Multiple arbitrary code execution vulnerabilities have been identified in the xorg-x11-server component of the X.Org open-source implementation of the X Window System. These include use-after-free, heap-based buffer overflow, integer truncation, buffer overflow, and out-of-bounds write issues. The vulnerabilities affect various versions of xorg-x11-server and have been rated with high severity by Red Hat Product Security. An important security update is available for Red Hat Enterprise Linux 9 and related distributions to address these issues.
A URL bypass vulnerability (CVE-2026-49825) in the lxml HTML cleaner component used in Python environments has been identified and addressed by Red Hat. The issue is due to a missing xlink:href attribute in the Cleaner, which could allow bypassing URL restrictions. This vulnerability affects multiple specific versions of Red Hat Quay and related Python lxml packages. Red Hat has released updated packages to remediate this issue. The vulnerability is rated as high severity by Red Hat Product Security. No known exploits in the wild have been reported. The affected products include various Red Hat Enterprise Linux 9 variants and Red Hat Quay versions as listed in the advisory.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the grafana13.2 package to address CVE-2026-109955. This update includes new RPM versions for multiple architectures. The advisory does not specify detailed technical information about the vulnerability or its impact but categorizes it with medium severity.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs addressing a vulnerability in libpng identified as CVE-2026-46675. The update includes new versions of libpng packages for multiple architectures. The advisory does not specify detailed technical impact or exploitation details but categorizes the severity as medium.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the pgbouncer package to version 1.26.1-1.hum1. This update addresses multiple vulnerabilities identified by CVE-2026-107348, CVE-2026-107349, and CVE-2026-107350. The advisory indicates this is a bug fix and enhancement update with a high severity rating. No specific affected versions were detailed beyond the updated package version. The update is available for multiple architectures including aarch64, s390x, and x86_64.
A vulnerability in Red Hat Quay allows an attacker to craft a specially designed PDF with long indirect object headers not terminated by whitespace, causing long runtimes when the PDF is processed. This issue has been addressed by updating the pypdf library to version 6.18.0. Workarounds include applying specific code changes if upgrading is not immediately possible.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CVE-2026-31411)
* kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
* kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
A security vulnerability (CVE-2026-98260) affects the kernel-rt packages of the Real Time Linux Kernel used in Red Hat Enterprise Linux. The issue involves improper cleanup of POSIX timers after the de_thread() function call. Red Hat has released an important security update addressing this flaw. The update requires a system reboot to take effect. The vulnerability is rated as high severity by the source data, and Red Hat recommends prompt application of the update to improve system security.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Bluetooth: MGMT: validate LTK enc_size on load (CVE-2026-43020)
* kernel: Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CVE-2026-31772)
* kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CVE-2026-43450)
* kernel: Linux kernel: xfrm single-frag length not properly limited ()
* kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() (CVE-2026-46149)
* kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CVE-2026-46189)
* kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() (CVE-2026-63924)
* kernel: ipv6: exthdrs: refresh nh after handling HAO option (CVE-2026-63922)
* kernel: ipv6: validate extension header length before copying to cmsg (CVE-2026-63920)
* kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu() (CVE-2026-63993)
* kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (CVE-2026-63984)
* kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning (CVE-2026-64113)
* kernel: ALSA: virtio: Validate control metadata from the device (CVE-2026-64490)
* kernel: AMD-SN-7061: Safe RET Interrupt Vulnerability (CVE-2026-68480)
* kernel: mm/khugepaged: write all dirty file folios when collapsing (CVE-2026-68086)
* kernel: ipv6: fix use-after-free in ip6_finish_output2() (CVE-2026-80792)
* kernel: exec: Cleanup POSIX timers right after de_thread() (CVE-2026-98260)
Bug Fix(es) and Enhancement(s):
* kernel panics caused by NULL pointer dereferences within octeon_ep_vf [rhel-10.0.z] (JIRA:RHEL-186344)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs addressing multiple vulnerabilities in the helm4 package version 4.2.3-0.1.2.hum1 for aarch64 and x86_64 architectures. The advisory highlights CVE-2026-63308 among other CVEs with a high severity rating. No newer patched version is explicitly stated, and no active exploitation in the wild has been reported. The update is relevant to Migration Toolkit for Virtualization components using this helm4 package version.
