DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux (python-tornado, resteasy-core, bubblewrap, pgvector): Mehrere Schwachstellen
view advisory published 2026-10-19
Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Sicherheitsvorkehrungen zu umgehen, beliebigen Code auszuführen, Daten zu manipulieren und offenzulegen oder einen Denial-of-Service-Angriff auszulösen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-103484US | — | — | ||
IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution. | ||||
| CVE-2026-89059US | high7.5 | — | ||
A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. A… | ||||
| CVE-2026-89058US | high7.4 | — | ||
A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response… | ||||
| CVE-2024-14029US | high7.5 | — | ||
Tornado before 6.4.1 ignores duplicate Transfer-Encoding: chunked headers, treating requests as having no message body and parsing the chunked body as a subsequent request. Attacke… | ||||
| CVE-2026-87766US | — | — | ||
A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can follow a parent symlink onto the host via /oldroot, writing attacker-chos… | ||||
| CVE-2026-82397US | — | — | ||
Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parse_qs in… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:84843 vom 2026-10-19external
- Red Hat Security Advisory RHSA-2026:84844 vom 2026-10-19external
- Red Hat Security Advisory RHSA-2026:85135 vom 2026-10-19external
- Red Hat Security Advisory RHSA-2026:85234 vom 2026-10-19external
- Red Hat Security Advisory RHSA-2026:85306 vom 2026-10-19external
- Red Hat Security Advisory RHSA-2026:85308 vom 2026-10-19external
- Red Hat Security Advisory RHSA-2026:85309 vom 2026-10-19external
- Red Hat Security Advisory RHSA-2026:85312 vom 2026-10-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan