Red Hat Enterprise Linux (sssd, tftp, ansible-collection-ansible-posix): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 3

• High 7.5
  CVE-2026-85234

  Tftp: tftp-hpa: denial of service due to out-of-bounds read/write in remap engine

  A flaw was found in tftp-hpa. When the `in.tftpd` remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the `genmatchstring()` function. This leads to out-of-bounds read/write…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Sep 15, 2026
• High 7.5
  CVE-2026-87853

  Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation

  A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC subject identifier using strncmp() with the authenticated user's identifier length, performing a prefix comparison instead of an exact match. An att…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Sep 9, 2026
• High 7.3
  CVE-2026-11837 Public exploit

  Ansible-collection-ansible-posix: ansible.posix authorized_key: local privilege escalation via symlink-following chown

  A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens files without O_NOFOLLOW when managing SSH authorized keys. An unprivileged local…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu
  Jun 10, 2026

Revision history

1. 2026-11-12 #6

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

2. 2026-11-11 #5

   Neue Updates von Red Hat aufgenommen

3. 2026-10-13 #4

   Neue Updates von Red Hat, Rocky Enterprise Software Foundation und Oracle Linux aufgenommen

4. 2026-10-12 #3

   Neue Updates von Oracle Linux aufgenommen

5. 2026-10-11 #2

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

6. 2026-10-08 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:77534 vom 2026-10-08
  https://access.redhat.com/errata/RHSA-2026:77534
• Red Hat Security Advisory RHSA-2026:78952 vom 2026-10-08
  https://access.redhat.com/errata/RHSA-2026:78952
• Red Hat Security Advisory RHSA-2026:79112 vom 2026-10-08
  https://access.redhat.com/errata/RHSA-2026:79112
• Oracle Linux Security Advisory ELSA-2026-78952 vom 2026-10-09
  https://linux.oracle.com/errata/ELSA-2026-78952.html
• Rocky Linux Security Advisory RLSA-2026:77534 vom 2026-10-09
  https://errata.build.resf.org/RLSA-2026:77534
• Red Hat Security Advisory RHSA-2026:80663 vom 2026-10-12
  https://access.redhat.com/errata/RHSA-2026:80663
• Red Hat Security Advisory RHSA-2026:80508 vom 2026-10-12
  https://access.redhat.com/errata/RHSA-2026:80508
• Oracle Linux Security Advisory ELSA-2026-80663 vom 2026-10-12
  https://linux.oracle.com/errata/ELSA-2026-80663.html
• Red Hat Security Advisory RHSA-2026:82280 vom 2026-10-13
  https://access.redhat.com/errata/RHSA-2026:82280
• Red Hat Security Advisory RHSA-2026:82339 vom 2026-10-13
  https://access.redhat.com/errata/RHSA-2026:82339
• Rocky Linux Security Advisory RLSA-2026:82280 vom 2026-10-13
  https://errata.build.resf.org/RLSA-2026:82280
• Rocky Linux Security Advisory RLSA-2026:80663 vom 2026-10-13
  https://errata.build.resf.org/RLSA-2026:80663
• Oracle Linux Security Advisory ELSA-2026-82280 vom 2026-10-13
  https://linux.oracle.com/errata/ELSA-2026-82280.html
• Red Hat Security Advisory RHSA-2026:98563 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98563
• Red Hat Security Advisory RHSA-2026:98457 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98457
• Red Hat Security Advisory RHSA-2026:98559 vom 2026-11-11
  https://access.redhat.com/errata/RHSA-2026:98559
• Rocky Linux Security Advisory RLSA-2026:98563 vom 2026-11-13
  https://errata.build.resf.org/RLSA-2026:98563