Red Hat Security Advisory

RHSA-2026:53643

Red Hat build of Quarkus 3.27.5 release and security update

Released 2026-08-13 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Quarkus 3.27.5

Fixes 5 records

TI-2026-48269 CVE-2026-68494 · GHSA-r7wm-3cxj-wff9

Resource allocation without limits in FasterXML jackson-core

HIGH 77

The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser) is incomplete.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00463 Published 2026-08-04 Partial fix · 2.18.8, 2.21.4 +1 CWE-770

TI-2026-39191 CVE-2026-54291 · GHSA-j92g-9f8w-j867

Silent channel-binding authentication downgrade via unsupported certificate algorithms

LOW 35

pgjdbc is an open source postgresql JDBC Driver.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00236 Published 2026-07-06 Partial fix · 42.7.12 CWE-636

TI-2026-38732 CVE-2026-53712 · GHSA-p9jg-fcr6-3mhf

SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms

LOW 35

SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.0026 Published 2026-07-17 Partial fix · 3.3 CWE-636

TI-2026-40830 CVE-2026-56624 · GHSA-j262-jh5j-p4fw

Apache MINA SSHD: SSH certificate options lack validations

LOW 34

Improper certificate validation in Apache MINA SSHD (server-side).

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.0029 Published 2026-07-20 Partial fix CWE-295

TI-2026-07449 CVE-2026-8484 · GHSA-fh45-7f3j-r575

Heap buffer overflow in Jansi

LOW 21

A heap buffer overflow vulnerability exists in the Jansi JNI "ioctl()" wrapper due to a lack of size verification for the argument array before the system call.

CVSS 4.0MEDIUM 4.8 Local No auth User interaction EPSS 0.0014 Published 2026-06-16 Partial fix CWE-122