CVE-2026-17615 is an XML External Entity (XXE) vulnerability in the RESTEasy SourceProvider component used by Red Hat Build of Apache Camel 3.33.3.SP1. An unauthenticated attacker can exploit this flaw by sending a crafted XML payload with an external entity reference to an endpoint accepting application/xml, causing the server to disclose sensitive file contents in the HTTP response. This occurs because the SAXParser used in the SourceProvider.writeTo() method does not disable external entity resolution.
A vulnerability in GNU C Library (eglibc) versions 2.3 to 2.44 causes an infinite loop when converting crafted SHIFT_JISX0213 input if the output buffer is too small. This flaw affects the SHIFT_JISX0213 character set, which is not commonly used. A patch is available to fix this issue.
This advisory concerns OpenShift Virtualization v4.12 images from Red Hat, which address security issues identified by CVE-2026-67320. The vulnerability is rated as high severity and relates to Red Hat's virtualization solution for the OpenShift Container Platform. The advisory does not specify any fixes for this CVE in the current update but recommends applying all previously released errata before updating. No known exploits are reported in the wild.
CVE-2026-76763 is a denial of service vulnerability in SmallRye GraphQL within the Red Hat build of Quarkus 3.27.5.SP1. The flaw involves improper validation of large exponent float literals during number scalar coercion for BigInteger, allowing an unauthenticated remote attacker to cause CPU exhaustion or an OutOfMemoryError. This results in denial of service conditions. Red Hat has issued an important security advisory including this fix in the 3.27.5.SP1 release.
A vulnerability (CVE-2026-19025) was found in the HDF5 library used in Red Hat Hardened Images RPMs. The flaw allows an attacker to craft a malicious HDF5 file with mismatched chunk-layout dimensionality and dataspace rank. When such a file is opened by an application using vulnerable HDF5 versions, it triggers a divide-by-zero error causing the application to crash and resulting in a denial of service (DoS).
A security vulnerability in iperf3 allows the server to accept unbounded peer-controlled JSON parameters, which can lead to remote denial of service via resource exhaustion. This issue is tracked as CVE-2026-71217 and affects Red Hat Enterprise Linux 9 and its variants. Red Hat has issued a security advisory and provided updated packages to address this vulnerability.
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect() (CVE-2026-43023)
* kernel: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CVE-2026-46209)
Bug Fix(es) and Enhancement(s):
* [RHEL 10] Bonding reports unknown speed/duplex for tg3 interface [rhel-10.0.z] (JIRA:RHEL-182769)
* CLONE -RHEL 10.0.z xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (JIRA:RHEL-224218)
* vhost: reset the vring metadata cache on vring reconfiguration [rhel-10.0.z] (JIRA:RHEL-224544)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift.
This solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage
applications for faster migration to OpenShift via the user interface.
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a remote attacker to send large amounts of data or maintain connections indefinitely, potentially crashing the server by exhausting its memory or other resources.
Multiple security vulnerabilities have been identified and fixed in PHP packages distributed by Red Hat for Red Hat Enterprise Linux 8 and 9. These include a memory corruption issue in the OpenSSL extension (CVE-2026-14355), an SQL injection vulnerability in the PostgreSQL extension due to improper backslash escaping (CVE-2026-17543), and a denial of service vulnerability caused by circular symbolic links in phar archives (CVE-2026-7260). The vulnerabilities affect PHP versions 7.4 and 8.0 as packaged in Red Hat Enterprise Linux. Red Hat has released updated packages with backported fixes for these issues. The overall security impact is rated low to important depending on the PHP version and specific vulnerability.
Two moderate security vulnerabilities were identified in PipeWire, a multimedia server for Linux and Unix-like systems. The issues include a NULL pointer dereference in the RAOP RTSP component (CVE-2026-14324) and a stack overflow in the Pulse Server alloca function (CVE-2026-14330). Red Hat has released security updates for these vulnerabilities affecting Red Hat Enterprise Linux 9 and its variants. These flaws could potentially lead to application crashes or other unintended behavior. No CVSS scores are provided, and no known exploits in the wild have been reported. Users of affected Red Hat Enterprise Linux 9 versions are advised to apply the available updates to mitigate these issues.
The libxml2 library is a development toolbox providing the implementation of various XML standards.
Security Fix(es):
* libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow (CVE-2026-11979)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
CVE-2026-73501 is a high-severity vulnerability in the golang-github-getkin-kin-openapi package affecting certain versions prior to 0.144.0. The issue involves the ValidationHandler.Load() function in openapi3filter/validation_handler.go silently replacing a nil AuthenticationFunc, which could lead to security risks. Red Hat has issued an advisory addressing this and other vulnerabilities in related packages, providing updated RPMs to remediate the issues.
CVE-2026-82327 is a medium severity vulnerability in libsolv, a dependency-resolution library used by RPM-based package managers like dnf, yum, and zypper on Red Hat Enterprise Linux 10. The flaw involves improper validation of array indices when rewriting .solv cache files, which can lead to an out-of-bounds memory write. This typically occurs if the .solv cache file is corrupted or left in a torn state after an unclean system shutdown. Exploitation results in a denial of service by crashing the affected package management tools. Arbitrary code execution is not expected since the out-of-bounds write stores a fixed, non-attacker-controlled value.
CVE-2026-18393 is a medium severity vulnerability in FFmpeg's tdsc_load_cursor() function, which causes an out-of-bounds write on a heap-allocated buffer when processing crafted TDSC cursor data. This flaw exists in FFmpeg builds shipped with Red Hat Enterprise Linux AI 3 and related products. Exploitation requires a user to open a specially crafted video file, potentially leading to denial of service or arbitrary code execution. No official fix or patch has been confirmed yet. Users are advised to avoid opening untrusted TDSC-encoded video content until a patched version is available.
A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malformed token can force the JWE.deserialize() function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of service (DoS) for services that process untrusted JWE values.
CVE-2026-81893 is a moderate severity vulnerability in gdk-pixbuf affecting versions 2.26.4 and later. It involves an out-of-bounds write caused by stale size metadata left after freeing the ICC profile buffer when loading specially crafted JPEG images with chunked ICC profile markers. This can lead to application crashes. Exploitation requires local user interaction with a vulnerable application processing a malicious JPEG image. A fix is available upstream but not yet released in Red Hat packages.