Threats Tagged 'cve-2026-18798'

Red Hat Cost Management On-Premise provides cost visibility and analysis for on-premise OpenShift environments. This update includes the latest bug fixes and enhancements.

This update includes the following RPMs: nodejs24: * nodejs24-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-bin-24.18.1-0.1.hum1 (noarch) * nodejs24-devel-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-docs-24.18.1-0.1.hum1 (noarch) * nodejs24-full-i18n-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-libs-24.18.1-0.1.hum1 (aarch64, x86_64) * nodejs24-npm-11.16.0-1.24.18.1.0.1.hum1 (noarch) * nodejs24-npm-bin-24.18.1-0.1.hum1 (noarch) * v8-13.6-devel-13.6.233.17-1.24.18.1.0.1.hum1 (aarch64, x86_64) * nodejs24-24.18.1-0.1.hum1.src (src)

A stack buffer overflow vulnerability (CVE-2025-6170) exists in the libxml2 library's xmllint interactive shell command handling. This vulnerability affects Red Hat Enterprise Linux 8 and related products. The issue has been rated with a low security impact by Red Hat. A security update is available that addresses this vulnerability by updating the libxml2 package. No known exploits are reported in the wild.

Multiple security vulnerabilities have been identified in PostgreSQL, an advanced object-relational database management system, including arbitrary code execution, privilege escalation, and information disclosure issues. These vulnerabilities affect various PostgreSQL components such as tsvector and tsquery functions, psql COPY FROM STDIN, logical decoding plugins, and others. The vulnerabilities are rated with high severity and impact critical database operations. Red Hat has issued security advisories and updates addressing these issues for affected Red Hat Enterprise Linux versions.

Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version.

This update includes the following RPMs: openssl: * openssl-3.5.8-0.1.hum1 (aarch64, x86_64) * openssl-config-fips-3.5.8-0.1.hum1 (aarch64, x86_64) * openssl-devel-3.5.8-0.1.hum1 (aarch64, x86_64) * openssl-devel-engine-3.5.8-0.1.hum1 (aarch64, x86_64) * openssl-fips-provider-upstream-3.5.8-0.1.hum1 (aarch64, x86_64) * openssl-libs-3.5.8-0.1.hum1 (aarch64, x86_64) * openssl-perl-3.5.8-0.1.hum1 (aarch64, x86_64) * openssl-3.5.8-0.1.hum1.src (src)

This update includes the following RPMs: openssl3: * openssl3-devel-3.5.8-0.1.hum1 (aarch64, x86_64) * openssl3-devel-engine-3.5.8-0.1.hum1 (aarch64, x86_64) * openssl3-libs-3.5.8-0.1.hum1 (aarch64, x86_64) * openssl3-3.5.8-0.1.hum1.src (src)

A vulnerability in the Node.js QUIC server component could cause a double free condition when processing INITIAL packets, potentially leading to a denial of service. This issue affects specific Ubuntu package versions of Node.js and OpenSSL. The vulnerability has a CVSS score of 7.5, indicating a medium severity level. A patch is available from Ubuntu to address this issue.

A security update for Red Hat Hardened Images addresses multiple vulnerabilities in OpenSSL 3, including memory growth issues, heap buffer overflows, invalid pointer dereferences, and cryptographic forgery risks. These vulnerabilities affect various components such as QUIC server processing, CMP response validation, and PKCS#12 file handling. The update fixes these issues in OpenSSL version 3.5.6-0.5.hum1 and related packages.