Red Hat Security AdvisoryRHSA-2026:72507
Red Hat Hardened Images RPMs Security Update
Released 2026-09-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images grafana13.2-13.2.1-0.8.hum1@aarch64, grafana13.2-13.2.1-0.8.hum1@src, grafana13.2-13.2.1-0.8.hum1@x86_64
Fixes 4 records
Priority HIGH 77
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.01318 · Published 2026-09-17 · Partial fix · 0.27.1 CWE-674
Priority MEDIUM 42
shell-quote's `quote()` function emits a `{ comment }` token as `#` followed by its text, which comments out the rest of the shell line, including the opening quote of any later string token.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00378 · Published 2026-09-29 · Partial fix · 1.11.0 CWE-78
Priority MEDIUM 40
compress provides various compression algorithms.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00572 · Published 2026-09-29 · Partial fix · 1.18.7 CWE-190
Priority LOW 19
An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library elements API or the equivalent App Platform resource.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00198 · Published 2026-09-29 · Partial fix · 12.4.12, 13.0.10 CWE-863