Important: Red Hat Security Advisory: RHEL AI 3.5 RPM runtime CVE fix - aom

AIPCC Security Alerts identified CVEs in the 3.5 release of base-images. The CVEs are listed with a severity level of "Important" or higher. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

CVE-2024-5300

An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...

SUSE CVE-2026-64042

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Check BAR resources before exporting a DMABUF A DMABUF exports access to BAR resources and, although they are requested at startup time, we need to ensure they really were reserved before exporting. Otherwise, it's...

PT-2026-62160

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Metadata Plugin of the Oracle Enterprise Manager Base Platform allows a low privileged attacker with network...

PT-2026-62162

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Metadata Plugin of the Oracle Enterprise Manager Base Platform allows a low privileged attacker with network...

389-ds-base security, bug fix, and enhancement update

3.2.0-8 - Bump version to 3.2.0-8 - Resolves: RHEL-182152 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasliorecv via padded SASL UNBIND rhel-10.2.z - Resolves: RHEL-183105 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit...

PT-2026-63055

Name of the Vulnerable Software and Affected Versions Oracle Agile PLM version 9.3.6 Description A security flaw in the Oracle Agile PLM product of Oracle Supply Chain allows an unauthenticated attacker with network access via HTTP to compromise the system. A successful exploit can lead to a full...

PT-2026-62157

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Enterprise Config Management component allows a low privileged attacker with network access via HTTPS to...

PT-2026-62155

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description An issue exists in the Enterprise Config Management component of the Oracle Enterprise Manager Base Platform. An...

PT-2026-62165

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Security Framework component allows a low privileged attacker with network access via HTTPS to compromise the platform. The attack requires human interaction from a...

PT-2026-62159

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform Agent Next Gen version 13.5 Oracle Enterprise Manager Base Platform Agent Next Gen version 24.1 Description An issue in the Agent Next Gen component allows an unauthenticated attacker with network access...

PT-2026-62154

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform versions 13.5 and 24.1 Description A flaw in the UI Framework component allows a low privileged attacker with network access via HTTPS to compromise the system. This issue can lead to unauthorized access...

PT-2026-62158

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Agent Next Gen component allows a low privileged attacker with network access via HTTPS to compromise the...

PT-2026-62163

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Metadata Plugin of the Oracle Enterprise Manager Base Platform allows an unauthenticated attacker with network...

PT-2026-63307

Name of the Vulnerable Software and Affected Versions Gitea versions 1.26.4 and earlier Description The restore-repo CLI command fails to properly validate the Head.CloneURL field when parsing pull request.yml from a repository dump. The safety check function CheckAndEnsureSafePR is called with a...

PT-2026-62164

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description A flaw in the Discovery Framework component allows an unauthenticated attacker with network access via HTTPS to compromise th...

PT-2026-62156

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Base Platform version 13.5 Oracle Enterprise Manager Base Platform version 24.1 Description An issue exists in the Enterprise Config Management component of the Oracle Enterprise Manager Base Platform. A low privilege...

sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation

A flaw was found in SSSD's LDAP sudo provider. When the ldapsudosearchbase option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo...

node-tar: Negative tar entry size causes infinite loop in archive replace

Summary A checksum-valid tar archive with a negative base-256 encoded entry size can make tar.replace loop forever while scanning the existing archive. Applications that update attacker-controlled tar archives can have a worker process pinned indefinitely, causing denial of service. Details The...

GHSA-8X88-C5MF-7J5W node-tar: Negative tar entry size causes infinite loop in archive replace

Summary A checksum-valid tar archive with a negative base-256 encoded entry size can make tar.replace loop forever while scanning the existing archive. Applications that update attacker-controlled tar archives can have a worker process pinned indefinitely, causing denial of service. Details The...