RHSA-2026:89907
Vulnerability from csaf_redhat - Published: 2026-10-26 10:49 - Updated: 2026-10-30 01:05Summary
Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update
Severity
Critical
Notes
Topic: The latest release of Red Hat Update Infrastructure. For more details, see the product documentation.
Details: Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images.
This release updates to the latest version.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the URI component for Perl. This vulnerability occurs because the `nameprep` function, responsible for encoding hostnames, does not properly normalize Unicode characters. As a result, a hostname that is not in a standard Unicode form (non-NFC) can be encoded into a non-standard label. This discrepancy can lead to a situation where security checks, such as allow lists or Server-Side Request Forgery (SSRF) filters, may incorrectly process hostnames, potentially allowing an attacker to bypass security restrictions.
7.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSH. The internal-sftp component within sshd incorrectly processes command-line arguments, recognizing only the first nine. This limitation can prevent the application of intended security configurations for SFTP (SSH File Transfer Protocol) connections, potentially leading to a bypass of security properties.
5.4 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in OpenSSH. The sshd component has an undocumented security-relevant behavior where GSSAPIStrictAcceptorCheck has no value when the server is in a Windows Active Directory environment. This could lead to unintended information disclosure and impact data integrity.
6.5 (Medium)
Affected products
Fixed
2 products, the same list as for
CVE-2026-59997
Known not affected
3 products, the same list as for
CVE-2026-59997
Threats
Impact
Moderate
A flaw was found in OpenSSH's Secure Shell Daemon (sshd). This vulnerability allows a remote attacker to cause a denial of service by initiating an excessive number of authentication attempts. The issue arises from the mishandling of the MaxAuthTries setting specifically when using GSSAPIAuthentication, leading to resource exhaustion.
5.9 (Medium)
Affected products
Fixed
2 products, the same list as for
CVE-2026-59997
Known not affected
3 products, the same list as for
CVE-2026-59997
Threats
Impact
Moderate
A flaw was found in expat. A remote attacker can exploit this vulnerability through repeated parse buffer operations with unvalidated buffer lengths, causing a heap buffer over-read. This issue primarily leads to information disclosure by leaking adjacent heap memory contents, which could assist in bypassing security mitigations such as Address Space Layout Randomization (ASLR), or result in a Denial of Service (DoS) by crashing the application.
8.2 (High)
Affected products
Fixed
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in expat. On 32-bit systems, an integer overflow occurs within the expat_realloc memory allocation function when calculating buffer sizes. A remote attacker can exploit this vulnerability by supplying specially crafted XML input to an application that processes data with the library. Successful exploitation can lead to a Denial of Service (DoS) or memory corruption.
5.9 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-77214
Threats
Impact
Moderate
The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites. Due to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.
6.8 (Medium)
Affected products
Fixed
5 products, the same list as for
CVE-2026-77214
Threats
Impact
Critical
References
57 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The latest release of Red Hat Update Infrastructure. For more details, see the product documentation.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Update Infrastructure (RHUI) container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images.\nThis release updates to the latest version.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:89907",
"url": "https://access.redhat.com/errata/RHSA-2026:89907"
},
{
"category": "external",
"summary": "https://access.redhat.com/products/red-hat-update-infrastructure",
"url": "https://access.redhat.com/products/red-hat-update-infrastructure"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-102633",
"url": "https://access.redhat.com/security/cve/CVE-2026-102633"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-114406",
"url": "https://access.redhat.com/security/cve/CVE-2026-114406"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-19953",
"url": "https://access.redhat.com/security/cve/CVE-2026-19953"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59997",
"url": "https://access.redhat.com/security/cve/CVE-2026-59997"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59998",
"url": "https://access.redhat.com/security/cve/CVE-2026-59998"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-60000",
"url": "https://access.redhat.com/security/cve/CVE-2026-60000"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-77214",
"url": "https://access.redhat.com/security/cve/CVE-2026-77214"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/5",
"url": "https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/5"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_89907.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update",
"tracking": {
"current_release_date": "2026-10-30T01:05:52+00:00",
"generator": {
"date": "2026-10-30T01:05:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.3"
}
},
"id": "RHSA-2026:89907",
"initial_release_date": "2026-10-26T10:49:22+00:00",
"revision_history": [
{
"date": "2026-10-26T10:49:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-26T10:49:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-10-30T01:05:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Update Infrastructure 5",
"product": {
"name": "Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhui:5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Update Infrastructure"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"product": {
"name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"product_id": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cds-kubernetes-rhel9@sha256%3Ad52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/cds-kubernetes-rhel9\u0026tag=1793005771"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"product": {
