145300 matches found
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.15: spire1.15-1.15.5-0.3.hum1 aarch64, s390x, x8664 spire1.15-agent-1.15.5-0.3.hum1 aarch64, s390x, x8664 spire1.15-oidc-discovery-provider-1.15.5-0.3.hum1 aarch64, s390x, x8664...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.14: spire1.14-1.14.9-0.3.hum1 aarch64, s390x, x8664 spire1.14-agent-1.14.9-0.3.hum1 aarch64, s390x, x8664 spire1.14-oidc-discovery-provider-1.14.9-0.3.hum1 aarch64, s390x, x8664...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo3.0: tempo3.0-3.0.4-0.3.hum1 aarch64, x8664 tempo3.0-3.0.4-0.3.hum1.src src Security Fixes: tempo3.0: CVE-2026-116591...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.21.0-0.3.hum1 aarch64, x8664 jaeger-2.21.0-0.3.hum1.src src Security Fixes: jaeger: CVE-2026-116591...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: k6v2: k6v2-2.3.0-0.4.hum1 aarch64, x8664 k6v2-2.3.0-0.4.hum1.src src Security Fixes: k6v2: CVE-2026-116591...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: k6v1: k6v1-1.8.2-0.3.hum1 aarch64, x8664 k6v1-1.8.2-0.3.hum1.src src Security Fixes: k6v1: CVE-2026-116591...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: opentelemetry-collector-contrib: opentelemetry-collector-contrib-0.164.0-0.1.hum1 aarch64, s390x, x8664 opentelemetry-collector-contrib-0.164.0-0.1.hum1.src src...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: cosign: cosign-3.1.4-0.2.hum1 aarch64, s390x, x8664 cosign-3.1.4-0.2.hum1.src src Security Fixes: cosign: CVE-2026-116591...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: podman: podman-5:6.1.4-1.2.hum1 aarch64, s390x, x8664 podman-docker-5:6.1.4-1.2.hum1 noarch podman-machine-5:6.1.4-1.2.hum1 aarch64, x8664 podman-remote-5:6.1.4-1.2.hum1 aarch64, s390x, x8664...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: distribution: distribution-3.1.2-0.4.hum1 aarch64, s390x, x8664 distribution-3.1.2-0.4.hum1.src src Security Fixes: distribution: CVE-2026-116591...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: syft: syft-1.55.0-0.3.hum1 aarch64, s390x, x8664 syft-1.55.0-0.3.hum1.src src Security Fixes: syft: CVE-2026-116591...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: skopeo: skopeo-1:1.24.1-1.3.hum1 aarch64, s390x, x8664 skopeo-tests-1:1.24.1-1.3.hum1 aarch64, s390x, x8664 skopeo-1:1.24.1-1.3.hum1.src src Security Fixes: skopeo: CVE-2026-116591...
github.com/klauspost/compress/zstd: klauspost/compress: Denial of Service via crafted zstd compressed input
A flaw was found in the klauspost compress library. A remote attacker can exploit this vulnerability by submitting a specially crafted Zstandard zstd compressed stream to an application using the library, resulting in a Denial of Service DoS. Due to an integer handling error in the decompression...
crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates
A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority CA. A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitima...
Important: Red Hat Security Advisory: Red Hat Service Interconnect 2.2.4 Release (rpms)
RPMs for the Red Hat Service Interconnect 2.2.4 release. Red Hat Service Interconnect 2.2 creates a service network, linking TCP and HTTP services across the hybrid cloud. A service network enables communication between services running in different network locations or sites. It allows...
Critical: Red Hat Security Advisory: OpenShift Container Platform 4.22.20 bug fix and security update
Red Hat OpenShift Container Platform release 4.22.20 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a...
libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser
A flaw was found in libXtst. An out-of-bounds read vulnerability in the RECORD extension reply parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. Under certain conditions, this flaw may also result in limited information disclosure...
Important: Red Hat Security Advisory: libXtst security update
An update for libXtst is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.4.SP1)
An update for Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available RHBQ 3.33.4.SP1. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...
Moderate: Red Hat Security Advisory: libXi security update
An update for libXi is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser
A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...
