Most recent entries from csaf_redhat

RHSA-2026:73511 — Red Hat Security Advisory: gawk security update

2026-10-02T10:24:22+00:00

gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c gawk: gawk: Memory corruption via integer overflow

RHSA-2026:74865 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

2026-10-02T10:09:13+00:00

go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration

RHSA-2026:72831 — Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 and kpatch-patch-6_12_0-211_49_1 security update

2026-10-02T09:34:23+00:00

kernel: RDMA/mana: Validate rx_hash_key_len kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

RHSA-2026:74861 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

2026-10-02T10:09:11+00:00

podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation

RHSA-2026:74858 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

2026-10-02T10:09:11+00:00

httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference httpd: httpd: Information disclosure via session cookie leakage during internal redirects httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html httpd: httpd: Information disclosure via direct request to the WebDAV state directory httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi httpd: httpd: Authentication bypass via credential replay in mod_auth_digest httpd: httpd: Authentication state corruption via concurrent Digest authentication requests httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence httpd: httpd: Denial of Service via integer overflow in mod_dav_fs

RHSA-2026:74457 — Red Hat Security Advisory: ghostscript security update

2026-10-02T09:34:23+00:00

ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter

RHSA-2026:74438 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

2026-10-02T09:34:24+00:00

kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path kernel: futex: Fix race on the initial mm->futex.phash.ref allocation

RHSA-2026:74424 — Red Hat Security Advisory: libvirt security, bug fix, and enhancement update

2026-10-02T09:34:22+00:00

libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow libvirt: swtpm privilege escalation via symlink following

RHSA-2026:74610 — Red Hat Security Advisory: freerdp security update

2026-10-02T04:51:05+00:00

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

RHSA-2026:74441 — Red Hat Security Advisory: libpcap security update

2026-10-02T04:51:04+00:00

libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access