Red Hat Linux Security Advisories & CVEs
5452 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
Medium [CVE-2026-14740] DBI for Perl: Out-of-bounds read in SQL comment processing
DBI for Perl: Out-of-bounds read in SQL comment processing. Red Hat rates this moderate (CVSS 5). Weakness: CWE-125.
Medium [CVE-2026-58472] Arbitrary code execution or denial of service via crafted HTML attribute
Arbitrary code execution or denial of service via crafted HTML attribute. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-131.
Medium [CVE-2026-58471] Heap buffer overflow via server-supplied filename leads to memory corruption
Heap buffer overflow via server-supplied filename leads to memory corruption. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-122.
Medium [CVE-2026-58470] Integer overflow in Content-Range header parsing causes download desynchronization
Integer overflow in Content-Range header parsing causes download desynchronization. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-190.
Medium [CVE-2026-58469] Memory corruption via crafted Metalink URL
Memory corruption via crafted Metalink URL. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-125.
Medium [CVE-2026-14969] Static initialization vector in AES-CBC/3DES-CBC attribute encryption
Static initialization vector in AES-CBC/3DES-CBC attribute encryption. Red Hat rates this moderate (CVSS 4.4). Weakness: CWE-329.
Medium [CVE-2026-53877] Information disclosure via heap buffer over-read in GDALRaster
Information disclosure via heap buffer over-read in GDALRaster. Red Hat rates this low (CVSS 4.8). Weakness: CWE-126.
Medium [CVE-2026-14940] heap-buffer-overflow in DN normalization via quoted multivalued RDN
heap-buffer-overflow in DN normalization via quoted multivalued RDN. Red Hat rates this moderate (CVSS 5.3). Weakness: CWE-122.
Medium [CVE-2025-12799] Jastow Cross-Site Scripting attack due to unsanitized URI
Jastow Cross-Site Scripting attack due to unsanitized URI. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-79. Red Hat lists fixing advisory RHSA-2026:36343 with package eap8-elytron-web-0:4.1.2-1.Final_redhat_00001.1.el10eap, eap8-jboss-ejb-client-0:5.0.8-1.Final_redhat_00001.1.el10eap, eap8-jandex-0:3.2.7-1.redhat_00001.1.el10eap, eap8-javaee-security-soteria-0:3.0.3-2.redhat_00001.1.el10eap. Affected product named by the advisory: Red Hat Enterprise Linux 1.
Low [CVE-2026-28378] Unauthorized public dashboard deletion across organizations
Unauthorized public dashboard deletion across organizations. Red Hat rates this low (CVSS 3.1). Weakness: CWE-1220.
Low [CVE-2026-14935] webrtcbin accepts remote SDP without a=fingerprint due to inverted presence check
webrtcbin accepts remote SDP without a=fingerprint due to inverted presence check. Red Hat rates this low (CVSS 3.7). Weakness: CWE-670.
Low [CVE-2026-48588] Information disclosure due to improper caching of Set-Cookie responses
Information disclosure due to improper caching of Set-Cookie responses. Red Hat rates this low (CVSS 3.1). Weakness: CWE-524.
Low [CVE-2026-53878] HTTP header injection via DomainNameValidator accepting newlines
HTTP header injection via DomainNameValidator accepting newlines. Red Hat rates this low (CVSS 3.7). Weakness: CWE-113.
Critical [CVE-2026-54763] Identity spoofing via improper header handling in authentication middlewares
Traefik is an HTTP reverse proxy and load balancer. Prior to v2.11.51, v3.6.22, and v3.7.6, Traefik's BasicAuth, DigestAuth, and ForwardAuth middlewares strip canonical-cased spoofed identity headers before writing Traefik's own value, but do not account for underscore-variant header names, which many backends normalize identically to dashed forms. An attacker able to reach a protected route can inject an underscore-variant header that survives Traefik's stripping and reaches the backend alongside, or on the unauthenticated ForwardAuth authResponseHeaders path instead of, the value Traefik intended to set, spoofing identity or authorization context. This issue is fixed in versions v2.11.51, v3.6.22, and v3.7.6. This allows a remote attacker to inject a specially crafted header that bypasses Traefik's security mechanisms. As a result, the attacker can spoof identity or authorization context to the backend, potentially gaining unauthorized access to protected resources. This can lead to identity spoofing or unauthorized access to backend services, as Traefik fails to properly strip these headers before forwarding them. The vulnerability is significant because many backend systems normalize these header forms, making exploitation feasible in typical deployments. Red Hat severity: Important — CVSS 10 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N). Weakness: CWE-178.
Critical [CVE-2026-48614] Privilege escalation via improper authorization in XML API
Privilege escalation via improper authorization in XML API. Red Hat rates this critical (CVSS 9.9). Weakness: CWE-15.
High [CVE-2026-54765] Unauthorized filter context application in Kubernetes Gateway API provider
Traefik is an open source HTTP reverse proxy and load balancer. From v3.7.0 prior to v3.7.6, Traefik's Kubernetes Gateway API provider may resolve two accepted HTTPRoutes that target the same backend Service:port but configure different backendRef filters to the same child service and apply only one route's filter set to all requests reaching that backend. In Gateway deployments where backendRef filters set security-sensitive headers, such as tenant identity, authorization context, or values the backend trusts, an attacker who can create an accepted HTTPRoute sharing the same backend Service:port may cause their route's filter context to be applied to another route's requests, potentially crossing namespace boundaries when a ReferenceGrant permits cross-namespace targeting. This issue is fixed in version v3.7.6. The system may incorrectly apply the attacker's route filter context to another route's requests, potentially allowing unauthorized access or information disclosure across different namespaces. This could lead to the application of security-sensitive headers from the attacker's route to legitimate requests, bypassing intended security controls. This Moderate flaw in Traefik's Kubernetes Gateway API provider, as deployed in Red Hat OpenShift Dev Spaces, could allow an attacker to apply their route's filter context to other requests.
High [CVE-2026-55574] Denial of Service via adversarial regular expression in structured outputs API
Denial of Service via adversarial regular expression in structured outputs API. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1333.
High [CVE-2026-54234] Denial of Service via malformed speculative decoding workload
Denial of Service via malformed speculative decoding workload. Red Hat rates this important (CVSS 7.5). Weakness: CWE-125.
High [CVE-2026-55379] Denial of Service via crafted BDF font file
Denial of Service via crafted BDF font file. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Red Hat lists fixing advisory RHSA-2026:39127 with package python-pillow-0:5.1.1-22.el8_10. Affected product named by the advisory: Red Hat Enterprise Linux 8.
High [CVE-2026-55380] Denial of Service via crafted GD 2.x image file
Denial of Service via crafted GD 2.x image file. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1285. Red Hat lists fixing advisory RHSA-2026:39127 with package python-pillow-0:5.1.1-22.el8_10. Affected product named by the advisory: Red Hat Enterprise Linux 8.