Important: Red Hat Security Advisory: libXrender security update
An update for libXrender is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
libXrender: libXrender: Code injection via heap overflow in RenderQueryPictFormats
A flaw was found in libXrender. Malicious X servers can exploit a heap overflow vulnerability in the RenderQueryPictFormats function. This allows them to inject arbitrary code into connected X clients, potentially leading to unauthorized control over the client's system...
net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing
A flaw was found in the mime/multipart and net/textproto packages in Go. A remote attacker could exploit this vulnerability by submitting a crafted multipart form request that bypasses configured memory limits when the remaining boundary limit is small. This issue allows the application to read a...
net/http: net/http/internal/http2: golang.org/x/net/http2: net/http: Denial of Service via excessive HTTP/2 SETTINGS frames
A flaw was found in the Go net/http package. This flaw allows a remote attacker to cause a Denial of Service DoS by triggering excessive CPU consumption on an affected client or server. By opening a large number of HTTP/2 streams and repeatedly sending small configuration SETTINGS frames that...
Important: Red Hat Security Advisory: yggdrasil security update
An update for yggdrasil is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates
A flaw was found in Go's crypto/x509 package. The certificate verification process fails to block trust in intermediate certificates associated with a compromised Certificate Authority CA. A remote attacker presenting a certificate signed by these intermediate authorities can impersonate legitima...
github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unbounded recursion during schema validation
A flaw was found in kin-openapi. The runtime schema validation lacks cycle detection when processing circular schema references. A remote attacker can exploit this vulnerability by submitting a request or response that triggers recursive validation, leading to unbounded recursion and stack...
fast-uri: fast-uri: Path traversal via improper relative URI normalization
A flaw was found in fast-uri. The library improperly applies dot-segment removal to relative Uniform Resource Identifier URI paths during normalization, causing leading parent-directory segments to be discarded. A remote attacker could supply a crafted relative path to an application that relies ...
fast-uri: fast-uri: Cross-Site Scripting via improper URI scheme decoding
A flaw was found in fast-uri. The library incorrectly decodes percent-encoded characters in protocol schemes prior to validation, causing invalid or prohibited schemes to be accepted as valid. A remote attacker can exploit this vulnerability by submitting a specially crafted Uniform Resource...
grafana: SSO secrets readable by low-privileged users when an experimental feature is enabled
A flaw was found in Grafana. When the experimental Kubernetes Single Sign-On SSO settings Application Programming Interface API feature toggle is enabled, the service fails to enforce proper authorization checks. An authenticated user with low-privilege Viewer permissions can exploit this...
grafana: OAuth and OIDC tokens written unredacted to Grafana server logs
A flaw was found in Grafana. When a user signs in using generic OAuth, Google, or GitLab single sign-on connectors, Grafana may write the user's OAuth or OpenID Connect OIDC tokens to its server logs in plaintext. This occurs if the identity provider returns an opaque token or if token parsing...
fast-uri: fast-uri: Security policy bypass via improper host canonicalization
A flaw was found in fast-uri. When processing web addresses, the host canonicalization mechanism can silently strip control characters or drop user information without verifying that the full host input was consumed. A remote attacker can exploit this parsing discrepancy by supplying a specially...
fast-uri: fast-uri: Cross-site scripting via unescaped colon in relative URI paths
A flaw was found in fast-uri. A remote attacker could exploit this vulnerability to trigger cross-site scripting XSS by providing crafted input to applications that serialize or normalize relative Uniform Resource Identifiers URIs using the suffix reference option. Because the library fails to...
body-parser: body-parser: Denial of Service via unhandled decompression stream error
A flaw was found in body-parser. A remote, unauthenticated attacker can cause a Denial of Service DoS by sending a specially crafted HTTP request with compressed content containing unexpected trailing data. Because the application fails to handle decompression stream errors after processing the...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.13-0.5.hum1 aarch64, x8664 grafana12.4-12.4.13-0.5.hum1.src src Security Fixes: grafana12.4: CVE-2026-110306 CVE-2026-110180 CVE-2026-110095 CVE-2026-110725...
github.com/getkin/kin-openapi: kin-openapi: Denial of Service via improper handling of non-finite numeric values
A flaw was found in kin-openapi. A remote, unauthenticated attacker can exploit this vulnerability by submitting a specially crafted YAML request containing non-finite numeric values, such as Not-a-Number or infinity, to an endpoint with numeric constraints. Because the validation process fails t...
github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding
A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before...
openjdk: Enhance TLS certificate handling (Oracle CPU 2026-10)
A flaw was found in the Java Secure Socket Extension JSSE component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability over a Transport Layer Security TLS connection to perform unauthorized modification, insertion, or deletion of accessible data. Exploitation occurs...