Most recent entries from osv_rocky

RLSA-2026:74370 — Important: gvfs security update

2026-10-02T06:12:25.705804+00:00

Affected: Rocky Linux:9: gvfs

GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Web Distributed Authoring and Versioning (WebDAV), Common Internet File System (CIFS), Server Message Block (SMB), and other protocols. GVFS integrates with the GNOME I/O (GIO) abstraction layer.

Security Fix(es):

* gvfs: SFTP: heap-based buffer overflow in read_reply() (CVE-2026-84268)

* gvfs: gvfs-admin socket ownership race permits local root (CVE-2026-88924)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

RLSA-2026:74441 — Important: libpcap security update

2026-10-02T06:12:25.641639+00:00

Affected: Rocky Linux:9: libpcap

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging.

Security Fix(es):

* libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access (CVE-2026-0799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

RLSA-2026:74132 — Moderate: kernel-rt security, bug fix, and enhancement update

2026-10-02T06:12:22.363073+00:00

Affected: Rocky Linux:8: kernel-rt

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements.

Security Fix(es):

* kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)

* kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)

* kernel: net/liquidio: drop cached VF pci_dev LUT (CVE-2026-72329)

* kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099)

Bug Fix(es) and Enhancement(s):

* [Rocky Linux 8.10] "kernel BUG at lib/list_debug.c:28!": list_add corruption in register_trace_event Rocky Linux 8.10 (JIRA:Rocky Linux-214136)

* request_key_auth use-after-free on every request-key upcall since 4.18.0-553.165.1 (regression from CVE-2026-63823 backport) (JIRA:Rocky Linux-270349)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

RLSA-2026:73971 — Important: thunderbird security update

2026-10-02T06:12:21.701944+00:00

Affected: Rocky Linux:8: thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365)

* firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-2026-75874)

* firefox: Sandbox escape due to use-after-free in the DOM: Security component (CVE-2026-84121)

* firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40 (CVE-2026-84145)

* firefox: Sandbox escape due to use-after-free in the DOM: Navigation component (CVE-2026-84119)

* firefox: Use-after-free in the Audio/Video component (CVE-2026-84120)

* firefox: Privilege escalation due to invalid pointer in the Graphics component (CVE-2026-84131)

* firefox: Use-after-free in the DOM: Core & HTML component (CVE-2026-84124)

* firefox: Use-after-free in the Audio/Video component (CVE-2026-84122)

* firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15 (CVE-2026-84143)

* thunderbird: Uninitialized memory in MIME parsing (CVE-2026-84639)

* thunderbird: Information disclosure due to malicious IMAP server response (CVE-2026-84641)

* thunderbird: One byte overflow read in mail parser (CVE-2026-84640)

* firefox: thunderbird: Use-after-free in the SVG component (CVE-2026-92024)

* firefox: thunderbird: Mitigation bypass in the Remote Settings Client component (CVE-2026-92019)

* firefox: thunderbird: Use-after-free in the…

RLSA-2026:74133 — Moderate: kernel security, bug fix, and enhancement update

2026-10-02T06:12:16.070081+00:00

Affected: Rocky Linux:8: kernel

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

* kernel: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (CVE-2026-64102)

* kernel: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets (CVE-2026-68299)

* kernel: net/liquidio: drop cached VF pci_dev LUT (CVE-2026-72329)

* kernel: dm-integrity: don't increment hash_offset twice (CVE-2026-72099)

Bug Fix(es) and Enhancement(s):

* [Rocky Linux 8.10] "kernel BUG at lib/list_debug.c:28!": list_add corruption in register_trace_event Rocky Linux 8.10 (JIRA:Rocky Linux-214136)

* request_key_auth use-after-free on every request-key upcall since 4.18.0-553.165.1 (regression from CVE-2026-63823 backport) (JIRA:Rocky Linux-270349)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

RLSA-2026:74095 — Important: rsync security, bug fix, and enhancement update

2026-10-02T06:12:16.039280+00:00

Affected: Rocky Linux:8: rsync

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.

Security Fix(es):

* rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink (CVE-2026-70460)

* rsync: rsync: Arbitrary file deletion via malicious file list (CVE-2026-53789)

* rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths (CVE-2026-53790)

* rsync: rsync: Memory corruption via crafted file entries (CVE-2026-70458)

* rsync: rsync: Denial of Service via handshake stall (CVE-2026-70464)

* rsync: rsync: Local Privilege Escalation via Symlink Following (CVE-2026-53803)

* rsync: rsync: Unauthorized File Access via Symlink Module Root (CVE-2026-53784)

* rsync: rsync: Authorization bypass via `auth users` directive parsing (CVE-2026-70463)

* rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure (CVE-2026-70452)

* rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options (CVE-2026-53795)

* rsync: rsync: Heap Out-of-Bounds Write via crafted argument list (CVE-2026-70456)

* rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode (CVE-2026-53793)

* rsync: rsync: Denial of Service via Algorithmic Complexity (CVE-2026-70453)

* rsync: rsync: Information disclosure and denial of service via craft…

RLSA-2026:74001 — Important: expat security update

2026-10-02T06:12:27.134196+00:00

Affected: Rocky Linux:10: expat

Expat is a C library for parsing XML documents.

Security Fix(es):

* expat: Expat: Denial of Service via quadratic complexity in attribute processing (CVE-2026-66046)

* expat: Expat: XML Injection via Malformed UTF-16 Input (CVE-2026-93990)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

RLSA-2026:73998 — Important: gvfs security update

2026-10-02T06:12:27.172486+00:00

Affected: Rocky Linux:10: gvfs

Security Fix(es):

* gvfs: SFTP: heap-based buffer overflow in read_reply() (CVE-2026-84268)

* gvfs: gvfs-admin socket ownership race permits local root (CVE-2026-88924)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

RLSA-2026:73954 — Moderate: openssh security update

2026-10-02T06:12:27.093333+00:00

Affected: Rocky Linux:10: openssh

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay (CVE-2026-60001)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

RLSA-2026:73765 — Important: dogtag-pki security update

2026-10-02T06:12:27.047568+00:00

Affected: Rocky Linux:10: dogtag-pki

IdM PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. IdM PKI consists of the following components: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) * Automatic Certificate Management Environment (ACME) Responder * Enrollment over Secure Transport (EST) Responder

Security Fix(es):

* pki-core: Dogtag/PKI: certprofile-import allows code execution via unsanitized profile content (ExternalProcessConstraint) (CVE-2026-76561)

* pki-core: Dogtag PKI v2 REST ACL filter's reverse-lexicographic tie-break lets a CA Agent invoke the admin-only raw profile creation endpoint (CVE-2026-80110)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.