Read the docs
Red Hat Security Advisory

RHSA-2026:4655

Insights proxy Container Image

Released 2026-03-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 5 records

TI-2026-00692 CVE-2026-0915 · GHSA-xp56-6525-9chf

getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler

Priority HIGH 72

Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00618 Published 2026-01-15 Partial fix CWE-908
TI-2026-00642 CVE-2026-0861 · GHSA-5pf6-63v3-88hw

Integer overflow in memalign leads to heap corruption

Priority LOW 39

Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in…

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00386 Published 2026-01-14 Partial fix CWE-190
TI-2025-13956 CVE-2025-15281 · GHSA-qg56-4cfq-w9w3

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

Priority LOW 39

Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00491 Published 2026-01-20 Partial fix CWE-908
TI-2025-09008 CVE-2025-9820 · GHSA-337w-h8w7-m899

Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function

Priority LOW 18

A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00222 Published 2026-01-26 Partial fix · 3.8.10-3.el10_1, 3.6.16-8.el8_10.5 +22 CWE-121