Red Hat Security Advisory
Red Hat FreeRDP Update Fixes Critical CVE-2026-91949 on RHEL 10
FreeRDP's server-side flaw can permit a disabled RDSTLS transport before authentication. Red Hat excludes outbound-only client use from that attack path; match the RHEL 10.2 package and verify the server's transport policy.
Red Hat Ruby Update Fixes CVE-2026-80212 on RHEL 10
Crafted or spoofed DNS responses can exhaust memory in Ruby's resolv library. Red Hat's RHEL 10.2 update requires matching the packaged runtime and checking affected applications, not assuming separately installed Rubies are fixed.
Red Hat Updates GNU Awk on RHEL 8 for Two Vulnerabilities
Red Hat's RHEL 8.10 EUS GNU Awk update addresses use-after-free and integer-overflow flaws that can disrupt processing. Match the gawk RPM to the correct repository and check dependent scripts using trusted inputs.
Red Hat Releases RHEL 10 Kernel Live Patches for Three Vulnerabilities
RHEL 10.2 livepatch modules address three RDMA and IPv6 flaws on specified kernels. Match the running kernel and architecture, verify the module is loaded and enabled, and retain native-kernel update plans; livepatch rollback requires a reboot.
Red Hat Hardened Images Updates Address 24 Vulnerabilities
Ten Red Hat Hardened Images advisories list fixed RPMs across seven component families, not deployable image digests. Match component and branch, update or rebuild the relevant image, and separately verify the resulting deployment digest.
Red Hat Updates Ghostscript on RHEL 9 for CVE-2026-39919
Ghostscript on RHEL 9.8 EUS can corrupt heap memory and potentially execute code while processing a crafted PDF containing malformed JPEG 2000 data. Update affected libgs binaries through the matching supported channel; severity does not establish exploitation.
Red Hat Updates Performance Co-Pilot on RHEL 8 for Four Vulnerabilities
Performance Co-Pilot updates for specific RHEL 8.4 and 8.6 extended branches address PMDA execution, privilege and pmproxy access risks. Match agent mode and entitled packages; pmcd rules alone do not secure the separate pmproxy path.
Red Hat JBoss Web Server 6.2.5 Addresses Thirteen Vulnerabilities
JBoss Web Server 6.2.5 fixes thirteen Tomcat-related issues across listed RHEL streams. Match full supported package builds and enabled authentication, connector and WebSocket features; upstream-looking version numbers alone do not identify Red Hat's backported fix level.
Red Hat Satellite 6.18.10 and 6.16.14 Address Critical Vulnerabilities
Red Hat Satellite updates address provisioning, authorization and execution risks across separate branches. Follow the branch-specific procedure and test token-bearing boot workflows; disabling token enforcement or checking only web login does not validate the update.
Red Hat Gatekeeper 3.20.1 Fixes Two High-Severity Vulnerabilities
Red Hat Gatekeeper 3.20.1 fixes two Go TLS denial-of-service flaws in listed Operator images, not every product-tree image. Match affected status and architecture, update through the supported path, and validate admission and audit behavior.