Zero Radar
← feed
HighVulnerabilityupdated 27 Oct 2026, 12:23 UTC

Red Hat Enterprise Linux: several security flaws in multiple packages

Several software components on Red Hat Enterprise Linux have security holes. Attackers could bypass protections, crash services, or in some cases run their own code.

Official source
SeverityHighVulnerability
Being exploited?UnclearNo reports either way yet
Fix available?UnclearNo fixed version published in the sources yet
How sure is this?Official sourceBacked by an official source

What happened

BSI reports multiple vulnerabilities in Red Hat Enterprise Linux affecting packages including lxml, corosync, libevent, libsoup, Gatekeeper, perl-Archive-Tar, httplib2 and perl-IO-Compress. Impact ranges from security bypass and denial of service to code execution.

Why it is dangerous: Remote, unauthenticated attackers could bypass security measures or cause denial of service, and some flaws allow arbitrary code execution or data manipulation; any server running the affected packages is at risk.

Are you affected?

You are affected if you run Red Hat Enterprise Linux with any of the listed vulnerable packages installed (lxml, corosync, libevent, libsoup, Gatekeeper, perl-Archive-Tar, httplib2, perl-IO-Compress).

Red Hat Enterprise Linux with packages: lxml, corosync, libevent, libsoup, Gatekeeper, perl-Archive-Tar, httplib2, perl-IO-Compress (exact versions unknown)

What to do

  1. Check which listed packages are installed on your Red Hat Enterprise Linux systems
  2. Apply the security updates published by Red Hat for these packages
  3. Restart affected services after updating, or reboot if the kernel or core libraries changed

Timeline

  1. 27 Oct 2026, 11:31 UTC
    Publicly disclosed
  2. 27 Oct 2026, 11:31 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
  3. 27 Oct 2026, 11:32 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
  4. 27 Oct 2026, 11:32 UTC
    Picked up by Zero Radar
  5. 27 Oct 2026, 12:16 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
  6. 27 Oct 2026, 12:17 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
  7. 27 Oct 2026, 12:18 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)

Sources 5 reports, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
ZR-4d3c5293
Disclosed
27 Oct 2026, 11:31 UTC
On Zero Radar
27 Oct 2026, 11:32 UTC (1 min after disclosure)
Last change
27 Oct 2026, 12:23 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Red Hat Enterprise Linux: several security flaws in multiple packages · Zero Radar