TI-2025-06334 CVE-2025-6965 · GHSA-2m69-gcr7-jv3q
Integer Truncation on SQLite
Priority HIGH 72
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available.
RHSA-2025:19046
OpenShift Container Platform 4.18.27 bug fix and security update
Released 2025-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202510230424-0, rhcos-ppc64le-418.94.202510230424-0, rhcos-s390x-418.94.202510230424-0 +1
Fixes 6 records
TI-2025-05340 CVE-2025-5914 · GHSA-7376-x4rm-3v8x
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
Priority HIGH 67
A vulnerability has been identified in the libarchive library, specifically within the archive_read_format_rar_seek_data() function.
TI-2025-31732 CVE-2025-49796 · GHSA-83xx-9f6p-vwfj
Libxml: type confusion leads to denial of service (dos)
Priority MEDIUM 48
A vulnerability was found in libxml2.
TI-2025-31730 CVE-2025-49794 · GHSA-qg4c-8pj4-qgw2
Libxml: heap use after free (uaf) leads to denial of service (dos)
Priority MEDIUM 47
A use-after-free vulnerability was found in libxml2.
TI-2025-05415 CVE-2025-5994 · GHSA-xrv5-2wwg-jp3r
Cache poisoning via the ECS-enabled Rebirthday Attack
Priority MEDIUM 43
A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS).
TI-2025-08759 CVE-2025-9566 · GHSA-wp3j-xq48-xpjw
Podman: podman kube play command may overwrite host files
Priority LOW 38
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a h…