Red Hat has released an important security update for the Red Hat build of Quarkus 3.33.4 that addresses multiple vulnerabilities across various components including jackson-databind, jackson-core, Hibernate Validator, MongoDB Java Driver, RESTEasy, and others. The update fixes issues such as denial of service, path traversal, information disclosure, cross-site scripting, memory leaks, and certificate validation bypass. These vulnerabilities affect the Quarkus 3.33 build and related libraries. The advisory recommends applying this update after ensuring all previous errata are applied.
Kiali 1.73.25, for Red Hat OpenShift Service Mesh 2.6, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently
Security Fix(es):
* kiali-ossmc-rhel9: node-forge ASN.1 Unbounded Recursion (CVE-2025-66031)
* kiali-rhel9: node-forge ASN.1 Unbounded Recursion (CVE-2025-66031)
* kiali-ossmc-rhel9: glob CLI: Command injection via -c/--cmd executes matches with shell:true (CVE-2025-64756)
* kiali-rhel9: glob CLI: Command injection via -c/--cmd executes matches with shell:true (CVE-2025-64756)
Red Hat has issued a security advisory addressing multiple vulnerabilities, including the high-severity CVE-2026-41178, affecting Red Hat Advanced Cluster Management for Kubernetes and related products such as the Migration Toolkit for Applications and Red Hat Trusted Artifact Signer. These vulnerabilities impact various versions of Red Hat's Kubernetes management and application migration components. A patch is available to remediate these issues.
Two security vulnerabilities were identified in the lrzsz package used in Red Hat Enterprise Linux 8. These include an arbitrary file overwrite via absolute path traversal in restricted mode (CVE-2026-105840) and arbitrary command execution via crafted file names in pipe mode (CVE-2026-105841). Red Hat has issued an important security advisory with updates that fix these issues along with other bug fixes and enhancements. The vulnerabilities affect multiple architectures of Red Hat Enterprise Linux 8. The advisory provides updated packages to remediate these security flaws.
A security update has been released for Red Hat Connectivity Link 1.4 addressing an important security issue identified as CVE-2026-108334. The update includes new container images for the rhcl-operator and related components available in the Red Hat container registry. Red Hat Product Security rates the impact of this update as Important. No specific affected versions are detailed in the advisory. The update aims to improve security for managing application traffic across hybrid and multicloud environments.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.22.15. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHSA-2026:68550
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.22/html/release_notes/
A critical security vulnerability (CVE-2026-53939) exists in the cjose C library, which implements Javascript Object Signing and Encryption (JOSE). The flaw involves the use of an all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption, weakening the encryption and potentially compromising data confidentiality. Red Hat has issued a security update addressing this issue for Red Hat Enterprise Linux 10.0 Extended Update Support and related products. Users are advised to apply the update as detailed in the Red Hat advisory.
Red Hat has issued a security advisory for an update to Red Hat Hardened Images RPMs, specifically including multiple nodejs26-related packages. The update addresses a security issue identified as CVE-2026-109855. No explicit details on the nature of the vulnerability or its exploitation are provided. The advisory lists updated package versions for nodejs26 and related components across multiple architectures.
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.
Security Fix(es):
* kernel: Linux kernel: Denial of Service due to use-after-free in act_tunnel_key (CVE-2026-68377)
* kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get (CVE-2026-72262)
* kernel: net/sched: cls_route: fix fastmap use-after-free on filter (CVE-2026-74583)
* kernel: ALSA: usx2y: bound the hwdep mmap fault offset (CVE-2026-74641)
* kernel: udp: fix potential use-after-free in tunnel segmentation (CVE-2026-74705)
* kernel: svcrdma: Validate Read chunk positions before reconstruction (CVE-2026-89526)
* kernel: NFSD: Prevent client use-after-free during blocked-lock reaping (CVE-2026-90036)
* kernel: svcrdma: Reject Write/Reply chunks with segcount 0 (CVE-2026-93228)
* kernel: md/raid5-ppl: fix use-after-free in ppl_do_flush() (CVE-2026-93262)
Bug Fix(es) and Enhancement(s):
* powerpc/pseries: pci - logic bug in SR-IOV enable (JIRA:RHEL-240146)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.