Threats Tagged 'cve-2026-9563'

Release of RHOAI 2.25.11 provides these changes:

Release of RHOAI 2.25.11 provides these changes:

Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.30 release is based on Eclipse Che 7.121 and uses the DevWorkspace engine to provide support for workspaces based on devfile v2.1 and v2.2. Users still using the v1 standard should migrate as soon as possible. https://devfile.io/docs/2.2.0/migrating-to-devfile-v2 Dev Spaces supports OpenShift EUS releases v4.16 and higher. Users are expected to update to supported OpenShift releases in order to continue to get Dev Spaces updates. https://access.redhat.com/support/policy/updates/openshift#crw

Oracle has released a Critical Security Patch Update (CSPU) in August 2026 addressing multiple vulnerabilities across a wide range of Oracle Database products and related software. The update includes 943 security patches targeting Oracle Database Server, Essbase, Autonomous Health Framework, Application Testing Suite, and many other Oracle product families. The vulnerabilities include issues classified under CWE-770, CWE-416, CWE-476, and CWE-863. Oracle strongly recommends applying these patches promptly to mitigate risks, as some vulnerabilities have been subject to attempted exploitation in the wild. The advisory emphasizes staying on actively supported versions and applying patches without delay.

In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the number of characters consumed while parsing a single JSON document. Applications that parse attacker- controlled JSON can be forced to consume excessive CPU and memory by processing very large documents, including large arrays, objects, strings, numbers, whitespace, or nested structures, resulting in a denial of service. Eclipse Parsson 1.1.8 introduces a configurable maximum parsing limit with a default limit of 15 million parser-consumed characters.

Release of RHOAI 2.25.6 provides these changes:

Collector with the supported components for a Red Hat build of OpenTelemetry Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.