Red Hat Linux Security Advisories & CVEs
5439 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
Low [CVE-2026-56364] Magick.NET-Q16-arm64: Magick.NET-Q16-x86: Magick.NET-Q16-OpenMP-x64: Magick.NET-Q16-OpenMP-arm64: Magick.NET-Q16-OpenMP-x86: Magick.NET-Q16-HDRI-x64: Magick.NET-Q16-HDRI-arm64: Magick.NET-Q16-HDRI-…
Magick.NET-Q16-arm64: Magick.NET-Q16-x86: Magick.NET-Q16-OpenMP-x64: Magick.NET-Q16-OpenMP-arm64: Magick.NET-Q16-OpenMP-x86: Magick.NET-Q16-HDRI-x64: Magick.NET-Q16-HDRI-arm64: Magick.NET-Q16-HDRI-x86: Magick.NET-Q16-HDRI-OpenMP-x64: Magick.NET-Q16-HDRI-OpenMP-arm64: Magick.NET-Q8-AnyCPU: Magick.NET-Q16-AnyCPU: Magick.NET-Q16-HDRI-AnyCPU: ImageMagick: Denial of Service via memory leak in OpenCL device profile XML parsing. Red Hat rates this low (CVSS 1.9). Weakness: CWE-401.
Low [CVE-2026-56363] ImageMagick - Division by Zero in Binomial Kernel Processing
ImageMagick - Division by Zero in Binomial Kernel Processing. Red Hat rates this low (CVSS 3.3). Weakness: CWE-190.
Low [CVE-2026-56361] Heap buffer overflow via incorrect morphology parameters
Heap buffer overflow via incorrect morphology parameters. Red Hat rates this low (CVSS 3.3). Weakness: CWE-125.
Low [CVE-2026-58371] Information disclosure via unvalidated JSONP callback parameter
Information disclosure via unvalidated JSONP callback parameter. Red Hat rates this low (CVSS 3.1). Weakness: CWE-79.
Low [CVE-2026-37106] Unauthorized account creation via registration function
Unauthorized account creation via registration function. Red Hat rates this low (CVSS 3.7). Weakness: CWE-306.
High [CVE-2026-55607] @anthropic-ai/claude-code: Claude Code: Arbitrary code execution through git directory confusion
@anthropic-ai/claude-code: Claude Code: Arbitrary code execution through git directory confusion. Red Hat rates this important (CVSS 7.1). Weakness: CWE-59.
High [CVE-2026-13676] Security policy bypass due to improper Unicode hostname canonicalization
Security policy bypass due to improper Unicode hostname canonicalization. Red Hat rates this important (CVSS 7.5). Weakness: CWE-551. Red Hat lists fixing advisory RHSA-2026:37186 with package rhem/flightctl-ui-rhel9:1784127736, quay/quay-rhel9:1783955846, openshift4/ose-monitoring-plugin-rhel9:1783596795, rhem/flightctl-ui-rhel10:1784194574.
High [CVE-2026-54369] Symlink traversal privilege escalation via libacl functions
Symlink traversal privilege escalation via libacl functions. Red Hat rates this important (CVSS 7.1). Weakness: CWE-59. Red Hat lists fixing advisory RHSA-2026:34351 with package acl-main-2.4.0-0.1.hum1.
High [CVE-2026-12856] Command Injection vulnerability in the JavaDoc hover provider of the vscode-java extension
Command Injection vulnerability in the JavaDoc hover provider of the vscode-java extension. Red Hat rates this important (CVSS 8.8). Weakness: CWE-88. Red Hat lists fixing advisory RHSA-2026:36820 with package devspaces/pluginregistry-rhel9:1782989367.
Medium [CVE-2026-55956] Improper Authorization Allows Security Constraint Bypass
Improper Authorization Allows Security Constraint Bypass. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-551. Red Hat lists fixing advisory RHSA-2026:39189 with package tomcat11-main-11.0.23-0.1.hum1, tomcat-catalina, jws7-tomcat-0:11.0.21-5.redhat_00004.1.el10jws, jws7-tomcat-0:11.0.21-5.redhat_00004.1.el8jws. Affected products named by the advisory: Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9.
Medium [CVE-2026-55955] Replay attack via improper authentication in EncryptionInterceptor
Replay attack via improper authentication in EncryptionInterceptor. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-294. Red Hat lists fixing advisory RHSA-2026:29203 with package tomcat11-main-11.0.23-0.1.hum1, tomcat10-main-10.1.56-1.hum1.
Medium [CVE-2026-53404] Incorrect control flow in rewrite valve allows unexpected rule processing
Incorrect control flow in rewrite valve allows unexpected rule processing. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-358. Red Hat lists fixing advisory RHSA-2026:29203 with package tomcat11-main-11.0.23-0.1.hum1, tomcat10-main-10.1.56-1.hum1.
Medium [CVE-2026-50229] Cross-Site Scripting vulnerability in number guess example
Cross-Site Scripting vulnerability in number guess example. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-79. Red Hat lists fixing advisory RHSA-2026:32960 with package tomcat11-main-11.0.23-0.1.hum1.
Medium [CVE-2026-46406] @anthropic-ai/claude-code: Claude Code: Information disclosure and file overwrite via insecure temporary file in /copy command
@anthropic-ai/claude-code: Claude Code: Information disclosure and file overwrite via insecure temporary file in /copy command. Red Hat rates this moderate (CVSS 6.8). Weakness: CWE-59.
Medium [CVE-2026-11979] Arbitrary code execution in xmlcatalog utility via buffer overflow
Arbitrary code execution in xmlcatalog utility via buffer overflow. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-120. Red Hat lists fixing advisory RHSA-2026:33840 with package libxml2-main-2.15.3-0.1.1.hum1.
Medium [CVE-2026-54370] TOCTOU Symlink Traversal via getfacl/setfacl
TOCTOU Symlink Traversal via getfacl/setfacl. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-367. Red Hat lists fixing advisory RHSA-2026:34351 with package acl-main-2.4.0-0.1.hum1.
Medium [CVE-2026-54371] Symlink Traversal Privilege Escalation via getfattr and setfattr
Symlink Traversal Privilege Escalation via getfattr and setfattr. Red Hat rates this moderate (CVSS 6.3). Weakness: CWE-59. Red Hat lists fixing advisory RHSA-2026:34889 with package attr-main-2.6.0-9.1.hum1.
Medium [CVE-2026-41991] Arbitrary file overwrite via insecure temporary file handling in gzexe utility
Arbitrary file overwrite via insecure temporary file handling in gzexe utility. Red Hat rates this moderate (CVSS 6). Weakness: CWE-59. Red Hat lists fixing advisory RHSA-2026:33771 with package gzip-main-1.14-2.2.hum1.
Medium [CVE-2026-53325] Fix broken error propagation in agp_amd64_probe
Fix broken error propagation in agp_amd64_probe(). Red Hat rates this low (CVSS 5.5). Weakness: CWE-476.
Low [CVE-2026-55276] Misleading security logs due to incorrect control flow
Misleading security logs due to incorrect control flow. Red Hat rates this low (CVSS 2.3). Weakness: CWE-778. Red Hat lists fixing advisory RHSA-2026:29203 with package tomcat11-main-11.0.23-0.1.hum1, tomcat10-main-10.1.56-1.hum1.