Red Hat Security AdvisoryRHSA-2026:22634
Insights proxy Container Image
Released 2026-06-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Insights proxy 1.5 registry.redhat.io/insights-proxy/insights-proxy-container-rhel9
Fixes 13 records
Priority HIGH 72
The iconv() function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399 character sets, which may be used to remotely crash an applicat…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00389 · Published 2026-03-30 · Partial fix CWE-617
Priority HIGH 66
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00645 · Published 2026-04-28 · Partial fix · 1.22.3 CWE-476
Priority MEDIUM 44
A flaw was found in GLib (Gnome Lib).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00826 · Published 2025-12-10 · Partial fix · 2.86.3, 2.80.4-10.el10_1.13 +37 CWE-190
Priority MEDIUM 41
Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01049 · Published 2026-04-07 · Partial fix · 3.6.2, 3.5.6 +3 CWE-754
Priority MEDIUM 41
A flaw was found in p11-kit.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01311 · Published 2026-03-26 · Partial fix · 0.26.2, 0.26.2-1.el10 +21 CWE-824
Priority MEDIUM 40
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00836 · Published 2026-04-07 · Partial fix · 3.6.2, 3.5.6 +5 CWE-476
Priority LOW 39
Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C Library version 2.34 to version 2.43 could, with a crafted response from the configured DNS s…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00345 · Published 2026-03-20 · Partial fix CWE-125
Priority LOW 38
Vim is an open source, command line text editor.
CVSS 3.1HIGH 8.2· Local · No auth · User interaction · EPSS 0.00456 · Published 2026-04-06 · Partial fix · 9.2.0276 CWE-78
Priority LOW 34
In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /etc/gss/mech.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00604 · Published 2026-04-28 · Partial fix · 1.22.3 CWE-191
Priority LOW 32
A flaw was found in libcap.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00209 · Published 2026-04-09 · Partial fix · 2.69-7.el10_1.1, 2.69-7.el10_2.1 +51 CWE-367
Priority LOW 30
A flaw was found in glib.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00579 · Published 2025-12-11 · Partial fix · 2.86.3, 2.80.4-10.el10_1.13 +35 CWE-190
Priority LOW 24
systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00126 · Published 2026-03-23 · Partial fix · 257.11, 258.5 +1 CWE-269
Priority LOW 24
Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned t…
CVSS 3.1MEDIUM 5.4· Adjacent network · No auth · No interaction · EPSS 0.00314 · Published 2026-03-20 · Partial fix CWE-20
THREATIST.IORead the docs