123319 matches found
Moderate: Red Hat Bug Fix Advisory: coreutils bug fix and enhancement update
An update for coreutils is now available for Red Hat Enterprise Linux 8. The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Bug Fixes and Enhancements: Fix execution of the downstream tests in...
json: Ruby JSON: Denial of service via heap buffer overflow with oversized streamed objects
A flaw was found in Ruby JSON. A remote attacker could exploit a heap buffer overflow vulnerability by providing an oversized streamed object containing a specially crafted string. This could lead to a reliable process crash, resulting in a denial of service DoS for the affected system...
Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby4.0: ruby4.0-4.0.6-37.1.hum1 aarch64, x8664 ruby4.0-bundled-gems-4.0.6-37.1.hum1 aarch64, x8664 ruby4.0-default-gems-4.0.6-37.1.hum1 noarch ruby4.0-devel-4.0.6-37.1.hum1 aarch64, x8664...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.13-3.7.hum1 aarch64, x8664 python3.12-debug-3.12.13-3.7.hum1 aarch64, x8664 python3.12-devel-3.12.13-3.7.hum1 aarch64, x8664 python3.12-idle-3.12.13-3.7.hum1 aarch64,...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.14-1.6.hum1 aarch64, x8664 python3.13-debug-3.13.14-1.6.hum1 aarch64, x8664 python3.13-devel-3.13.14-1.6.hum1 aarch64, x8664 python3.13-freethreading-3.13.14-1.6.hum1...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.11: python3.11-3.11.15-5.4.hum1 aarch64, x8664 python3.11-debug-3.11.15-5.4.hum1 aarch64, x8664 python3.11-devel-3.11.15-5.4.hum1 aarch64, x8664 python3.11-idle-3.11.15-5.4.hum1 aarch64,...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.10: python3.10-3.10.20-3.1.hum1 aarch64, x8664 python3.10-debug-3.10.20-3.1.hum1 aarch64, x8664 python3.10-devel-3.10.20-3.1.hum1 aarch64, x8664 python3.10-idle-3.10.20-3.1.hum1 aarch64,...
kernel: nvmet-tcp: fix race between ICReq handling and queue teardown
A flaw was found in the Linux kernel's NVMe over TCP nvmet-tcp implementation. A race condition exists between the handling of an Initialization Connection Request ICReq and the teardown of a queue. A remote attacker, by sending an ICReq and immediately closing the connection, could trigger a...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...
kernel: KVM: x86: Check for invalid/obsolete root *after* making MMU pages available
A flaw was found in KVM in the Linux kernel. This vulnerability occurs due to improper validation of memory management unit MMU page roots after these pages are made available. An attacker could exploit this by triggering a scenario where KVM attempts to map memory into an invalid root, causing...
kernel: KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...
kernel: net: sched: act_csum: validate nested VLAN headers
A flaw was found in the Linux kernel's network scheduler component. A remote attacker could send specially crafted network packets containing nested Virtual Local Area Network VLAN headers. This could cause the kernel to read beyond allocated memory, leading to a system crash and a denial of...
kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation
A flaw was found in the Linux kernel's AMD display component. This vulnerability arises from incorrect validation of display mode changes during Display Stream Compression DSC processing. A local attacker could exploit this by initiating specific display configuration changes, which may lead to a...
kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.14: python-unversioned-command-3.14.6-2.1.hum1 noarch python3-3.14.6-2.1.hum1 aarch64, x8664 python3-debug-3.14.6-2.1.hum1 aarch64, x8664 python3-devel-3.14.6-2.1.hum1 aarch64, x8664...
python: Python Tarfile: Unexpected file ownership when extracting hardlinks
A flaw was found in the Python Tarfile.extract function. This vulnerability occurs when processing untrusted tar files containing hardlinks, as the filter parameter is not correctly enforced. An attacker could exploit this to write files with unintended user or group ownership, potentially leadin...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: trivy: trivy-0.72.0-0.1.3.hum1 aarch64, x8664 trivy-0.72.0-0.1.3.hum1.src src Security Fixes: trivy: CVE-2026-49834...
github.com/sigstore/sigstore-go: sigstore-go: Security Policy Bypass via Compromised Log
A flaw was found in sigstore-go, a Go library for Sigstore signing and verification. This vulnerability allows a single compromised transparency log or Certificate Transparency CT log to bypass the multi-log threshold requirements. An attacker could exploit this by compromising a single log,...
github.com/sigstore/sigstore-go: sigstore-go: Signature bypass allows acceptance of bundles signed with expired keys
A flaw was found in sigstore-go, a software library used for verifying digital signatures. This vulnerability specifically affects the workflow for self-managed long-lived signing keys that do not use certificates. An attacker who possesses an expired signing key can exploit this by creating and...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.50 bug fix and security update
Red Hat OpenShift Container Platform release 4.18.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.14: spire1.14-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-agent-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-oidc-discovery-provider-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-server-1.14.7-0.3.hum...
