Threats Tagged 'csaf'

Red Hat has issued a security advisory for its Hardened Images RPMs, specifically addressing vulnerabilities in the dotnet8.0 packages. The update includes multiple RPMs for aarch64 and x86_64 architectures. The advisory references two CVEs, including CVE-2026-59725, and provides updated package versions to mitigate these issues. No explicit patch versions are stated as affected or fixed in the advisory. No known exploits in the wild have been reported. The severity is assessed as high by the vendor.

Red Hat has issued a security advisory (RHSA-2026:37382) for Red Hat Hardened Images RPMs, including multiple OpenSSH packages. This update addresses several vulnerabilities identified by CVE identifiers CVE-2026-59995 through CVE-2026-60002. The advisory covers bug fixes and enhancements for OpenSSH components across aarch64 and x86_64 architectures. No explicit affected versions or detailed vulnerability descriptions are provided in the advisory. No known exploits in the wild have been reported at the time of this advisory.

Red Hat has released a security advisory for the Red Hat build of Apache Camel 4.18.1.P1 for Spring Boot, addressing multiple vulnerabilities across several components including Apache CXF, Netty, Log4j, and AssertJ. The update fixes issues such as information disclosure, arbitrary code execution, denial of service, token confusion, unauthorized access, and HTTP request smuggling. These vulnerabilities affect various libraries and protocols used within the product. The advisory rates the security impact as important and provides a patch release to address these issues.

An integer overflow vulnerability exists in the WavPack audio decoder of GStreamer's gst-plugins-good package on Red Hat Enterprise Linux 10. The flaw occurs during buffer size calculation, causing a heap buffer overflow and memory corruption. This can lead to application crashes or potentially arbitrary code execution if a user opens a malicious WavPack audio file. Red Hat has released security updates to address this issue.

A security vulnerability (CVE-2026-45700) in FreeRDP's planar bitmap decoder allows an out-of-bounds write that can lead to arbitrary code execution. This affects the xfreerdp client used to connect to RDP servers. Red Hat has issued a security update for Red Hat Enterprise Linux 9 and related variants to address this issue. The vulnerability is rated as important by Red Hat Product Security. Users should apply the provided update to mitigate the risk.

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections, even though mysql_real_escape_string() was supposed to prevent them. This issue has been patched in versions 3.3.19 and 3.4.9.

Red Hat issued a security advisory for Red Hat Hardened Images RPMs, specifically updating multiple erlang27 packages. The advisory addresses a vulnerability identified as CVE-2026-53422, categorized under CWE-204. No explicit details on the nature of the vulnerability or exploitation are provided. The update is a bug fix and enhancement release for the listed erlang27 RPMs on aarch64 and x86_64 architectures. No affected versions or explicit patch status are stated in the advisory.

This advisory concerns the Assisted Installer RHEL 9 components integrated with the multicluster engine for Kubernetes version 2.10.4. The multicluster engine facilitates centralized management of multiple Kubernetes-based clusters across various environments. The advisory references a security issue identified as CVE-2026-53488 with a high severity rating. No specific technical details about the vulnerability or its exploitation are provided, and no patches or fixes are currently available according to the vendor advisory.

The Go based RHTAS Model Transparency CLI image can be used to sign and verify AI/ML workloads

Red Hat has released a new satellite/foreman-mcp-server-rhel9 container image as a Technology Preview. This MCP server is designed for advanced reporting and AI-driven data analysis within Red Hat Satellite. The advisory references multiple CVEs but does not provide specific details on vulnerabilities or fixes. No patches or official fixes are currently available. The container image is intended for local use and advanced reporting capabilities.