Red Hat Enterprise Linux (firewalld, leapp-repository, tesseract): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 3

• High 7.3
  CVE-2026-75092

  Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins

  A privilege escalation flaw was found in the scan_mysql actor of leapp-upgrade-el9toel10 (provided by leapp-repository). During RHEL 9 to RHEL 10 upgrades, the actor runs: mysqld --validate-config --log-error-verbosity=2 directly as root in the Leapp actor co…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9.6 Extended Update Support Linux
  Sep 15, 2026
• Medium 6.8
  CVE-2026-73066

  Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata

  Tesseract is an open source OCR engine. Prior to 5.5.3, a crafted .traineddata LSTM model component loaded through Tesseract's deserializer can cause an unchecked signed integer multiplication in Convolve::DeSerialize in src/lstm/convolve.cpp to wrap the conv…

  tesseract-ocr tesseract tesseract tesseract Debian Ubuntu
  Aug 11, 2026
• Medium 5.5
  CVE-2026-4948

  Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization

  A flaw was found in firewalld. A local unprivileged user can exploit this vulnerability by mis-authorizing two runtime D-Bus (Desktop Bus) setters, setZoneSettings2 and setPolicySettings. This mis-authorization allows the user to modify the runtime firewall s…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Mar 27, 2026

Revision history

1. 2026-10-29 #14

   Neue Updates von Red Hat aufgenommen

2. 2026-10-12 #13

   Neue Updates von Red Hat aufgenommen

3. 2026-10-06 #12

   Neue Updates von Ubuntu und Red Hat aufgenommen

4. 2026-10-05 #11

   Neue Updates von Red Hat aufgenommen

5. 2026-10-01 #10

   Neue Updates von Red Hat aufgenommen

6. 2026-09-30 #9

   Neue Updates von Red Hat aufgenommen

7. 2026-09-27 #8

   Neue Updates von Red Hat aufgenommen

8. 2026-09-24 #7

   Neue Updates von Red Hat aufgenommen

9. 2026-09-23 #6

   Neue Updates von Red Hat aufgenommen

10. 2026-09-21 #5

    Neue Updates von Red Hat aufgenommen

11. 2026-09-20 #4

    Neue Updates von Red Hat aufgenommen

12. 2026-09-17 #3

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

13. 2026-09-16 #2

    Neue Updates von Rocky Enterprise Software Foundation und Oracle Linux aufgenommen

