AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Red Hat security advisories

821 advisories · 357 critical or high in 12 months · latest Oct 26

Advisories page

60 of 821 advisories

Medium 6.5Oct 26A flaw was found in the Infinispan Operator for Red Hat Data GridCVE-2026-92171no fix yetHigh 7.4Oct 23Red Hat, Inc.: CVE records (CNA): plaintext password storageCVE-2026-110975fixed in Red Hat +1High 7.6Oct 23Red Hat iscsiuio: out-of-bounds readCVE-2026-115484no fix yetMedium 6.3Oct 23Red Hat iscsiuio: out-of-bounds readCVE-2026-115485no fix yetHigh 7.1Oct 23Red Hat iscsiuio: out-of-bounds readCVE-2026-115486no fix yetMedium 5.5Oct 22Red Hat OpenShift client: attacker could write attacker-controlled contentCVE-2026-115424no fix yetMedium 5.5Oct 22Red Hat GNU patch: path traversalCVE-2026-115207no fix yetHigh 7.4Oct 22Red Hat Goose.: information disclosureCVE-2026-111079no fix yetMedium 6.8Oct 21Red Hat: improper certificate validationCVE-2026-114406no fix yetMedium 6.1Oct 21Red Hat OpenSCAP.: path traversalCVE-2026-85518no fix yetMedium 4.2Oct 21Red Hat Build of Keycloak: improper authenticationCVE-2026-114438no fix yetLow 3.3Oct 21Red Hat Confidential Compute Attestation: resource leakCVE-2026-114236no fix yetMedium 6.2Oct 21Red Hat libmodulemd.: resource exhaustionCVE-2026-92823no fix yetMedium 6.2Oct 21Red Hat libmodulemd.: out-of-bounds readCVE-2026-92824no fix yetMedium 6.2Oct 21Red Hat libmodulemd.: denial of serviceCVE-2026-92822no fix yetMedium 5.1Oct 21Red Hat device-mapper-multipath: out-of-bounds readCVE-2026-114038no fix yetMedium 5.0Oct 20Red Hat cockpit-machines: information disclosureCVE-2026-113495no fix yetMedium 5.0Oct 20A flaw was found in cockpit-machinesCVE-2026-113496no fix yetHigh 7.7Oct 20The StreamsHub Console operator acts as a confused deputyCVE-2026-105311fixed in 0.12.10 +1Critical 9.9Oct 20Red Hat StreamsHub Console for Apache Kafka: improper privilege managementCVE-2026-105312fixed in 0.12.10 +1High 8.8Oct 20Red Hat, Inc.: CVE records (CNA): authentication bypassCVE-2026-105949fixed in Red Hat +1High 7.3Oct 20Red Hat Enterprise Linux: code executionCVE-2026-112177no fix yetHigh 7.8Oct 19Red Hat GIMP: out-of-bounds readCVE-2026-112257no fix yetHigh 7.8Oct 19Red Hat GIMP: use after freeCVE-2026-112258no fix yetHigh 7.8Oct 19Red Hat GIMP. Opening a crafted XCF: use after freeCVE-2026-112261no fix yetHigh 7.1Oct 19Red Hat GIMP: out-of-bounds readCVE-2026-112260no fix yetMedium 5.5Oct 19Red Hat GIMP: null pointer dereferenceCVE-2026-112259no fix yetMedium 6.5Oct 19Red Hat GStreamer ASF demuxer: denial of serviceCVE-2026-112214no fix yetHigh 7.4Oct 19Red Hat: capture-replayCVE-2026-103314no fix yetHigh 7.4Oct 19Red Hat bootc: insufficient authenticity checkCVE-2026-16460no fix yetMedium 6.6Oct 16Red Hat parted: heap buffer overflowCVE-2026-89085no fix yetMedium 5.5Oct 16Red Hat parted. A heap-based buffer overflow exists: heap buffer overflowCVE-2026-89088no fix yetMedium 5.9Oct 16Red Hat nfs-utils: denial of serviceCVE-2026-89096no fix yetMedium 6.6Oct 16Red Hat Nautilus.: link followingCVE-2026-111802no fix yetLow 3.6Oct 16Red Hat libarchive: denial of serviceCVE-2026-17591no fix yetMedium 6.1Oct 16Red Hat GIMP: denial of serviceCVE-2026-62438no fix yetHigh 7.0Oct 16Red Hat GIMP. An integer overflow occurs: integer overflowCVE-2026-62439no fix yetMedium 6.5Oct 16Red Hat libtirpc. An authenticated remote attacker: denial of serviceCVE-2026-85231no fix yetMedium 5.3Oct 16Red Hat libtirpc: resource exhaustionCVE-2026-85977no fix yetMedium 5.5Oct 16Red Hat nfs-utils: denial of serviceCVE-2026-89098no fix yetLow 3.3Oct 16Red Hat libblockdev: argument injectionCVE-2026-111581no fix yetMedium 6.0Oct 16A flaw was found in luksmetaCVE-2026-111555no fix yetHigh 7.5Oct 16Red Hat spice-server: out-of-bounds readCVE-2026-105958no fix yetHigh 7.5Oct 16Red Hat spice-server: buffer overflowCVE-2026-105959no fix yetHigh 7.8Oct 16Red Hat cifs-utils. This flaw: privilege escalationCVE-2026-104715no fix yetHigh 7.1Oct 16Red Hat WildFly: improper access controlCVE-2026-84823no fix yetHigh 8.8Oct 15Red Hat JBoss Enterprise Application Platform 8.1: path traversalCVE-2026-85634no fix yetHigh 8.5Oct 15Red Hat Ansible Operator Plugins: template injectionCVE-2026-92982no fix yetMedium 6.5Oct 14Red Hat DPDK lib/vhost vhost-crypto: uninitialized pointerCVE-2026-86847no fix yetHigh 8.8Oct 14Red Hat DPDK lib/vhost vhost-crypto: race conditionCVE-2026-86848no fix yetMedium 6.5Oct 14Red Hat DPDK lib/vhost vhost-crypto. Integer overflow: integer overflowCVE-2026-86849no fix yetMedium 6.5Oct 14Red Hat DPDK nfp vDPA driver. Stack: memory corruptionCVE-2026-86856no fix yetMedium 6.5Oct 14Red Hat DPDK lib/vhost: denial of serviceCVE-2026-86566no fix yetHigh 8.8Oct 14Red Hat DPDK lib/vhost: use after freeCVE-2026-86567no fix yetMedium 6.5Oct 14Red Hat DPDK lib/vhost vhost-crypto: use after freeCVE-2026-86845no fix yetMedium 6.5Oct 14Red Hat DPDK lib/vhost vhost-crypto: out-of-bounds writeCVE-2026-86846no fix yetMedium 5.7Oct 14Red Hat evolution-data-server: information disclosureCVE-2026-110777fixed in 3.62.1High 7.8Oct 14Red Hat DPDK lib/vhost: race conditionCVE-2026-86562no fix yetHigh 7.8Oct 14A flaw was found in DPDK lib/vhostCVE-2026-86563no fix yetHigh 8.2Oct 14Red Hat DPDK lib/vhost: out-of-bounds writeCVE-2026-86565no fix yet
About Red Hat

Security advisories Red Hat publishes for its own products.

access.redhat.com/security/security-updates/#/security-advisoriesRed Hat

Red Hat elsewhere on Ibis: Acquisitions · Paydays