A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application.
A denial of service vulnerability (CVE-2026-91777) affecting the jackson-databind component of the Jackson Data Processor has been identified and addressed by Red Hat. The issue involves a quadratic forward-reference completion that can lead to denial of service. Red Hat has released security updates for Red Hat Enterprise Linux 9 and related variants to remediate this vulnerability.
Red Hat issued a security advisory for Submariner v0.23, a Kubernetes operator enabling cross-cluster connectivity for services and pods. The advisory addresses multiple security fixes and container updates in the Submariner operator and related components. The update is rated as having an Important security impact. The advisory references several CVEs affecting the product and provides updated container images and documentation improvements. No CVSS score is provided for these vulnerabilities. The affected product is Red Hat Advanced Cluster Management for Kubernetes version 2.16. The advisory includes links to upstream Submariner release notes and Red Hat documentation for further details.
Red Hat has issued an important security advisory for OpenShift Virtualization version 4.21 images addressing multiple bugs and enhancements, including fixes for CVE-2026-56858 and related CVEs. The advisory updates container images for Red Hat's virtualization solution on the OpenShift Container Platform. Users are advised to apply the update after ensuring all prior relevant errata are installed. No detailed vulnerability descriptions or exploitation methods are provided in the advisory.
A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation without being limited to the payload available in the object. Processing a crafted ASF, WMV, or WMA file can cause a very large memory allocation request and lead to denial of service if the allocation fails or the process is memory-constrained.
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifiers to prevent replay. An attacker who obtains a valid, unexpired signed SAML response can submit it multiple times and receive distinct Central authentication tokens for the mapped identity.
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the privileged yggdrasil system service account can exploit this to gain ownership of arbitrary files, leading to privilege escalation to root.
A vulnerability in urllib3 versions 1.26.0 through 2.7.0 causes improper separation of TLS configurations between HTTPS proxies and target servers. This can result in the proxy TLS connection using the target server's SSL context and certificate verification policies, potentially disabling proxy certificate verification. An attacker intercepting the HTTPS proxy connection could impersonate the proxy, exposing sensitive data and client TLS identity information. The issue affects HTTPS forwarding proxy configurations and is fixed in urllib3 version 2.8.0 and later.
Red Hat OpenShift AI 3.4.5 is a security advisory release that addresses multiple critical vulnerabilities identified by various CVEs including CVE-2025-61162. The advisory announces updated images for Red Hat OpenShift AI but does not provide specific details about the vulnerabilities or fixes in the release notes. Users are directed to official Red Hat documentation for upgrade instructions. No explicit patch details or affected versions are provided in the advisory content.
Red Hat has issued a security advisory for updated RPM packages in its Hardened Images, specifically for nodejs24 and related components. The update addresses multiple security vulnerabilities identified by CVE identifiers including CVE-2026-87018, CVE-2026-87029, and others. These vulnerabilities affect various architectures including aarch64, s390x, and x86_64. The advisory provides updated package versions to mitigate these issues.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating multiple mariadb10.11 packages to address several security vulnerabilities identified by CVE-2026-85745, CVE-2026-85985, CVE-2026-86047, CVE-2026-97380, CVE-2026-107814, and CVE-2026-107823. The advisory provides updated RPM versions that include fixes for these vulnerabilities. No specific affected versions prior to the update are detailed in the advisory.
A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.
Multiple security vulnerabilities have been identified in OpenSSL affecting Red Hat Enterprise Linux 10.0 Extended Update Support and related variants. These include information disclosure, data tampering, denial of service, acceptance of forged messages, unbounded memory growth, and use-after-free issues in various cryptographic operations. Red Hat has issued an important security advisory with updates to address these issues.
Multiple arbitrary code execution vulnerabilities have been identified in the xorg-x11-server component of the X.Org open-source implementation of the X Window System. These include use-after-free, heap-based buffer overflow, integer truncation, buffer overflow, and out-of-bounds write issues. The vulnerabilities affect various versions of xorg-x11-server and have been rated with high severity by Red Hat Product Security. An important security update is available for Red Hat Enterprise Linux 9 and related distributions to address these issues.
A URL bypass vulnerability (CVE-2026-49825) in the lxml HTML cleaner component used in Python environments has been identified and addressed by Red Hat. The issue is due to a missing xlink:href attribute in the Cleaner, which could allow bypassing URL restrictions. This vulnerability affects multiple specific versions of Red Hat Quay and related Python lxml packages. Red Hat has released updated packages to remediate this issue. The vulnerability is rated as high severity by Red Hat Product Security. No known exploits in the wild have been reported. The affected products include various Red Hat Enterprise Linux 9 variants and Red Hat Quay versions as listed in the advisory.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the grafana13.2 package to address CVE-2026-109955. This update includes new RPM versions for multiple architectures. The advisory does not specify detailed technical information about the vulnerability or its impact but categorizes it with medium severity.
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs addressing a vulnerability in libpng identified as CVE-2026-46675. The update includes new versions of libpng packages for multiple architectures. The advisory does not specify detailed technical impact or exploitation details but categorizes the severity as medium.
A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory growth. Sustained requests can exhaust system resources, eventually causing the service to degrade or crash.