14. 2026-09-15 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:67585 vom 2026-09-15
  https://access.redhat.com/errata/RHSA-2026:67585
• Red Hat Security Advisory RHSA-2026:67608 vom 2026-09-15
  https://access.redhat.com/errata/RHSA-2026:67608
• Red Hat Security Advisory RHSA-2026:67609 vom 2026-09-15
  https://access.redhat.com/errata/RHSA-2026:67609
• Red Hat Security Advisory RHSA-2026:67830 vom 2026-09-15
  https://access.redhat.com/errata/RHSA-2026:67830
• Red Hat Security Advisory RHSA-2026:67831 vom 2026-09-15
  https://access.redhat.com/errata/RHSA-2026:67831
• Red Hat Security Advisory RHSA-2026:67832 vom 2026-09-15
  https://access.redhat.com/errata/RHSA-2026:67832
• Red Hat Security Advisory RHSA-2026:67843 vom 2026-09-16
  https://access.redhat.com/errata/RHSA-2026:67843
• Rocky Linux Security Advisory RLSA-2026:67831 vom 2026-09-17
  https://errata.build.resf.org/RLSA-2026:67831
• Oracle Linux Security Advisory ELSA-2026-67831 vom 2026-09-16
  https://linux.oracle.com/errata/ELSA-2026-67831.html
• Oracle Linux Security Advisory ELSA-2026-67832 vom 2026-09-16
  https://linux.oracle.com/errata/ELSA-2026-67832.html
• Rocky Linux Security Advisory RLSA-2026:67608 vom 2026-09-16
  https://errata.build.resf.org/RLSA-2026:67608
• Rocky Linux Security Advisory RLSA-2026:67585 vom 2026-09-17
  https://errata.build.resf.org/RLSA-2026:67585
• Oracle Linux Security Advisory ELSA-2026-67585 vom 2026-09-16
  https://linux.oracle.com/errata/ELSA-2026-67585.html
• Oracle Linux Security Advisory ELSA-2026-67830 vom 2026-09-16
  https://linux.oracle.com/errata/ELSA-2026-67830.html
• Rocky Linux Security Advisory RLSA-2026:67830 vom 2026-09-17
  https://errata.build.resf.org/RLSA-2026:67830
• Rocky Linux Security Advisory RLSA-2026:67832 vom 2026-09-17
  https://errata.build.resf.org/RLSA-2026:67832
• Red Hat Security Advisory RHSA-2026:69111 vom 2026-09-21
  https://access.redhat.com/errata/RHSA-2026:69111
• Red Hat Security Advisory RHSA-2026:69495 vom 2026-09-21
  https://access.redhat.com/errata/RHSA-2026:69495
• Red Hat Security Advisory RHSA-2026:71566 vom 2026-09-24
  https://access.redhat.com/errata/RHSA-2026:71566
• Red Hat Security Advisory RHSA-2026:71568 vom 2026-09-24
  https://access.redhat.com/errata/RHSA-2026:71568
• Red Hat Security Advisory RHSA-2026:71567 vom 2026-09-24
  https://access.redhat.com/errata/RHSA-2026:71567
• Red Hat Security Advisory RHSA-2026:72280 vom 2026-09-28
  https://access.redhat.com/errata/RHSA-2026:72280
• Red Hat Security Advisory RHSA-2026:74359 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:74359
• Red Hat Security Advisory RHSA-2026:74360 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:74360
• Red Hat Security Advisory RHSA-2026:74364 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:74364
• Red Hat Security Advisory RHSA-2026:74365 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:74365
• Red Hat Security Advisory RHSA-2026:74363 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:74363
• Red Hat Security Advisory RHSA-2026:73929 vom 2026-09-30
  https://access.redhat.com/errata/RHSA-2026:73929
• Red Hat Security Advisory RHSA-2026:74362 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:74362
• Red Hat Security Advisory RHSA-2026:74361 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:74361
• Red Hat Security Advisory RHSA-2026:73930 vom 2026-09-30
  https://access.redhat.com/errata/RHSA-2026:73930
• Red Hat Security Advisory RHSA-2026:74450 vom 2026-10-01
  https://access.redhat.com/errata/RHSA-2026:74450
• Red Hat Security Advisory RHSA-2026:74771 vom 2026-10-02
  https://access.redhat.com/errata/RHSA-2026:74771
• Red Hat Security Advisory RHSA-2026:76042 vom 2026-10-05
  https://access.redhat.com/errata/RHSA-2026:76042
• Ubuntu Security Notice USN-8882-1 vom 2026-10-06
  https://ubuntu.com/security/notices/USN-8882-1
• Red Hat Security Advisory RHSA-2026:76844 vom 2026-10-06
  https://access.redhat.com/errata/RHSA-2026:76844
• Red Hat Security Advisory RHSA-2026:82066 vom 2026-10-13
  https://access.redhat.com/errata/RHSA-2026:82066
• Red Hat Security Advisory RHSA-2026:81127 vom 2026-10-12
  https://access.redhat.com/errata/RHSA-2026:81127
• Red Hat Security Advisory RHSA-2026:82059 vom 2026-10-13
  https://access.redhat.com/errata/RHSA-2026:82059
• Red Hat Security Advisory RHSA-2026:82061 vom 2026-10-13
  https://access.redhat.com/errata/RHSA-2026:82061
• Red Hat Security Advisory RHSA-2026:92449 vom 2026-10-29
  https://access.redhat.com/errata/RHSA-2026:92449
• Red Hat Security Advisory RHSA-2026:92452 vom 2026-10-29
  https://access.redhat.com/errata/RHSA-2026:92452