Red Hat Enterprise Linux Update Services 9.2

The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Processing maliciously crafted web content may lead to memory corruption.

crypto: algif_aead - Revert to operating out-of-place

Glibc: buffer overflow in ld.so leading to privilege escalation

Buildah: buildah allows arbitrary directory mount

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

Rsync: info leak via uninitialized stack contents

Yelp: arbitrary file read

Xorg: xmayland: value overflow in xkbsetcompatmap()

Xorg: xwayland: use-after-free in xkb client resource removal

Sssd: race condition during authorization leads to gpo policies functioning inconsistently

Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content

Ipa: invalid csrf protection