Red Hat Enterprise Linux (crun, xfsprogs, glib-networking): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 3

• High 7.8
  CVE-2026-108472

  Xfsprogs: xfsprogs: local privilege escalation via command injection in xfs_admin

  A flaw was found in the xfs_admin utility in xfsprogs. The tool does not properly validate user-supplied parameters, allowing operating system command injection. A local attacker can exploit this issue by providing crafted input arguments, which may result in…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  Nov 11, 2026
• High 7.5
  CVE-2026-103963

  Glib-networking: unbounded tls 1.3 session ticket queue growth in glib-networking allows remote denial of service

  A flaw was found in glib-networking. When establishing connections using Transport Layer Security (TLS) version 1.3, the client-side session cache does not limit the number of session tickets retained for a single host. A malicious server can exploit this by …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Oct 30, 2026
• Medium 5.1
  CVE-2026-47766

  crun follows rootfs /dev symlink while creating default devices

  crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs `/dev` directory without `O_NOFOLLOW`. If an OCI bundle contains `rootfs/dev` as a symlink and the bundle configurat…

  containers crun crun crun Debian Ubuntu Azure Linux Alpine
  Aug 14, 2026

Revision history

1. 2026-11-12 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:99117 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99117
• Red Hat Security Advisory RHSA-2026:99659 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99659
• Red Hat Security Advisory RHSA-2026:99660 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99660
• Red Hat Security Advisory RHSA-2026:99661 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99661
• Red Hat Security Advisory RHSA-2026:99662 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99662
• RedHat Customer Portal vom 2026-11-12
  https://access.redhat.com/security/cve/cve-2026-108472
• Red Hat Security Advisory RHSA-2026:99817 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99817
• Red Hat Security Advisory RHSA-2026:99696 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99696
• Red Hat Security Advisory RHSA-2026:99697 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99697
• Red Hat Security Advisory RHSA-2026:99698 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99698
• Red Hat Security Advisory RHSA-2026:99695 vom 2026-11-12
  https://access.redhat.com/errata/RHSA-2026:99695
• Rocky Linux Security Advisory RLSA-2026:99696 vom 2026-11-13
  https://errata.build.resf.org/RLSA-2026:99696
• Rocky Linux Security Advisory RLSA-2026:99660 vom 2026-11-13
  https://errata.build.resf.org/RLSA-2026:99660