Threat database

Multiple security vulnerabilities have been identified in Redis related to its Lua scripting capabilities, including integer overflow, unauthorized script execution as different users, denial of service, and use-after-free leading to potential remote code execution. These issues affect Redis versions packaged with Red Hat Enterprise Linux 9 and related distributions. A security update addressing these vulnerabilities is available from Red Hat.

Multiple security vulnerabilities affecting the Linux kernel in Red Hat Enterprise Linux 10 and related distributions have been identified and fixed. These include race conditions, buffer overflows, and improper bounds checking in kernel subsystems such as NFS, vsock/virtio, memory management, ALSA audio, and WiFi. The update addresses these issues to improve system security and stability. A system reboot is required after applying the update for changes to take effect.

Two security vulnerabilities have been identified in the libtiff library used for manipulating TIFF files: a Use-After-Free vulnerability (CVE-2025-8176) and a Write-What-Where vulnerability (CVE-2025-9900). These vulnerabilities affect various Red Hat Enterprise Linux 9 and related distributions. A security update is available to address these issues. The vulnerabilities have been rated with high severity by the vendor. No known exploits are reported in the wild at this time.

A security update has been released for the java-17-openjdk packages used in Red Hat Enterprise Linux and SUSE distributions. The update addresses two vulnerabilities: CVE-2025-53066 related to path factories and CVE-2025-53057 related to certificate handling. The update also includes bug fixes related to build packaging across multiple Red Hat Enterprise Linux releases. The security impact is rated as moderate by Red Hat Product Security. No CVSS score is provided in the advisory. The update is available for various Red Hat Enterprise Linux 8 and 9 versions and architectures.

Multiple high severity security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update. These include memory safety bugs, out-of-bounds read/write issues triggered by WebGL textures, cross-process information leaks via malicious IPC messages, use-after-free conditions, and improper handling of OBJECT tag type attributes. The update fixes these issues in Thunderbird ESR 140.4 and Thunderbird 144 on Red Hat Enterprise Linux 9 and its extended update support versions across multiple architectures.

Please updateBug Fix(es) and Enhancement(s): * Update .NET 10 to RC 1 [rhel-9.7.z] (JIRA:RHEL-114572) * Update .NET 10 to RC 2 [rhel-9.7.z] (JIRA:RHEL-121559) * dotnet10.0: .NET Denial of Service Vulnerability [rhel-9.7.z] (JIRA:RHEL-120623) * dotnet10.0: .NET Security Feature Bypass Vulnerability [rhel-9.7.z] (JIRA:RHEL-120600)

The issue was addressed with improved checks. This issue is fixed in Safari 18.5, iOS 18.5 and iPadOS 18.5, macOS Sequoia 15.5, tvOS 18.5, visionOS 2.5, watchOS 11.5. Processing maliciously crafted web content may lead to memory corruption.

A security vulnerability identified as CVE-2025-10728 affects the Qt SVG module in the libQt6Svg6 package version 6.10.0-1.1 on openSUSE Tumbleweed and Red Hat Enterprise Linux 10. The issue involves uncontrolled recursion in the Qt SVG module, which has been addressed by the vendor. The vulnerability is rated as medium severity. A patch is available and has been released by Red Hat and SUSE to remediate this issue.

Red Hat has issued a security advisory for Vim addressing two path traversal vulnerabilities identified as CVE-2025-53905 and CVE-2025-53906. These vulnerabilities affect Vim versions included in Red Hat Enterprise Linux 9, specifically versions from 9.0.0 up to but not including 9.9.0 across multiple architectures. The security impact is rated as moderate. Red Hat has released updates to fix these issues and provides guidance on applying the update.

An integer overflow vulnerability (CVE-2025-48964) has been identified in the iputils package, which provides basic network monitoring utilities including ping. This vulnerability affects multiple Red Hat Enterprise Linux 9 variants and SUSE Linux Enterprise versions. The issue has been rated as having moderate security impact. A security update addressing this vulnerability is available from Red Hat and SUSE.

Multiple security vulnerabilities have been identified and fixed in the Linux kernel packages used by Red Hat Enterprise Linux 9 and related distributions. These include a slab-out-of-bounds vulnerability in key_task_permission (CVE-2024-50301), an issue in KVM x86/hyper-v handling of non-canonical addresses during PV TLB flush (CVE-2025-38351), and a flaw in the ath12k wifi driver related to RX peer fragment setup error handling (CVE-2025-39761). The update addresses these issues to improve kernel security. The update requires a system reboot to take effect.

A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1.

A vulnerability has been identified within Rancher Manager where a missing server-side validation on the `.username` field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts.

A vulnerability has been identified within Rancher Manager whereby the SAML authentication from the Rancher CLI tool is vulnerable to phishing attacks. The custom authentication protocol for SAML-based providers can be abused to steal Rancher’s authentication tokens.

A vulnerability has been identified within Rancher Manager whereby `Impersonate-Extra-*` headers are being sent to an external entity, for example `amazonaws.com`, via the `/meta/proxy` Rancher endpoint. These headers may contain identifiable and/or sensitive information e.g.email addresses.

A moderate severity integer buffer overflow vulnerability (CVE-2025-40928) exists in the perl-JSON-XS module used by Red Hat Enterprise Linux 9.4 Extended Update Support. The flaw causes a segmentation fault when parsing crafted JSON data, potentially leading to application crashes. Red Hat has released a security update to address this issue for affected versions of the CodeReady Linux Builder across multiple architectures. Users should apply the update to remediate the vulnerability.

Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.