Red Hat Security AdvisoryRHSA-2026:59831
OpenShift Container Platform 4.12.97 bug fix and security update
Released 2026-09-03 · Red Hat rating Important · View on Red Hat →
Fixes 28 records
Priority HIGH 82
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one by…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00502 · Published 2026-04-20 · Partial fix CWE-122
Priority HIGH 72
A flaw was found in gnutls.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00565 · Published 2026-04-30 · Partial fix · 3.8.13, 3.8.10-4.el10_2 +42 CWE-178
Priority MEDIUM 49
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02073 · Published 2026-04-30 · Partial fix · 3.8.13, 3.8.10-4.el10_2 +45 CWE-191
Priority MEDIUM 48
A flaw was found in Samba.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02501 · Published 2026-05-28 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +19 CWE-78
Priority MEDIUM 47
Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04002 · Published 2026-06-09 · Partial fix · 4.0.1, 3.6.3 +5 CWE-416
Priority MEDIUM 44
A flaw was found in gnutls.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0105 · Published 2026-05-07 · Partial fix · 3.8.13, 3.8.10-4.el10_2 +47 CWE-170
Priority MEDIUM 43
A flaw was found in libgnutls.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00769 · Published 2026-05-26 · Partial fix · 3.8.10-4.el10_2, 3.8.9-9.el10_0.19 +44 CWE-126
Priority MEDIUM 42
A flaw was found in gnutls.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00423 · Published 2026-05-26 · Partial fix · 3.8.10-4.el10_2, 3.8.9-9.el10_0.19 +41 CWE-295
Priority MEDIUM 42
A flaw was found in gnutls.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01335 · Published 2026-05-18 · Partial fix · 3.8.13, 3.8.10-4.el10_2 +48 CWE-475
Priority MEDIUM 41
A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01263 · Published 2026-05-04 · Partial fix · 3.8.10-4.el10_2, 3.8.9-9.el10_0.19 +44 CWE-130
Priority MEDIUM 41
A flaw was found in SSSD's LDAP sudo provider.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00568 · Published 2026-07-07 · Partial fix · 2.12.0-3.el10_2.1, 2.10.2-3.el10_0.5 +20 CWE-1188
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only del…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00352 · Published 2026-05-06 · Partial fix · 5.15.209, 6.1.175 +5 CWE-125
Priority MEDIUM 40
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00836 · Published 2026-04-07 · Partial fix · 3.6.2, 3.5.6 +5 CWE-476
Priority LOW 38
Vim is an open source, command line text editor.
CVSS 3.1HIGH 8.2· Local · No auth · User interaction · EPSS 0.00456 · Published 2026-04-06 · Partial fix · 9.2.0276 CWE-78
Priority LOW 38
A path traversal flaw was found in SSSD's AD GPO provider.
CVSS 3.1HIGH 8.0· Network · High privileges · No interaction · EPSS 0.00668 · Published 2026-07-07 · Partial fix · 2.12.0-3.el10_2.1, 2.10.2-3.el10_0.5 +20 CWE-23
Priority LOW 36
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.
CVSS 3.1HIGH 8.0· Adjacent network · No auth · No interaction · EPSS 0.00261 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-345
Priority LOW 35
A flaw was found in libsolv.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00227 · Published 2026-05-26 · Fixed in 0.7.33-5.el10_2, 0.7.29-8.el10_0.1 +60 CWE-787
Priority LOW 35
A flaw was found in gnutls.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00475 · Published 2026-05-07 · Partial fix · 3.8.10-4.el10_2, 3.8.9-9.el10_0.19 +41 CWE-295
Priority LOW 34
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00393 · Published 2026-04-16 · Fixed CWE-130
Priority LOW 34
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege es…
CVSS 4.0HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.00287 · Published 2026-05-15 · Fixed in os kernel, RenoirPI-FP6_1.0.0.Ed +9 CWE-1189
Priority LOW 34
A flaw was found in QEMU.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00864 · Published 2025-10-03 · Partial fix · 10.1.2, 18:10.0.0-14.el10_1.5 +13 CWE-416
Priority LOW 33
A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00862 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +18 CWE-284
Priority LOW 32
Vim is an open source, command line text editor.
CVSS 3.1HIGH 7.0· Local · No auth · User interaction · EPSS 0.00552 · Published 2026-05-15 · Fixed in 9.2.479 CWE-78
Priority LOW 32
Vim is an open source, command line text editor.
CVSS 3.1MEDIUM 6.6· Local · No auth · User interaction · EPSS 0.00501 · Published 2026-04-24 · Fixed in 9.2.0357 CWE-78
Priority LOW 32
A flaw was found in libcap.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00209 · Published 2026-04-09 · Partial fix · 2.69-7.el10_1.1, 2.69-7.el10_2.1 +51 CWE-367
Priority LOW 31
A flaw was found in Samba’s vfs_worm module.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00947 · Published 2026-05-27 · Partial fix · 4.23.5-109.el10_2, 4.21.3-114.el10_0.1 +22 CWE-280
Priority LOW 30
Vim is an open source, command line text editor.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00131 · Published 2026-04-06 · Partial fix · 9.2.0280 CWE-22
Priority LOW 24
systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00126 · Published 2026-03-23 · Partial fix · 257.11, 258.5 +1 CWE-269
THREATIST.IORead the docs