Threats Tagged 'cve-2026-67312'

Red Hat Developer Hub (RHDH) versions prior to 1.9.9 contain a security vulnerability identified as CVE-2026-19534. This vulnerability affects the enterprise-grade, self-managed developer portal based on Backstage.io, supported on Kubernetes platforms including OpenShift. Red Hat has released version 1.9.9 which addresses this and other issues. No CVSS score is provided for this vulnerability, but it is classified as high severity by the source.

Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings.

Red Hat has issued a security advisory for Red Hat Hardened Images including golang1.26 packages, addressing multiple vulnerabilities. The update provides new RPM packages for golang1.26 version 1.26.6-0.1.hum1 across various architectures. The advisory references several CVEs including CVE-2026-33818 and others. The update is classified as a security fix with high severity. No detailed technical information or exploitation details are provided in the advisory.

CVE-2026-33818 is a high-severity denial-of-service vulnerability in the Go standard library component encoding/asn1. It is part of a set of vulnerabilities affecting various Go language components addressed by Red Hat Hardened Images RPMs updates. The flaw allows an attacker to cause uncontrolled resource consumption leading to DoS via malformed inputs. A patch is available from Red Hat to remediate this and related issues.

CVE-2026-67312 refers to multiple security issues fixed in the jupyter-nbdime-7.0.4-24.1 package distributed on openSUSE Tumbleweed. The vulnerabilities involve several CWEs including resource exhaustion and improper resource management. The Red Hat advisory references this CVE among others in a security update for hardened images RPMs. No direct exploit code or active exploitation is reported. The severity is assessed as medium based on the available information.

This update for python-joserfc fixes the following issues: Changes in python-joserfc: - CVE-2026-62995: acceptance of JWTs with trailing padding can lead to JWT malleability and allows for bypass of token revocation and anti-replay protection (bsc#1272991)

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically updating the grafana13.1 package to address two vulnerabilities identified as CVE-2026-67213 and CVE-2026-67214. The update includes new package versions for both aarch64 and x86_64 architectures. These vulnerabilities are rated as high severity. The advisory provides updated RPMs to remediate these issues.

Red Hat has released a security advisory for Red Hat Hardened Images RPMs, including an update to grafana12.4 (version 12.4.6-0.2.hum1) addressing multiple vulnerabilities identified by CVE-2026-42127 and related CVEs. This update is a bug fix and enhancement release for affected RPM packages on aarch64 and x86_64 architectures. The advisory does not specify individual vulnerability details or exploitation methods but indicates a high severity level. No known exploits are reported in the wild at this time.

This update includes the following RPMs: grafana12.4: * grafana12.4-12.4.6-0.2.hum1 (aarch64, x86_64) * grafana12.4-12.4.6-0.2.hum1.src (src)