Threats Tagged 'cve-2026-63073'

A stack buffer overflow vulnerability (CVE-2025-6170) exists in the libxml2 library's xmllint interactive shell command handling on Red Hat Enterprise Linux 8 and related products. Red Hat has rated the security impact as low. A security update is available that addresses this vulnerability by updating the libxml2 package. No known exploits are reported in the wild.

Multiple security vulnerabilities have been identified in PostgreSQL, an advanced object-relational database management system, including arbitrary code execution, privilege escalation, and information disclosure issues. These vulnerabilities affect various PostgreSQL components such as tsvector and tsquery functions, psql COPY FROM STDIN, logical decoding plugins, and others. The vulnerabilities are rated with high severity and impact critical database operations. Red Hat has issued security advisories and updates addressing these issues for affected Red Hat Enterprise Linux versions.

A security update has been issued for Red Hat Update Infrastructure (RHUI) container images, addressing vulnerabilities including CVE-2026-13221. The update involves multiple RPM packages related to Perl and Red Hat Hardened Images. The advisory indicates a high severity level but does not provide detailed technical specifics or CVSS scores. The update is intended to mitigate security issues in affected versions of RHUI.

A security update for Red Hat Hardened Images addresses multiple vulnerabilities in OpenSSL 3, including memory growth issues, heap buffer overflows, invalid pointer dereferences, and cryptographic forgery risks. These vulnerabilities affect components such as QUIC server processing, CMP response validation, and PKCS#12 file handling. The update fixes these issues in OpenSSL version 3.5.6-0.5.hum1 and related packages. The update is available and should be applied to mitigate the risks.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including multiple OpenSSL packages. This update addresses several vulnerabilities identified by multiple CVEs, including CVE-2026-14457 and others. The advisory provides updated RPM packages for architectures aarch64 and x86_64. No specific details about the vulnerabilities or their exploitation are provided in the advisory. The update is intended as a bug fix and enhancement for the affected OpenSSL components.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including updates to several openssl3 packages. This update addresses multiple vulnerabilities identified by various CVEs, including CVE-2026-14457 and others. The advisory provides updated RPM versions for openssl3 and related development packages for aarch64 and x86_64 architectures. No explicit fix details or exploitation information is provided in the advisory.

CVE-2026-63073 is a high-severity vulnerability in Node.js related to OpenSSL CMP response validation. The issue involves passing an unexpected response sender distinguished name directly as a format string, which corresponds to CWE-134 (Uncontrolled Format String). This vulnerability affects multiple specific Node.js versions, including various Ubuntu package versions. A patch is available to address this issue. The vulnerability has a CVSS score of 9.8, indicating critical impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time.