Threats Tagged 'cve-2026-56854'

A stack buffer overflow vulnerability (CVE-2025-6170) exists in the libxml2 library's xmllint interactive shell command handling on Red Hat Enterprise Linux 8 and related products. Red Hat has rated the security impact as low. A security update is available that addresses this vulnerability by updating the libxml2 package. No known exploits are reported in the wild.

Red Hat has issued a security advisory for Red Hat Hardened Images, including golang1.26 packages, addressing multiple vulnerabilities. The update provides new RPM packages for golang1.26 version 1.26.6-0.1.hum1 across various architectures. The advisory references several CVEs including CVE-2026-33818 and others. No explicit details on the nature of the vulnerabilities or exploitation are provided in the advisory. The update is classified as a security fix with high severity.

A medium severity heap out-of-bounds read vulnerability (CVE-2026-2303) was found in the GSSAPI error handling of the go.mongodb.org mongo-driver dependency used by Apptainer. The vulnerability is addressed by removing this dependency in a security update for the alloy component. The update also adds support for building the SUID starter on SLES 15. A patch is available for affected versions.

Multiple security issues were addressed in the trivy-0.75.0-1.1 package for openSUSE Tumbleweed. These vulnerabilities affect the SUSE trivy product, specifically version 0.74.0-160000.3.1. The issues have been fixed in the updated package version 0.75.0-1.1. No CVSS score is provided for these vulnerabilities. There are no known exploits in the wild at this time.

Red Hat Advanced Cluster Management for Kubernetes has a security advisory addressing multiple vulnerabilities including CVE-2026-41178. This update includes new features, bug fixes, and updated container images to improve security and functionality. The advisory highlights fixes for issues such as image override regressions and other security concerns. The update is rated as important by Red Hat Product Security and affects specific versions of the product. A patch is available to remediate these vulnerabilities.

A security advisory from Red Hat addresses vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes and related products, including the Migration Toolkit for Applications. The advisory highlights a high-severity vulnerability identified as CVE-2026-41178 among others. The vulnerabilities affect multiple versions of Red Hat products and components related to Kubernetes management and application migration. A patch is available to address these issues.

An update is now available for the Red Hat build of Cryostat 4 on RHEL 9. Security Fix(es): * Apache HttpComponents Core: Denial of Service via excessive HTTP headers (CVE-2026-54399) * Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks (CVE-2026-54428) * Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects (CVE-2026-15075) * Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation (CVE-2026-15076) * SeaweedFS: Information disclosure via S3 API gateway path traversal (CVE-2026-55874) * SeaweedFS: Unauthorized data deletion via path traversal in S3 gateway (CVE-2026-58372) * protobufjs: Denial of Service via crafted .proto schema (CVE-2026-59877) * Quarkus REST: Unbounded multipart MIME part-header accumulation allows remote OOM denial of service (CVE-2026-16308) * Netty: Denial of Service via SPDY header decompression amplification (CVE-2026-55833) * Netty: Denial of Service via SPDY SETTINGS frame processing (CVE-2026-55831) * Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message (CVE-2026-55851) * Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec (CVE-2026-56745) * Netty: Security control bypass allows unauthorized requests via null origin header (CVE-2026-56746) * Netty: Denial of Service via HTTP/2 DATA frame memory leak (CVE-2026-56819) * Netty: Memory exhaustion in netty-codec-http (decompression bomb) (CVE-2026-59899) * Apache Thrift: Denial of Service via integer overflow or wraparound (CVE-2026-55969) * Apache Thrift: Denial of Service via improper handling of highly compressed data (CVE-2026-48586) * Apache Thrift: Denial of Service due to uncontrolled resource allocation (CVE-2026-45112) * brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation (CVE-2026-69152) * ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass (CVE-2026-69192) * jackson-core: Denial of Service via incomplete fix in async JSON parser (CVE-2026-68494) * DOMPurify: Cross-site scripting vulnerability allows code execution (CVE-2026-49978) * OpenTelemetry-Go: Denial of Service via oversized baggage headers (CVE-2026-41178) * Go net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * Go encoding/xml: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) * Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * Go crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * js-yaml: Denial of Service via crafted YAML documents (CVE-2026-59869) * golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions (CVE-2026-56854) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A security update for the keybase-client addresses multiple vulnerabilities including authentication bypass and deadlocks in the crypto/ssh library. The update involves patching the affected crypto dependency and upgrading to Go 1.26 to incorporate the updated crypto library. These vulnerabilities are identified by CVE-2026-56854, CVE-2026-56855, and CVE-2026-78662. The issues could potentially allow bypassing authentication mechanisms and cause deadlocks, impacting the reliability and security of the client.

This security update for the hauler component addresses multiple vulnerabilities including authentication bypass and deadlocks in the golang.org/x/crypto/ssh library, as well as denial of service (DoS) issues in google.golang.org/grpc caused by missing ':authority' and 'Host' headers. The update advances hauler to version 2.1.0 and fixes several CVEs (CVE-2026-41888, CVE-2026-56854, CVE-2026-56855, CVE-2026-78662, CVE-2026-84303, CVE-2026-84304, CVE-2026-84445). The vulnerabilities are rated critical and a patch is available. No known exploits in the wild have been reported.

CVE-2026-56854 is a high-severity authorization vulnerability in the golang.org/x/crypto/ssh package. The flaw involves incorrect enforcement of the source-address restriction in authentication callbacks, where this restriction was only applied to some authentication paths but ignored in others. This inconsistency could allow unauthorized access if source-address restrictions are used as a security control.