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"product_id": "registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cds-rhel9@sha256%3A71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/cds-rhel9\u0026tag=1793005764"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"product": {
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"product_id": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"product_identification_helper": {
"purl": "pkg:oci/haproxy-rhel9@sha256%3Ac9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/haproxy-rhel9\u0026tag=1793004999"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"product": {
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"product_id": "registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"product_identification_helper": {
"purl": "pkg:oci/installer-rhel9@sha256%3Af8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/installer-rhel9\u0026tag=1793004989"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64",
"product": {
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64",
"product_id": "registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rhua-rhel9@sha256%3A01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d?arch=amd64\u0026repository_url=registry.redhat.io/rhui5/rhua-rhel9\u0026tag=1793005812"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64"
},
"product_reference": "registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64"
},
"product_reference": "registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64"
},
"product_reference": "registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64"
},
"product_reference": "registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64 as a component of Red Hat Update Infrastructure 5",
"product_id": "Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
},
"product_reference": "registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64",
"relates_to_product_reference": "Red Hat Update Infrastructure 5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-19953",
"cwe": {
"id": "CWE-838",
"name": "Inappropriate Encoding for Output Context"
},
"discovery_date": "2026-08-31T20:21:16.490285+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2526492"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the URI component for Perl. This vulnerability occurs because the `nameprep` function, responsible for encoding hostnames, does not properly normalize Unicode characters. As a result, a hostname that is not in a standard Unicode form (non-NFC) can be encoded into a non-standard label. This discrepancy can lead to a situation where security checks, such as allow lists or Server-Side Request Forgery (SSRF) filters, may incorrectly process hostnames, potentially allowing an attacker to bypass security restrictions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a pure logic bypass (CWE-1289), not a memory safety vulnerability. Successful exploitation requires a very specific, multi-condition application pattern: (1) the application accepts a URL from untrusted network input; (2) it parses the URL with `URI-\u003enew()`; (3) it extracts the hostname via `-\u003ehost()` and uses it for a security decision (e.g., SSRF filtering); and (4) it separately fetches the URL with a client that performs correct IDNA normalization. Only when all four conditions are simultaneously true can an attacker bypass the security control.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-19953"
},
{
"category": "external",
"summary": "RHBZ#2526492",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2526492"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-19953",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-19953"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19953",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19953"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/08/31/14",
"url": "http://www.openwall.com/lists/oss-security/2026/08/31/14"
},
{
"category": "external",
"summary": "https://github.com/libwww-perl/URI/commit/956619a9e94f86d8d2c529b4e06a3674c54a73e7.patch",
"url": "https://github.com/libwww-perl/URI/commit/956619a9e94f86d8d2c529b4e06a3674c54a73e7.patch"
},
{
"category": "external",
"summary": "https://github.com/libwww-perl/URI/pull/191",
"url": "https://github.com/libwww-perl/URI/pull/191"
},
{
"category": "external",
"summary": "https://metacpan.org/release/OALDERS/URI-5.36/changes",
"url": "https://metacpan.org/release/OALDERS/URI-5.36/changes"
},
{
"category": "external",
"summary": "https://www.rfc-editor.org/rfc/rfc5891#section-5.2",
"url": "https://www.rfc-editor.org/rfc/rfc5891#section-5.2"
}
],
"release_date": "2026-08-31T17:29:42.929000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T10:49:22+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89907"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "URI: URI (for Perl): Security bypass due to incorrect hostname encoding via missing Unicode normalization"
},
{
"cve": "CVE-2026-59997",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-07-08T01:01:08.930287+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497929"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH. The internal-sftp component within sshd incorrectly processes command-line arguments, recognizing only the first nine. This limitation can prevent the application of intended security configurations for SFTP (SSH File Transfer Protocol) connections, potentially leading to a bypass of security properties.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59997"
},
{
"category": "external",
"summary": "RHBZ#2497929",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497929"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59997",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59997"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59997",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59997"
},
{
"category": "external",
"summary": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2",
"url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.4p1",
"url": "https://www.openssh.org/releasenotes.html#10.4p1"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/07/06/5",
"url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
}
],
