Most recent entries from csaf_redhat

RHSA-2026:73511 — Red Hat Security Advisory: gawk security update

Fri, 02 Oct 2026 10:16:46 +0000

gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c gawk: gawk: Memory corruption via integer overflow

RHSA-2026:74865 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fri, 02 Oct 2026 09:19:24 +0000

go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc: OpenTelemetry-Go: TLS certificate bypass allows log telemetry interception and alteration

RHSA-2026:72831 — Red Hat Security Advisory: kpatch-patch-6_12_0-211_16_1 and kpatch-patch-6_12_0-211_49_1 security update

Fri, 02 Oct 2026 09:14:56 +0000

kernel: RDMA/mana: Validate rx_hash_key_len kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

RHSA-2026:74861 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Fri, 02 Oct 2026 09:14:54 +0000

podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation

RHSA-2026:74858 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fri, 02 Oct 2026 09:04:53 +0000

httpd: httpd: arbitrary code execution via incorrect handler assignment during internal CGI redirects httpd: httpd: Denial of Service via mod_dav shared lock memory calculation error httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference httpd: httpd: Information disclosure via session cookie leakage during internal redirects httpd: httpd: Denial of service via forged Authorization headers in mod_auth_digest httpd: httpd: Denial of Service via heap-based buffer overflow in mod_charset_lite httpd: httpd: Denial of Service via crafted HTTP response bodies in mod_proxy_html httpd: httpd: Information disclosure via direct request to the WebDAV state directory httpd: httpd: unauthorized connection to arbitrary hosts via crafted FTP PASV response httpd: httpd: Arbitrary code execution via oversized Host header in mod_vhost_alias httpd: httpd: Denial of Service via charset conversion failure in mod_xml2enc httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in mod_proxy_uwsgi httpd: httpd: Authentication bypass via credential replay in mod_auth_digest httpd: httpd: Authentication state corruption via concurrent Digest authentication requests httpd: httpd: Information disclosure in mod_userdir via single-dot path equivalence httpd: httpd: Denial of Service via integer overflow in mod_dav_fs

RHSA-2026:74457 — Red Hat Security Advisory: ghostscript security update

Fri, 02 Oct 2026 07:25:46 +0000

ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter

RHSA-2026:74438 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fri, 02 Oct 2026 04:24:46 +0000

kernel: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send kernel: KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path kernel: futex: Fix race on the initial mm->futex.phash.ref allocation

RHSA-2026:74424 — Red Hat Security Advisory: libvirt security, bug fix, and enhancement update

Fri, 02 Oct 2026 03:37:46 +0000

libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer overflow libvirt: swtpm privilege escalation via symlink following

RHSA-2026:74610 — Red Hat Security Advisory: freerdp security update

Fri, 02 Oct 2026 00:08:41 +0000

FreeRDP: FreeRDP: Remote code execution or client crash via malicious TS Gateway

RHSA-2026:74441 — Red Hat Security Advisory: libpcap security update

Thu, 01 Oct 2026 23:47:45 +0000

libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access