Important: Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (ROCm)

Red Hat AI Base Images 3.0.8 ROCm is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (ROCm 6.4)

Red Hat AI Base Images 3.4.7 ROCm 6.4 is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (Gaudi)

Red Hat AI Base Images 3.4.7 Gaudi is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (Spyre)

Red Hat AI Base Images 3.0.8 Spyre is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (CPU)

Red Hat AI Base Images 3.5.6 CPU is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (Spyre)

Red Hat AI Base Images 3.4.7 Spyre is now available. Red Hat® AI Base Images...

Critical: Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (CPU)

Red Hat AI Base Images 3.0.8 CPU is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (Gaudi)

Red Hat AI Base Images 3.5.6 Gaudi is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.0.8 (TPU)

Red Hat AI Base Images 3.0.8 TPU is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (CPU)

Red Hat AI Base Images 3.4.7 CPU is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (TPU)

Red Hat AI Base Images 3.5.6 TPU is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.5.6 (Neuron)

Red Hat AI Base Images 3.5.6 Neuron is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (TPU)

Red Hat AI Base Images 3.4.7 TPU is now available. Red Hat® AI Base Images...

Important: Red Hat Security Advisory: Red Hat AI Base Images 3.4.7 (Neuron)

Red Hat AI Base Images 3.4.7 Neuron is now available. Red Hat® AI Base Images...

python: Use-after-free of a server-side SSLContext when sni_callback switches contexts

A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.snicallback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the...

Important: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()

A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...

Moderate: Red Hat Security Advisory: pipewire security update

An update for pipewire is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

pipewire: RAOP RTSP NULL Deref

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...

pipewire: Pulse Server alloca Stack Overflow

Multiple unbounded alloca calls in the PulseAudio protocol server...

Moderate: Red Hat Security Advisory: pipewire security update

An update for pipewire is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...

pipewire: Pulse Server alloca Stack Overflow

Multiple unbounded alloca calls in the PulseAudio protocol server...

pipewire: RAOP RTSP NULL Deref

RAOP module accepts unbounded Content-Length values and does not check the pwarrayadd return...

Moderate: Red Hat Security Advisory: gnutls security update

An update for gnutls is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.21 bug fix and security update

Red Hat OpenShift Container Platform release 4.22.21 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.45 bug fix and security update

Red Hat OpenShift Container Platform release 4.20.45 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.20. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.41 bug fix and security update

Red Hat OpenShift Container Platform release 4.21.41 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a...

openjdk: Enhance HTTP Client (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Networking component. An unauthenticated remote attacker with network access can exploit this vulnerability by sending crafted input to exposed networking Application Programming Interfaces APIs. Successful exploitation allows the attacker to perform unauthorized dat...

openjdk: Enhance Certificate Name Checks (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker can exploit this issue across multiple network protocols by submitting crafted requests to application programming interfaces APIs within the Security component. Successful exploitation allows an attacker to modify or delete accessib...

openjdk: Enhance Image Handling (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Abstract Window Toolkit AWT. A remote attacker with low privileges could exploit this vulnerability by convincing a user to run untrusted code within a sandboxed environment. Successful exploitation allows unauthorized read access to a subset of accessible data,...

openjdk: Enhance krb5 tokens (Oracle CPU 2026-10)

A flaw was found in the Java Generic Security Services JGSS component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted requests to exposed application programming interfaces APIs, such as through a web service. A successful attack...

openjdk: Enhance XPath Expressions (Oracle CPU 2026-10)

A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to applications or web services that rely on vulnerable JAXP APIs. Successful exploitation can result in...

openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)

A flaw was found in the Sound component of Java SE and GraalVM. This issue allows an unauthenticated remote attacker to cause a partial Denial of Service DoS by convincing a user to run untrusted code within a sandboxed Java environment...

openjdk: Enhance GIF loading (Oracle CPU 2026-10)

A flaw was found in OpenJDK's ImageIO component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to applications utilizing ImageIO APIs. Successful exploitation can result in a partial Denial of Service DoS, degrading application...

