TI-2026-04471 CVE-2026-5121 · GHSA-2vwv-vqpv-v8vc
Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
Priority MEDIUM 51
A flaw was found in libarchive.
RHSA-2026:11768
Red Hat Update Infrastructure 5.2 Technology Preview security update
Released 2026-04-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-tp-rhel9, registry.redhat.io/rhui5/installer-tp-rhel9, registry.redhat.io/rhui5/rhua-tp-rhel9
Fixes 9 records
TI-2026-05344 CVE-2026-6100 · GHSA-pg25-7cx5-cvcm
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
Priority MEDIUM 42
Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used.
TI-2026-03838 CVE-2026-4424 · GHSA-c75f-55f6-f63q
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
Priority MEDIUM 41
A flaw was found in libarchive.
TI-2026-21585 CVE-2026-27135
nghttp2 Denial of service: Assertion failure due to the missing state validation
Priority MEDIUM 40
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.
TI-2026-20764 CVE-2026-25679 · GHSA-j3gx-2473-5fp8
Incorrect parsing of IPv6 host literals in net/url
Priority MEDIUM 40
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
TI-2026-22691 CVE-2026-28417
Vim has OS Command Injection in netrw
Priority LOW 39
Vim is an open source, command line text editor.
Priority LOW 36
Vim is an open source, command line text editor.
Priority LOW 35
Vim is an open source, command line text editor.
TI-2026-04175 CVE-2026-4786 · GHSA-cccx-m78h-m3xw
Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()
Priority LOW 33
Mitgation of CVE-2026-4519 was incomplete.