github.com/sigstore/sigstore-go: sigstore-go: Security Policy Bypass via Compromised Log
A flaw was found in sigstore-go, a Go library for Sigstore signing and verification. This vulnerability allows a single compromised transparency log or Certificate Transparency CT log to bypass the multi-log threshold requirements. An attacker could exploit this by compromising a single log,...
github.com/sigstore/sigstore-go: sigstore-go: Signature bypass allows acceptance of bundles signed with expired keys
A flaw was found in sigstore-go, a software library used for verifying digital signatures. This vulnerability specifically affects the workflow for self-managed long-lived signing keys that do not use certificates. An attacker who possesses an expired signing key can exploit this by creating and...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.40 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.18.50 bug fix and security update
Red Hat OpenShift Container Platform release 4.18.50 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.18. Red Hat Product Security has rated this update as having a...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.40 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
libssh: libssh: stack buffer overflow in SFTP server longname construction
A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed with unsafe concatenation into a fixed-size stack buffer. When a client causes the server to list attacker-controlled filenames, sufficiently long names can overflow that stack buffer and may lead ...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libssh: libssh-0.12.2-1.hum1 aarch64, x8664 libssh-config-0.12.2-1.hum1 noarch libssh-devel-0.12.2-1.hum1 aarch64, x8664 libssh-0.12.2-1.hum1.src src...
kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle
A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.10 security update
Red Hat Advanced Cluster Management for Kubernetes v2.13 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...
Critical: Red Hat Security Advisory: multicluster engine for Kubernetes v2.8.9 security update
Red Hat multicluster engine for Kubernetes v2.8 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score...
hono: Hono - Timing Attack in basicAuth and bearerAuth Middleware
A flaw was found in Hono. This vulnerability, a timing attack, exists in the basicAuth and bearerAuth middlewares due to a non-constant-time string comparison. A remote attacker could exploit the early termination of string equality checks to infer valid credentials by precisely measuring respons...
Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.6-0.2.hum1 aarch64, x8664 grafana12.4-12.4.6-0.2.hum1.src src...
nanoid: nanoid: Denial of Service via infinite loop in random ID generation
A flaw was found in nanoid Nano ID, a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service DoS...
axios: axios: Denial of Service via object serialization bypass
A flaw was found in axios. A remote attacker could exploit an incomplete depth-limit bypass when the component serializes objects with specific top-level keys. By manipulating object keys and nested values during form or parameter serialization, an attacker can trigger a processing error. This ca...
axios: axios: Denial of Service via uncontrolled recursion in form data processing
A flaw was found in axios, a popular JavaScript library. An attacker can exploit this vulnerability by providing malicious form data containing deeply nested field names. This input triggers uncontrolled recursion within the formDataToJSON function, which is responsible for processing form data...
axios: axios: Information disclosure via Prototype Pollution in Node HTTP adapter
A flaw was found in axios when used in a Node.js deployment with the HTTP adapter. This vulnerability, known as Prototype Pollution, occurs because request interceptors can revert hardened request configurations, allowing an attacker to manipulate the Object.prototype.proxy property. If...
Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.1-0.2.hum1 aarch64, x8664 grafana13.1-13.1.1-0.2.hum1.src src...
hono: Hono - Timing Attack in basicAuth and bearerAuth Middleware
A flaw was found in Hono. This vulnerability, a timing attack, exists in the basicAuth and bearerAuth middlewares due to a non-constant-time string comparison. A remote attacker could exploit the early termination of string equality checks to infer valid credentials by precisely measuring respons...
nanoid: nanoid: Denial of Service via infinite loop in random ID generation
A flaw was found in nanoid Nano ID, a small, secure, and URL-friendly unique string ID generator. An attacker could exploit this vulnerability by providing a zero-size input to the customAlphabet or customRandom functions. This would cause an infinite loop, leading to a denial of service DoS...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: jaeger: jaeger-2.20.0-0.6.hum1 aarch64, x8664 jaeger-2.20.0-0.6.hum1.src src...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.4 security update
Red Hat Advanced Cluster Management for Kubernetes v2.15 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...
libXfont2: computeProps Property Buffer Heap Buffer Overflow
A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8 could be used by attackers using authenticated X clients to execute code within the X server...
libXfont2: PCF Font Parsing Heap Buffer Overflow
A flaw was found in libXfont2. A specially crafted PCF Portable Compiled Format font file, when processed by libXfont2, can lead to a buffer overflow. This occurs because the font parsing process does not properly validate the size of a bitmap buffer against the glyph metrics provided in the...
libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow
A flaw was found in libXfont2. In the BitmapScaleBitmaps function, an integer overflow can occur when calculating the memory needed for font glyphs. This overflow leads to a heap buffer overflow, where a smaller-than-required memory buffer is allocated. A local attacker can exploit this by loadin...