Zero Radar
← feed
HighVulnerabilityupdated 26 Oct 2026, 11:54 UTC

Red Hat Enterprise Linux: several high-severity flaws in multiple packages

Several software components on Red Hat Enterprise Linux have security holes. Attackers could possibly crash services, read private data, or gain more control of the system.

Official source
SeverityHighVulnerability
Being exploited?UnclearNo reports either way yet
Fix available?UnclearNo fixed version published in the sources yet
How sure is this?Official sourceBacked by an official source

What happened

Multiple vulnerabilities affect Red Hat Enterprise Linux packages including goose, environment-modules, tornado, DBI, perl-GD, resteasy-core, bubblewrap, pgvector, pypdf, urllib3, URI, rpcbind and FreeIPA, plus Red Hat Quay. Impact includes security bypass, information disclosure, code execution, data manipulation and denial of service.

Why it is dangerous: Successful exploitation could let attackers run code, access confidential information, disrupt services or, in the FreeIPA case, gain administrator rights. Organizations running affected Red Hat systems are at risk.

Are you affected?

You are affected if you run Red Hat Enterprise Linux or Red Hat Quay with any of the listed packages installed.

Red Hat Enterprise Linux: goose, environment-modules, tornado, DBI, perl-GD, python-tornado, resteasy-core, bubblewrap, pgvector, pypdf, urllib3, URI, rpcbind, FreeIPA; Red Hat Quay (pypdf, urllib3, URI).

What to do

  1. Check which listed packages are installed on your Red Hat systems
  2. Apply the updates published by Red Hat for each affected package
  3. Prioritize FreeIPA and tornado/bubblewrap systems, which carry the highest impact
  4. Restart affected services after patching

Timeline

  1. 26 Oct 2026, 07:55 UTC
    Publicly disclosed
  2. 26 Oct 2026, 07:55 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
  3. 26 Oct 2026, 08:02 UTC
    Picked up by Zero Radar
  4. 26 Oct 2026, 11:44 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
  5. 26 Oct 2026, 11:45 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
  6. 26 Oct 2026, 11:45 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
  7. 26 Oct 2026, 11:45 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)
  8. 26 Oct 2026, 11:46 UTC
    Reported by CERT-Bund (BSI) · CERT-Bund (BSI)

Sources 6 reports, oldest first

Official vendor, government CERT or advisory database

Technical details

ID
ZR-f7baadf1
Disclosed
26 Oct 2026, 07:55 UTC
On Zero Radar
26 Oct 2026, 08:02 UTC (7 min after disclosure)
Last change
26 Oct 2026, 11:54 UTC

The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works

Red Hat Enterprise Linux: several high-severity flaws in multiple packages · Zero Radar