A vulnerability was identified in the Perl regular expression engine used within Red Hat Update Infrastructure (RHUI) container images. The flaw causes an internal data field overflow when processing patterns with a very large number of alternative fixed strings, leading to incorrect regular expression matches. This can result in false positives or false negatives in matching, potentially causing incorrect security decisions if these expressions are used for security-sensitive operations. Exploitation requires local access and complex buffer overflow conditions, and the impact is considered low if best practices are followed. Red Hat has released updated RHUI container images incorporating the latest RPM packages and base images to address this issue.
Red Hat OpenShift Container Platform is Red Hat's cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container
Platform 4.19.47. See the following advisory for the RPM packages for this
release:
https://access.redhat.com/errata/RHBA-2026:66369
Space precludes documenting all of the container images in this advisory.
See the following Release Notes documentation, which will be updated
shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/
Security Fix(es):
* kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry
on expiry (CVE-2026-43114)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page(s) listed in the References section.
All OpenShift Container Platform 4.19 users are advised to upgrade to these
updated packages and images when they are available in the appropriate
release channel. To check for available updates, use the OpenShift CLI (oc)
or web console. Instructions for upgrading a cluster are available at
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.
Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.19.47. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:66369
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/
Migration Toolkit for Applications (MTA) accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift.
This solution provides insight throughout the adoption process, at both the portfolio and application levels: inventory, assess, analyze, and manage
applications for faster migration to OpenShift via the user interface.
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.
SDK version: 10.0.112
Runtime version: 10.0.12
Security Fix(es):
* dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability (CVE-2026-58649)
* dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability (CVE-2026-69806)
Bug Fix(es) and Enhancement(s):
* Update .NET 10.0 to SDK 10.0.112 and Runtime 10.0.12 [rhel-9.8.z] (JIRA:RHEL-252319)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
Security Fix(es):
* goose: aws-smithy-json: Denial of Service via uncontrolled recursion with deeply nested JSON (CVE-2026-18140)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating multiple python3.14 packages to address several vulnerabilities including CVE-2026-87910. The advisory lists updated RPM packages for various architectures and includes fixes for multiple CVEs. No explicit patch versions are stated as affected, and no known exploits are reported in the wild. The update is classified as a security advisory with high severity.
Red Hat has issued a security advisory for its Hardened Images RPMs, specifically updating multiple CUPS-related packages to address CVE-2026-87876. The update includes packages such as cups, cups-client, cups-devel, cups-filesystem, cups-ipptool, cups-libs, cups-lpd, and cups-printerapp. The advisory indicates a low severity vulnerability related to these packages. No affected versions are explicitly stated, and the update is available in version 2.4.19-4.2.hum1 for multiple architectures.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including an update to the rabbitmq-server4.3 package. The update addresses multiple security issues identified by numerous CVEs. Updated RPM packages are provided for aarch64 and x86_64 architectures. No detailed vulnerability descriptions or specific fixes are included in the advisory text.
Red Hat Advanced Cluster Management for Kubernetes provides the
capabilities to address common challenges that administrators and site
reliability engineers face as they work across a range of public and
private cloud environments. Clusters and applications are all visible and
managed from a single console—with security policy built in.
This advisory contains the container images for Red Hat Advanced Cluster
Management for Kubernetes, which add new features and enhancements, bug
fixes, and updated container images. See the following
Release Notes documentation, which will be updated shortly for this
release, for additional details about this release:
https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.17/html-single/release_notes/index#acm-release-notes