The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit.
This release contains OpenJDK 11 with Extended Lifecycle Support for Red Hat Enterprise Linux versions 7, 8, and 9.
Security Fix(es):
* JDK: LIBPNG: out-of-bounds read in png_image_read_composite (CVE-2025-66293)
* JDK: LIBPNG: Information disclosure and denial of service via integer truncation in simplified write API (CVE-2026-22801)
* JDK: LIBPNG: has a heap buffer overflow in png_set_quantize (CVE-2026-25646)
* JDK: GIFLIB: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)
* JDK: LIBPNG: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
* JDK: LIBPNG: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)
* JDK: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read (CVE-2026-22695)
* JDK: (CVE-2026-22007)
* JDK: (CVE-2026-22016)
* JDK: (CVE-2026-22013)
* JDK: (CVE-2026-22018)
* JDK: (CVE-2026-22021)
* JDK: (CVE-2026-34268)
* JDK: (CVE-2026-34282)
* JDK: (CVE-2026-23865)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A security update for GraphicsMagick addresses CVE-2026-33535, which involves an out-of-bounds write of a zero byte in the X11 display interaction path that can cause a crash. This vulnerability could lead to denial of service by crashing the application. No specific affected versions or patch details are provided in the available data.
This security update for Ghostscript addresses multiple vulnerabilities including integer and stack-based buffer overflows, and argument sanitization issues that could lead to denial-of-service or password disclosure. The update upgrades Ghostscript to version 10.06.0 and removes the non-standard operator "selectdevice." Several other bug fixes and improvements are included. No CVSS score is provided, but the impact ranges from medium to potentially serious due to memory corruption and information disclosure risks.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CVE-2025-39766)
* kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation (CVE-2026-23270)
* kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service (CVE-2026-31419)
* kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (CVE-2026-43037)
* kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (CVE-2026-43038)
* kernel: smb: client: validate the whole DACL before rewriting it in cifsacl (CVE-2026-31709)
* kernel: md/bitmap: fix GPF in write_page caused by resize race (CVE-2026-43163)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Mozilla Thunderbird is a standalone mail and newsgroup client.
Security Fix(es):
* libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
* libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636)
* thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5734)
* thunderbird: firefox: Memory safety bugs fixed in Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird ESR 140.9.1, Firefox 149.0.2 and Thunderbird 149.0.2 (CVE-2026-5731)
* firefox: thunderbird: Incorrect boundary conditions, integer overflow in the Graphics: Text component (CVE-2026-5732)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Two denial of service vulnerabilities were identified in Squid related to ICP (Internet Cache Protocol) handling. These include a heap use-after-free vulnerability and a denial of service via crafted ICP traffic. The vulnerabilities affect Squid versions packaged with Red Hat Enterprise Linux 9.6 Extended Update Support and SUSE Linux Enterprise 9.6 EMS. Red Hat has issued security updates to address these issues.
This security update for Tor addresses multiple vulnerabilities and bugs across several versions, including fixes for memory comparison errors that could cause remote crashes, out-of-bounds read errors, and defense-in-depth security issues. The updates also include improvements to flow control, compatibility fixes, and hardening compiler flags. The vendor strongly recommends upgrading to these fixed versions to mitigate the identified issues.
This update for libraw fixes the following issues:
- CVE-2026-5342: crafted TIFF/NEF file can cause an out-of-bounds read (bsc#1261499).
- CVE-2026-20884: integer overflow vulnerability in the deflate_dng_load_raw (bsc#1261671).
- CVE-2026-20889: heap-based buffer overflow vulnerability in the x3f_thumb_loader (bsc#1261672).
- CVE-2026-20911: heap-based buffer overflow vulnerability in the HuffTable: initval (bsc#1261673).
- CVE-2026-21413: heap-based buffer overflow vulnerability in the lossless_jpeg_load_raw (bsc#1261674).
- CVE-2026-24450: integer overflow vulnerability in uncompressed_fp_dng_load_raw (bsc#1261675).
- CVE-2026-24660: heap-based buffer overflow vulnerability in the x3f_load_huffman (bsc#1261676).
A security update for ClamAV addresses CVE-2026-20031, which involves improper error handling in the HTML CSS module when splitting UTF-8 strings. This flaw can cause denial of service conditions via a crafted HTML file. The update also includes fixes for non-security issues and upgrades dependencies to resolve other advisories and stability problems.
