Multiple security vulnerabilities have been identified and fixed in the Linux kernel packages distributed by Red Hat. These include issues in cryptographic memory initialization, SCSI error handling, IPv6 networking, fanotify permission events, DRM prime handle swapping, Bluetooth L2CAP channel locking, and CAN BCM timer use-after-free. The update also includes various bug fixes and enhancements. The vulnerabilities affect specific Red Hat kernel versions and have been assigned high severity. A patch is available to address these issues.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically addressing a vulnerability identified as CVE-2026-15788 in the buildah package version 1.44.0-3.2.hum1. The update includes fixes for buildah and buildah-tests RPMs for aarch64 and x86_64 architectures. No explicit patch version beyond 1.44.0-3.2.hum1 is stated, and no exploit in the wild is currently known.
Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift.
This solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage
applications for faster migration to OpenShift via the user interface.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.22.7. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:44229
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.22.6. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:40763
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/
This update for librsvg fixes the following issues:
Update to version 2.60.2:
- CVE-2024-12224: Fixed idna accepts Punycode labels that do not produce any non-ASCII when decoded (bsc#1243867).
- CVE-2024-43806: Fixed memory explosion in rustix (bsc#1229950).
This advisory addresses security vulnerabilities and bug fixes in the Linux kernel packages for Red Hat Enterprise Linux 8. Two security issues are fixed: a user-triggerable WARN_ON() in the RDMA mana driver (CVE-2026-46117) and a missing channel lock in the Bluetooth l2cap component (CVE-2026-53071). The update also resolves a kernel deadlock issue related to lock order. The update is rated as important by Red Hat Product Security and requires a system reboot to take effect.
The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers.
Security Fix(es):
* postgresql: PostgreSQL: Operating system account hijack via symlink following in pg_basebackup and pg_rewind (CVE-2026-6475)
* postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477)
* postgresql: PostgreSQL: Credential recovery via covert timing channel in MD5 password comparison (CVE-2026-6478)
* postgresql: integer overflow can cause an undersized allocation and an out-of-bounds write (CVE-2026-6473)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat Satellite is a system management solution that allows organizations
to configure and maintain their systems without the necessity to provide
public Internet access to their servers or other client systems. It
performs provisioning and configuration management of predefined standard
operating environments.
Security Fix(es):
* python3.12-pulpcore: pulpcore: relative_path_validator bypass via directory traversal in FilesystemExport (CVE-2026-12701)
* yggdrasil-worker-forwarder: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* yggdrasil-worker-forwarder: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* yggdrasil-worker-forwarder: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* yggdrasil-worker-forwarder: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation (CVE-2026-33186)
Red Hat has released a security advisory for Red Hat Hardened Images RPMs, updating the helm3 package to version 3.21.3-0.1.2.hum1 for aarch64 and x86_64 architectures. The update addresses multiple security vulnerabilities identified by CVE-2026-50162, CVE-2026-56852, and CVE-2026-63308. No detailed technical information about the vulnerabilities or exploitation is provided. The update aims to fix security issues and enhance the hardened images.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.22.10. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:54768
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/
A moderate severity vulnerability (CVE-2026-35554) affects Apache Kafka Clients used within Red Hat JBoss Enterprise Application Platform 8.1.7 XP 6.0.5.GA. The issue involves information disclosure and data corruption caused by a race condition in the producer buffer management. Red Hat has released a cumulative patch (JBoss EAP XP 6.0.5 runtime distribution) addressing this vulnerability. Users are advised to apply this update after ensuring all prior errata are installed and backing up their systems.