cause the extraction destination directory to be replaced with an arbitrary file when processed by storage/pkg/archive.UnpackLayer, ApplyLayer, or ApplyUncompressedLayer.

A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and create files outside the intended destination. Buildah itself uses chroot hardening and is not affected.

CVE-2026-85013 is an OS command injection vulnerability in the environment-modules package on Red Hat Enterprise Linux 10. A local attacker can exploit this by placing a maliciously named modulefile in a location visible to the victim's MODULEPATH. When the victim uses Bash completion for module or ml commands, the malicious module name is evaluated as a command, leading to arbitrary command execution. This impacts confidentiality, integrity, and availability of the affected system. A security update is available that addresses this issue.

Red Hat has released a security advisory addressing multiple high severity vulnerabilities in Red Hat Hardened Images RPMs, including the grafana13.1 and grafana13.2 packages. The update resolves issues identified by CVE-2026-90771, CVE-2026-9029, and others. No known exploits have been reported in the wild. Users are advised to apply the provided RPM updates to remediate these vulnerabilities.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating multiple python3.14 packages to address several vulnerabilities including CVE-2026-87910. The advisory lists updated RPM packages for various architectures and includes fixes for multiple CVEs. No explicit patch versions are stated as affected, and no known exploits are reported in the wild. The update is classified as a security advisory with high severity.

Red Hat has issued a security advisory for its Hardened Images RPMs, specifically updating multiple CUPS-related packages to address CVE-2026-87876. The update includes packages such as cups, cups-client, cups-devel, cups-filesystem, cups-ipptool, cups-libs, cups-lpd, and cups-printerapp. The advisory indicates a low severity vulnerability related to these packages. No affected versions are explicitly stated, and the update is available in version 2.4.19-4.2.hum1 for multiple architectures.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including an update to the rabbitmq-server4.3 package. The update addresses multiple security issues identified by numerous CVEs. Updated RPM packages are provided for aarch64 and x86_64 architectures. No detailed vulnerability descriptions or specific fixes are included in the advisory text.

Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which add new features and enhancements, bug fixes, and updated container images. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.15/html-single/release_notes/index#acm-release-notes

The multicluster engine for Kubernetes v2.10 images The multicluster engine for Kubernetes provides the foundational components that are necessary for the centralized management of multiple Kubernetes-based clusters across data centers, public clouds, and private clouds. You can use the engine to create new Red Hat OpenShift Container Platform clusters or to bring existing Kubernetes-based clusters under management by importing them. After the clusters are managed, you can use the APIs that are provided by the engine to distribute configuration based on placement policy.

A flaw was found in gss-ntlmssp. A memory leak occurs in the NTLM target-info parser when a crafted NTLM CHALLENGE message contains duplicated string-valued AV_PAIR entries. The parser allocates memory for each string value but does not free the previous allocation when the same AV_PAIR type appears more than once, leaking the earlier allocation. A malicious or man-in-the-middle server can exploit this to cause gradual memory exhaustion on the client during NTLM authentication, leading to a denial of service.

A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions against the actual data buffer size. A malicious or compromised remote search provider could exploit this by providing oversized icon dimensions, leading to an out-of-bounds read. This can cause the GNOME Shell process to crash, disrupting the user's session, and potentially disclose sensitive information from adjacent memory.

Multiple security vulnerabilities affecting Grafana as packaged in Red Hat Enterprise Linux 10 have been addressed in a security update. These include privilege escalation via dashboard overwrite, unauthorized access due to incorrect IPv6 allow-list defaults, and denial of service issues caused by unbounded memory growth and excessive memory allocation. The update also fixes various underlying Go language library vulnerabilities impacting certificate validation, email parsing, and HTML parsing. Red Hat rates the overall security impact as Moderate.

Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images for Red Hat OpenShift Container Platform 4.22.14. See the following advisory for the RPM packages for this release: https://access.redhat.com/errata/RHSA-2026:66356 Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes: https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/ Security Fix(es): * curl: curl: Insecure connection establishment due to TLS configuration mismatch (CVE-2026-8286) * curl: curl: Man-in-the-middle attack via SSH host key bypass (CVE-2026-9547) * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721) * sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5 (CVE-2026-11824) * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204) * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816) * kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation (CVE-2026-43133) * unbound: Unbound: Denial of Service via malformed EDNS Report-Channel option (CVE-2026-55973) * glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVE-2026-58014) * glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVE-2026-58015) * kbd: Local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login (CVE-2026-72693) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. All OpenShift Container Platform 4.22 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html-single/updating_clusters/index#updating-cluster-cli.

Red Hat Advanced Cluster Management for Kubernetes provides the capabilities to address common challenges that administrators and site reliability engineers face as they work across a range of public and private cloud environments. Clusters and applications are all visible and managed from a single console—with security policy built in. This advisory contains the container images for Red Hat Advanced Cluster Management for Kubernetes, which add new features and enhancements, bug fixes, and updated container images. See the following Release Notes documentation, which will be updated shortly for this release, for additional details about this release: https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.11/html-single/release_notes/index#acm-release-notes

Multiple security vulnerabilities have been identified and fixed in the Linux kernel packages used by Red Hat. These include issues such as out-of-bounds writes, race conditions, improper access restrictions, and validation errors across various kernel subsystems including networking, storage, and device drivers. The advisory covers several CVEs, each addressing a specific kernel component flaw. The update also includes bug fixes and enhancements unrelated to security. A patch is available to address these vulnerabilities.