"release_date": "2026-07-08T00:09:04.920000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T10:49:22+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89907"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that all security-relevant command-line arguments for the `internal-sftp` server are positioned within the first nine arguments. Alternatively, consider using the default SFTP server implementation if custom configurations relying on numerous arguments are not strictly necessary. If `internal-sftp` is used with more than nine arguments, verify that no critical security options are being silently discarded.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw"
},
{
"cve": "CVE-2026-59998",
"cwe": {
"id": "CWE-909",
"name": "Missing Initialization of Resource"
},
"discovery_date": "2026-07-08T01:01:30.478799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497935"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH. The sshd component has an undocumented security-relevant behavior where GSSAPIStrictAcceptorCheck has no value when the server is in a Windows Active Directory environment. This could lead to unintended information disclosure and impact data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59998"
},
{
"category": "external",
"summary": "RHBZ#2497935",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497935"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59998",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59998"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59998",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59998"
},
{
"category": "external",
"summary": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2",
"url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.4p1",
"url": "https://www.openssh.org/releasenotes.html#10.4p1"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/07/06/5",
"url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
}
],
"release_date": "2026-07-08T00:11:05.183000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T10:49:22+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89907"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid using GSSAPI authentication for `sshd` when the server is integrated with a Windows Active Directory environment. If GSSAPI authentication is not strictly required, it can be disabled by setting `GSSAPIAuthentication no` in the `/etc/ssh/sshd_config` file. After modifying the configuration, the `sshd` service must be restarted for the changes to take effect. Note that restarting the `sshd` service will terminate all active SSH sessions.\n```bash\n# echo \"GSSAPIAuthentication no\" \u003e\u003e /etc/ssh/sshd_config\n# systemctl restart sshd\n```\nAlternatively, if GSSAPI authentication is necessary in such an environment, ensure that the network path between the client and the `sshd` server, and to the Active Directory, is secured and trusted to prevent man-in-the-middle attacks.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory"
},
{
"cve": "CVE-2026-60000",
"cwe": {
"id": "CWE-307",
"name": "Improper Restriction of Excessive Authentication Attempts"
},
"discovery_date": "2026-07-08T01:02:09.730221+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2497946"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH\u0027s Secure Shell Daemon (sshd). This vulnerability allows a remote attacker to cause a denial of service by initiating an excessive number of authentication attempts. The issue arises from the mishandling of the MaxAuthTries setting specifically when using GSSAPIAuthentication, leading to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact denial of service flaw in OpenSSH\u0027s `sshd` daemon arises from improper handling of `MaxAuthTries` during GSSAPI authentication attempts. Exploitation requires `GSSAPIAuthentication` to be explicitly enabled, which is not the default configuration in Red Hat Enterprise Linux and other affected Red Hat products, thereby limiting the attack surface in typical deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
],
"known_not_affected": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-60000"
},
{
"category": "external",
"summary": "RHBZ#2497946",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497946"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-60000",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-60000"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-60000",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-60000"
},
{
"category": "external",
"summary": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2",
"url": "https://marc.info/?l=openssh-unix-dev\u0026m=178333966933090\u0026w=2"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.4p1",
"url": "https://www.openssh.org/releasenotes.html#10.4p1"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/07/06/5",
"url": "https://www.openwall.com/lists/oss-security/2026/07/06/5"
}
],
"release_date": "2026-07-08T00:14:31.230000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T10:49:22+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89907"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts"
},
{
"cve": "CVE-2026-77214",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-10-07T14:42:40.407146+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2547476"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in expat. A remote attacker can exploit this vulnerability through repeated parse buffer operations with unvalidated buffer lengths, causing a heap buffer over-read. This issue primarily leads to information disclosure by leaking adjacent heap memory contents, which could assist in bypassing security mitigations such as Address Space Layout Randomization (ASLR), or result in a Denial of Service (DoS) by crashing the application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because the Expat XML parser is ubiquitous across Red Hat Enterprise Linux environments, frequently handling untrusted inputs in network-facing services and runtime environments. When applications process incoming XML data through repeated chunked parsing calls, an unauthenticated attacker can induce an out-of-bounds heap read without requiring prior privileges. This memory disclosure enables the retrieval of process memory layouts and pointers, effectively weakening ASLR and lowering the barrier for subsequent exploit chains.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-77214"
},
{
"category": "external",
"summary": "RHBZ#2547476",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2547476"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-77214",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-77214"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-77214",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-77214"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/commit/13c5f63a7f1c52c2feee3b16a1134d4fb68e9ea0",
