Summary
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Angriff auszulösen.
Product
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Vulnerabilities 6
-
High 8.8
pgvector buffer overflow in IVFFlat index build
IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.
-
High 8.8
Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chosen paths outside the sandbox as the launching user. This happens before the san…
-
High 7.5
Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding
Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked headers, treating requests as having no message body and parsing the chunked body as a subsequent request. Attackers can exploit this inconsistency when Tornado is deployed behind proxies to pe…
-
High 7.5
Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop
Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parse_qs in tornado/escape.py without passing max_num_fields. RequestHandler._execute in t…
-
High 7.5
Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)
A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A remote, unauthenticated attacker can send a small crafted image declaring enor…
-
High 7.4
Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config
A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true. This permissive cross-ori…
Revision history
-
#13
Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen
-
#12
Neue Updates von Red Hat, Ubuntu und Rocky Enterprise Software Foundation aufgenommen
-
#11
Neue Updates von Ubuntu und Red Hat aufgenommen
-
#10
Neue Updates von Red Hat aufgenommen
-
#9
Neue Updates von Red Hat aufgenommen
-
#8
Neue Updates von IBM aufgenommen
-
#7
Neue Updates von Red Hat aufgenommen
-
#6
Neue Updates von Red Hat und Oracle Linux aufgenommen
-
#5
Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen
-
#4
Neue Updates von Red Hat und Ubuntu aufgenommen
-
#3
Neue Updates von SUSE, Oracle Linux und Rocky Enterprise Software Foundation aufgenommen
-
#2
Neue Updates von SUSE und Rocky Enterprise Software Foundation aufgenommen
-
#1
Initiale Fassung
References
-
Red Hat Security Advisory RHSA-2026:84843 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:84843
-
Red Hat Security Advisory RHSA-2026:84844 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:84844
-
Red Hat Security Advisory RHSA-2026:85135 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85135
-
Red Hat Security Advisory RHSA-2026:85234 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85234
-
Red Hat Security Advisory RHSA-2026:85306 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85306
-
Red Hat Security Advisory RHSA-2026:85308 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85308
-
Red Hat Security Advisory RHSA-2026:85309 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85309
-
Red Hat Security Advisory RHSA-2026:85312 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85312
-
Red Hat Security Advisory RHSA-2026:85313 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85313
-
Red Hat Security Advisory RHSA-2026:85317 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85317
-
Red Hat Security Advisory RHSA-2026:85319 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85319
-
Red Hat Security Advisory RHSA-2026:85322 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85322
-
Red Hat Security Advisory RHSA-2026:85324 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85324
-
Red Hat Security Advisory RHSA-2026:85325 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85325
-
Red Hat Security Advisory RHSA-2026:85791 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:85791
-
Oracle Linux Security Advisory ELSA-2026-85309 vom 2026-10-20
https://linux.oracle.com/errata/ELSA-2026-85309.html
-
SUSE Security Update SUSE-SU-2026:24211-1 vom 2026-10-20
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029949.html
-
Rocky Linux Security Advisory RLSA-2026:85234 vom 2026-10-20
https://errata.build.resf.org/RLSA-2026:85234
-
Rocky Linux Security Advisory RLSA-2026:84798 vom 2026-10-20
https://errata.build.resf.org/RLSA-2026:84798
-
SUSE Security Update SUSE-SU-2026:24207-1 vom 2026-10-20
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029951.html
-
Rocky Linux Security Advisory RLSA-2026:85814 vom 2026-10-20