A security update for rust1.94 addresses multiple issues including a fix for CVE-2026-31812, which involves avoiding unwrapping varint decoding during parameters parsing. The update also includes a change to not force gcc-15 on SLE-16 and higher. The vulnerability is rated medium severity and no CVSS score is provided.
A security update for Botan addresses CVE-2026-32884, which involves a certificate validation bypass caused by mixed-case Common Name fields in X.509 certificates. This vulnerability could allow improper validation of certificates, potentially undermining trust in secure communications. The issue has been fixed by the vendor.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Linux kernel: Denial of Service via unsafe requeue in rxrpc_recvmsg (CVE-2026-23066)
* kernel: Kernel: Privilege escalation or denial of service in nf_tables via inverted element activity check (CVE-2026-23111)
* kernel: Linux kernel: Local denial of service and memory leak in DAMON sysfs via setup failure (CVE-2026-23144)
* kernel: Linux kernel: Use-after-free in bonding module can cause system crash or arbitrary code execution (CVE-2026-23171)
* kernel: scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CVE-2026-23193)
* kernel: net/sched: cls_u32: use skb_header_pointer_careful() (CVE-2026-23204)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2xxx: Fix improper freeing of purex item
In qla2xxx_process_purls_iocb(), an item is allocated via
qla27xx_copy_multiple_pkt(), which internally calls
qla24xx_alloc_purex_item().
The qla24xx_alloc_purex_item() function may return a pre-allocated item
from a per-adapter pool for small allocations, instead of dynamically
allocating memory with kzalloc().
An error handling path in qla2xxx_process_purls_iocb() incorrectly uses
kfree() to release the item. If the item was from the pre-allocated
pool, calling kfree() on it is a bug that can lead to memory corruption.
Fix this by using the correct deallocation function,
qla24xx_free_purex_item(), which properly handles both dynamically
allocated and pre-allocated items.
This security update for Roundcube Webmail 1.6 addresses multiple vulnerabilities including a pre-authentication arbitrary file write via unsafe deserialization in the redis/memcache session handler (CVE-2026-35537). Additional fixes include prevention of unauthorized password changes, IMAP injection and CSRF bypass in mail search, remote image blocking bypasses via SVG animate attributes and crafted body background attributes, XSS in HTML attachment preview, and SSRF with information disclosure via stylesheet links. The update also resolves regressions affecting mail search with non-ASCII criteria and data URL image handling. Users of Roundcube 1.6.x are recommended to update to version 1.6.15 to mitigate these issues.
Two vulnerabilities in LibVNCServer have been addressed by a security update. The first (CVE-2026-32853) involves a crafted FramebufferUpdate message that can cause information disclosure or denial of service. The second (CVE-2026-32854) involves crafted HTTP requests that can lead to denial of service. No specific affected versions or patch details are provided in the input data.
This security update for dovecot24 addresses multiple vulnerabilities including denial of service via invalid base64 authentication, potential file disclosure through symlink following during OOXML extraction, a panic in ManageSieve, SQL injection and LDAP query injection when auth_username_chars is empty, OTP driver replay attacks, timing attack on Doveadm credentials, and excessive resource consumption via malformed IMAP login and MIME parameters. These issues are fixed in version 2.4.3.
Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as part of a Red Hat security advisory for Red Hat Enterprise Linux 9.6 Extended Update Support. These vulnerabilities include use-after-free bugs, memory safety issues, privilege escalation, sandbox escapes, incorrect boundary conditions, integer overflows, race conditions, information disclosure, denial-of-service, spoofing, and mitigation bypasses affecting various components such as the JavaScript engine, graphics, audio/video, WebRTC, XPCOM, and IMAP parsing. The update is rated as having an important security impact. Users are advised to apply the security update provided by Red Hat to remediate these issues.
This update for the gosec security tool addresses multiple issues including false positives in security rules, fixes for taint analysis hangs and infinite recursion, and enhancements to detection rules such as insecure HTTP cookie configuration and unsafe deserialization. The update also includes dependency bumps and improvements to the CI integration. No specific vulnerability details or exploitation methods are provided.
A security update for GraphicsMagick addresses a heap overflow vulnerability in the pcd decoder that can lead to out-of-bounds reads. This issue is tracked as CVE-2026-26284. The vulnerability has been rated with medium severity. No specific affected versions or patch details are provided in the available data.