"url": "https://github.com/libexpat/libexpat/commit/13c5f63a7f1c52c2feee3b16a1134d4fb68e9ea0"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/1393",
"url": "https://github.com/libexpat/libexpat/pull/1393"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/libexpat-heap-buffer-over-read-in-xmlparse-c-via-xml-parsebuffer",
"url": "https://www.vulncheck.com/advisories/libexpat-heap-buffer-over-read-in-xmlparse-c-via-xml-parsebuffer"
}
],
"release_date": "2026-10-07T14:35:42.794000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T10:49:22+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89907"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer"
},
{
"cve": "CVE-2026-102633",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-09-29T16:31:19.583045+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2543288"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in expat. On 32-bit systems, an integer overflow occurs within the expat_realloc memory allocation function when calculating buffer sizes. A remote attacker can exploit this vulnerability by supplying specially crafted XML input to an application that processes data with the library. Successful exploitation can lead to a Denial of Service (DoS) or memory corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "expat: expat: Denial of Service via integer overflow in expat_realloc",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw of moderate impact was found in the expat XML parser library (libexpat), which is shipped in Red Hat Enterprise Linux and Fedora. On 32-bit systems, an integer overflow can occur in the expat_realloc() memory allocation function when buffer sizes are calculated, resulting in an undersized heap allocation that can lead to a heap buffer overflow, memory corruption, or a crash. A remote attacker can supply specially crafted XML input to an application that processes data with the vulnerable library, causing a denial of service of that application; no privileges or user interaction are required, but exploitation is limited to 32-bit platforms and requires triggering specific allocation sizes, so attack complexity is high.\n\nRed Hat Product Security rates this flaw Moderate (CVSS 3.1 score 5.9, AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H), which differs from the upstream CVSS 4.0 rating of Important (8.2) because the vulnerability is restricted to 32-bit architectures with high attack complexity and its impact is limited to availability.\n\nAffected expat and mingw-expat components span Red Hat Enterprise Linux 6 through 10, Red Hat In-Vehicle OS, Red Hat Hardened Images, and Fedora. For Red Hat Enterprise Linux and UBI-related streams, fixes are being pursued through delegated updates. For several maintenance streams the fix is deferred because the flaw is Moderate severity with a CVSS score below 7.0, leaving a residual risk of denial of service or memory corruption on 32-bit deployments until a fix is delivered. Red Hat Enterprise Linux 6 and certain platform streams are out of support scope and will not be fixed. The expat package in Red Hat Hardened Images (Hummingbird) is not affected because the vulnerable code is not present.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-102633"
},
{
"category": "external",
"summary": "RHBZ#2543288",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2543288"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-102633",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-102633"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-102633",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-102633"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat",
"url": "https://github.com/libexpat/libexpat"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/lib/xmlparse.c#L1003",
"url": "https://github.com/libexpat/libexpat/blob/R_2_8_5/expat/lib/xmlparse.c#L1003"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/commit/209801d7fbaf07ab74bae8cb32dd2ab9e5846118",
"url": "https://github.com/libexpat/libexpat/commit/209801d7fbaf07ab74bae8cb32dd2ab9e5846118"
},
{
"category": "external",
"summary": "https://github.com/libexpat/libexpat/pull/1392",
"url": "https://github.com/libexpat/libexpat/pull/1392"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.8.5-integer-overflow-in-expat-realloc",
"url": "https://www.vulncheck.com/advisories/libexpat-2.7.2-through-2.8.5-integer-overflow-in-expat-realloc"
}
],
"release_date": "2026-09-29T16:04:16.738000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T10:49:22+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89907"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "expat: expat: Denial of Service via integer overflow in expat_realloc"
},
{
"cve": "CVE-2026-114406",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-10-20T09:01:55.916000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2556046"
}
],
"notes": [
{
"category": "description",
"text": "The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-114406"
},
{
"category": "external",
"summary": "RHBZ#2556046",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556046"
},
{
"category": "external",
"summary": "RHSB-2026-012",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-012"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-114406",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-114406"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-114406",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114406"
}
],
"release_date": "2026-10-20T13:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-26T10:49:22+00:00",
"details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:89907"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-kubernetes-rhel9@sha256:d52ec16fcf7c723fbe065397bd685fdfbc5e845f782fa05c200597495a8b36cf_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/cds-rhel9@sha256:71f357468bcb6367a15c0f868481653caade9db6a4d0fa36869bfecd70d11958_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/haproxy-rhel9@sha256:c9b0b3e0e77209c3352ed8c6be19f27a0598556bba357783fa517db465dd3eed_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/installer-rhel9@sha256:f8f7b95e96da75fa630092e5f14a644e8436fff4bb90ad0344f96aa24453f0de_amd64",
"Red Hat Update Infrastructure 5:registry.redhat.io/rhui5/rhua-rhel9@sha256:01b5c0c6c3e5c009171bcfd20e452d2fcc28dd552c52aeb30b1b287547828e2d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.