Read the docs
Red Hat Security Advisory

RHSA-2026:4501

A Subscription Management tool for finding and reporting Red Hat product usage

Released 2026-03-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

Priority HIGH 72

Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00618 Published 2026-01-15 Partial fix CWE-908
Priority HIGH 69

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.0112 Published 2026-02-10 Partial fix · 1.6.55 CWE-122
Priority LOW 39

Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00386 Published 2026-01-14 Partial fix CWE-190
Priority LOW 39

Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00491 Published 2026-01-20 Partial fix CWE-908
TI-2026-01327 CVE-2026-1642 · GHSA-7chh-rv6q-8pp3

NGINX vulnerability

Priority LOW 36

A vulnerability exists in NGINX OSS and NGINX Plus when configured to proxy to upstream Transport Layer Security (TLS) servers.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0038 Published 2026-02-04 Partial fix · 1.29.5, R36 P2 +2 CWE-349