openjdk: Enhance TLS Extensions (Oracle CPU 2026-10)

A flaw was found in the Java Secure Socket Extension JSSE component. An unauthenticated remote attacker could exploit this vulnerability over Transport Layer Security TLS by sending crafted data to affected application programming interfaces APIs. A successful attack allows the attacker to cause...

openjdk: Enhance Template Handling (Oracle CPU 2026-10)

A flaw was found in the JAXP Java API for XML Processing component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by providing crafted input to applications or web services that process data through JAXP APIs. Successful exploitation allows the attacker to perform...

openjdk: Improve C2 loop transformations (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to Compiler component APIs Application Programming Interfaces, such as through a web service. A successful attack can allow unauthorized modification or deletion ...

openjdk: Enhance SOCKS5 support (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker with network access can exploit this vulnerability through the SOCKS5 Socket Secure networking protocol to compromise data integrity. Successful exploitation allows unauthorized creation, modification, or deletion of application data...

openjdk: Enhance LDAP logins (Oracle CPU 2026-10)

A flaw was found in OpenJDK within the Java Authentication and Authorization Service JAAS component. An unauthenticated remote attacker can exploit this vulnerability over a network by sending data to affected application programming interfaces APIs. Successful exploitation results in information...

openjdk: Enhance HTTP Server (Oracle CPU 2026-10)

A flaw was found in the Java SE Networking component. An unauthenticated remote attacker can exploit this vulnerability by submitting specially crafted data to network application programming interfaces APIs, such as through a web service. Successful exploitation allows unauthorized read access t...

openjdk: Enhance jstatd (Oracle CPU 2026-10)

A flaw was found in the Serviceability component of OpenJDK. An unauthenticated remote attacker can exploit this issue across the network by supplying crafted data to exposed application programming interfaces APIs or by running untrusted code within a sandboxed Java environment. Successful...

openjdk: Enhance Kerberos validation (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Java Generic Security Services JGSS component. An unauthenticated remote attacker could exploit this vulnerability by enticing a user to execute untrusted code within a sandboxed Java environment. Successful exploitation results in unauthorized information disclosure...

OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns

The certificate authority CA store used in OpenJDK and Oracle Java included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue...

openjdk: Enhance Certificate Constraint Checking (Oracle CPU 2026-10)

A flaw was found in the OpenJDK Libraries component. An unauthenticated remote attacker can exploit this vulnerability over a network by submitting crafted data to affected application programming interfaces APIs, or through sandboxed environments that execute untrusted Java code. Successful...

openjdk: Enhance JPEG loading (Oracle CPU 2026-10)

A flaw was found in OpenJDK's ImageIO component. This vulnerability allows an unauthenticated remote attacker to cause information disclosure by submitting crafted inputs to applications or web services using the ImageIO application programming interface API. Successful exploitation can result in...

openjdk: Enhance PKCS5 padding (Oracle CPU 2026-10)

A flaw was found in OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by sending crafted requests across network protocols to exposed application programming interfaces APIs within the Security component. A successful attack can result in unauthorized modification,...

Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: java-21-openjdk: java-21-openjdk-1:21.0.13.0.9-0.1.hum1 aarch64, s390x, x8664 java-21-openjdk-demo-1:21.0.13.0.9-0.1.hum1 aarch64, s390x, x8664 java-21-openjdk-demo-fastdebug-1:21.0.13.0.9-0.1.hu...

openjdk: Enhance Preferences (Oracle CPU 2026-10)

A flaw was found in the OpenJDK Utility component. An unauthenticated attacker with local system access or the ability to supply data to affected application programming interfaces APIs can exploit this vulnerability. Successful exploitation can result in unauthorized data access, allowing an...

openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Serviceability component. An unauthenticated attacker with local access to the host system can exploit this vulnerability with user interaction, such as by supplying crafted input to Serviceability application programming interfaces APIs. A successful attack can resu...