123054 matches found
OpenJDK: Enhance HTTP Connections (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Enhance TLS server (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Improve font loading (2026-08 Security Update)
No description is available for this CVE...
Moderate: Red Hat Security Advisory: OpenJDK 25.0.4.1 Security Update for Portable Linux Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
OpenJDK: Improve Resource Resolving (2026-08 Security Update)
No description is available for this CVE...
Moderate: Red Hat Security Advisory: OpenJDK 21.0.12.1 Security Update for Windows Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
OpenJDK: Enhance TLS server (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Improve Resource Resolving (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Enhance HTTP Connections (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Improve Resource Resolving (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Enhance TLS server (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Enhance HTTP Connections (2026-08 Security Update)
No description is available for this CVE...
Moderate: Red Hat Security Advisory: OpenJDK 17.0.20.1 Security Update for Windows Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
OpenJDK: Enhance HTTP Connections (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Enhance TLS server (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Improve Resource Resolving (2026-08 Security Update)
No description is available for this CVE...
Moderate: Red Hat Security Advisory: OpenJDK 8u504 Security Update for Portable Linux Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
OpenJDK: Improve Resource Resolving (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Enhance TLS server (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Enhance HTTP Connections (2026-08 Security Update)
No description is available for this CVE...
Moderate: Red Hat Security Advisory: java-1.8.0-openjdk security update
An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
OpenJDK: Improve Resource Resolving (2026-08 Security Update)
No description is available for this CVE...
Moderate: Red Hat Security Advisory: java-21-openjdk security update
An update for java-21-openjdk is now available for Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10.0 Extended Update Support, and Red Hat Enterprise Linu...
OpenJDK: Enhance TLS server (2026-08 Security Update)
No description is available for this CVE...
OpenJDK: Enhance HTTP Connections (2026-08 Security Update)
No description is available for this CVE...
glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
A flaw was found in GLib. A buffer over-read can occur in giochannelreadlinebackend in the giochannel.c file when a custom line terminator with a length greater than one is set, causing memcmp to read past the GString buffer. This vulnerability can cause a minor information disclosure of 7 bytes ...
Moderate: Red Hat Security Advisory: glib2 security update
An update for glib2 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering
A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input...
glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundar...
glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
A flaw was found in GLib. The D-Bus client-side implementation of the DBUSCOOKIESHA1 SASL authentication mechanism does not validate the cookiecontext parameter received from the server. A malicious D-Bus server can supply a cookiecontext containing path traversal sequences, causing the client to...
glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime
A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c file when an invalid GDateTime object produced by the gdatetimeaddfull function is processed. This flaw can corrupt the date output and potentially cause logic errors...
glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
A flaw was found in GLib. An off-by-one error can occur in the gvstupleisnormal function in the glib/gvariant-serialiser.c file when doing an alignment padding check because the bounds check uses instead of =, causing an out-of-bounds read of only 1 byte. This issue can cause a minor information...
glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
A flaw was found in GLib. A buffer over-read can occur in the gregexreplace function when used with the GREGEXRAW compile flag and case-change replacement escapes because the stringappend function processes matched substrings using UTF-8 functions that assume valid UTF-8 input, even when the stri...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.43 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.43 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.53 bug fix and security update
Red Hat OpenShift Container Platform release 4.18.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-8962: RHODF 4.20.17 release DFBUGS-8003: GSS Rook Ceph metrics are not being scraped, and the...
Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.10: python3.10-3.10.21-1.hum1 aarch64, x8664 python3.10-debug-3.10.21-1.hum1 aarch64, x8664 python3.10-devel-3.10.21-1.hum1 aarch64, x8664 python3.10-idle-3.10.21-1.hum1 aarch64, x8664...
python: Python: Denial of Service via super-linear regular expression work in csv.Sniffer.sniff()
A flaw was found in the csv.Sniffer.sniff function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentiall...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.43 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.43 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: gegl04 security update
An update for gegl04 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing
A flaw was found in GIMP. This vulnerability, a heap-based buffer overflow, occurs during the parsing of HDR High Dynamic Range files due to insufficient validation of user-supplied data length. A remote attacker could exploit this by convincing a user to open a specially crafted malicious file,...
Important: Red Hat Security Advisory: gegl04 security update
An update for gegl04 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing
A flaw was found in GIMP. This vulnerability, a heap-based buffer overflow, occurs during the parsing of HDR High Dynamic Range files due to insufficient validation of user-supplied data length. A remote attacker could exploit this by convincing a user to open a specially crafted malicious file,...
libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PNG
A flaw was found in libcupsfilters and cups-filters. The PNG image reading function creates a libpng reader without installing an error recovery handler, causing the CUPS image filter process to abort when processing a malformed PNG file. An unauthenticated attacker could exploit this by submitti...
libcupsfilters: cups-filters: libcupsfilters: CPU exhaustion via infinite loop in cfIEEE1284NormalizeMakeModel()
A flaw was found in libcupsfilters. The cfIEEE1284NormalizeMakeModel function enters an infinite loop when processing a printer-advertised IEEE-1284 device ID with an empty model field, causing sustained CPU consumption. A network-adjacent attacker could exploit this by broadcasting a specially...
Moderate: Red Hat Security Advisory: libcupsfilters security update
An update for libcupsfilters is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
popt-devel: popt-static: Off-by-one in poptStuffArgs
A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...
Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: popt: popt-1.19-11.1.hum1 aarch64, x8664 popt-devel-1.19-11.1.hum1 aarch64, x8664 popt-static-1.19-11.1.hum1 aarch64, x8664 popt-1.19-11.1.hum1.src src Security Fixes: popt: CVE-2026-18739...
google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 :path pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed :path that omits the mandato...
Important: Red Hat Security Advisory: osbuild-composer security update
An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...