https://errata.build.resf.org/RLSA-2026:85814
-
Rocky Linux Security Advisory RLSA-2026:85306 vom 2026-10-21
https://errata.build.resf.org/RLSA-2026:85306
-
Rocky Linux Security Advisory RLSA-2026:85791 vom 2026-10-20
https://errata.build.resf.org/RLSA-2026:85791
-
Rocky Linux Security Advisory RLSA-2026:85309 vom 2026-10-21
https://errata.build.resf.org/RLSA-2026:85309
-
SUSE Security Update SUSE-SU-2026:4804-1 vom 2026-10-21
https://lists.suse.com/pipermail/sle-security-updates/2026-October/029980.html
-
Oracle Linux Security Advisory ELSA-2026-85234 vom 2026-10-21
http://linux.oracle.com/errata/ELSA-2026-85234.html
-
Oracle Linux Security Advisory ELSA-2026-85306 vom 2026-10-21
http://linux.oracle.com/errata/ELSA-2026-85306.html
-
Oracle Linux Security Advisory ELSA-2026-85308 vom 2026-10-21
http://linux.oracle.com/errata/ELSA-2026-85308.html
-
Oracle Linux Security Advisory ELSA-2026-85814 vom 2026-10-21
http://linux.oracle.com/errata/ELSA-2026-85814.html
-
Rocky Linux Security Advisory RLSA-2026:85308 vom 2026-10-21
https://errata.build.resf.org/RLSA-2026:85308
-
Oracle Linux Security Advisory ELSA-2026-85791 vom 2026-10-21
https://oss.oracle.com/pipermail/el-errata/2026-October/022544.html
-
Red Hat Security Advisory RHSA-2026:88360 vom 2026-10-22
https://access.redhat.com/errata/RHSA-2026:88360
-
Red Hat Security Advisory RHSA-2026:88359 vom 2026-10-22
https://access.redhat.com/errata/RHSA-2026:88359
-
Ubuntu Security Notice USN-8952-1 vom 2026-10-22
https://ubuntu.com/security/notices/USN-8952-1
-
Oracle Linux Security Advisory ELSA-2026-88360 vom 2026-10-23
https://linux.oracle.com/errata/ELSA-2026-88360.html
-
Rocky Linux Security Advisory RLSA-2026:88360 vom 2026-10-23
https://errata.build.resf.org/RLSA-2026:88360
-
Oracle Linux Security Advisory ELSA-2026-88359 vom 2026-10-23
https://linux.oracle.com/errata/ELSA-2026-88359.html
-
Rocky Linux Security Advisory RLSA-2026:88359 vom 2026-10-23
https://errata.build.resf.org/RLSA-2026:88359
-
Red Hat Security Advisory RHSA-2026:92408 vom 2026-10-29
https://access.redhat.com/errata/RHSA-2026:92408
-
Oracle Linux Security Advisory ELSA-2026-92408 vom 2026-10-30
http://linux.oracle.com/errata/ELSA-2026-92408.html
-
Rocky Linux Security Advisory RLSA-2026:92408 vom 2026-10-30
https://errata.build.resf.org/RLSA-2026:92408
-
Red Hat Security Advisory RHSA-2026:93460 vom 2026-11-02
https://access.redhat.com/errata/RHSA-2026:93460
-
IBM Security Bulletin 7295357 vom 2026-11-03
https://www.ibm.com/support/pages/node/7295357
-
Red Hat Security Advisory RHSA-2026:95221 vom 2026-11-04
https://access.redhat.com/errata/RHSA-2026:95221
-
Red Hat Security Advisory RHSA-2026:95466 vom 2026-11-05
https://access.redhat.com/errata/RHSA-2026:95466
-
Red Hat Security Advisory RHSA-2026:95521 vom 2026-11-05
https://access.redhat.com/errata/RHSA-2026:95521
-
Ubuntu Security Notice USN-8952-2 vom 2026-11-06
https://ubuntu.com/security/notices/USN-8952-2
-
Red Hat Security Advisory RHSA-2026:96077 vom 2026-11-09
https://access.redhat.com/errata/RHSA-2026:96077
-
Red Hat Security Advisory RHSA-2026:95887 vom 2026-11-06
https://access.redhat.com/errata/RHSA-2026:95887
-
Red Hat Security Advisory RHSA-2026:98104 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98104
-
Red Hat Security Advisory RHSA-2026:98110 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98110
-
Ubuntu Security Notice USN-8952-3 vom 2026-11-11
https://ubuntu.com/security/notices/USN-8952-3
-
Red Hat Security Advisory RHSA-2026:98107 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98107
-
Red Hat Security Advisory RHSA-2026:97875 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:97875
-
Red Hat Security Advisory RHSA-2026:98106 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98106
-
Rocky Linux Security Advisory RLSA-2026:97875 vom 2026-11-11
https://errata.build.resf.org/RLSA-2026:97875
-
Rocky Linux Security Advisory RLSA-2026:98494 vom 2026-11-12
https://errata.build.resf.org/RLSA-2026:98494
-
Red Hat Security Advisory RHSA-2026:98494 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98494
-
Red Hat Security Advisory RHSA-2026:98606 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98606
-
Red Hat Security Advisory RHSA-2026:98521 vom 2026-11-11
https://access.redhat.com/errata/RHSA-2026:98521