TI-2026-04471 CVE-2026-5121 · GHSA-2vwv-vqpv-v8vc
Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
Priority MEDIUM 51
A flaw was found in libarchive.
RHSA-2026:13812
updated RHEL-8 based Middleware Containers container images
Released 2026-05-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Middleware Containers for OpenShift rhpam-7/rhpam-businesscentral-monitoring-rhel8, rhpam-7/rhpam-businesscentral-rhel8, rhpam-7/rhpam-controller-rhel8 +4
Fixes 10 records
TI-2026-05344 CVE-2026-6100 · GHSA-pg25-7cx5-cvcm
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
Priority MEDIUM 42
Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used.
TI-2026-03838 CVE-2026-4424 · GHSA-c75f-55f6-f63q
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
Priority MEDIUM 41
A flaw was found in libarchive.
TI-2026-21585 CVE-2026-27135
nghttp2 Denial of service: Assertion failure due to the missing state validation
Priority MEDIUM 40
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.
TI-2026-04175 CVE-2026-4786 · GHSA-cccx-m78h-m3xw
Incomplete mitigation of CVE-2026-4519, %action expansion for command injection to webbrowser.open()
Priority LOW 33
Mitgation of CVE-2026-4519 was incomplete.
TI-2026-03926 CVE-2026-4519 · GHSA-rm92-fj5q-mpj5
webbrowser.open() allows leading dashes in URLs
Priority LOW 33
The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers.
TI-2025-13528 CVE-2025-14831 · GHSA-pm8w-jq9r-x5rp
Gnutls: gnutls: denial of service via excessive resource consumption during certificate verification
Priority LOW 31
A flaw was found in GnuTLS.
TI-2026-03014 CVE-2026-3497 · GHSA-wcpp-3x59-h8vp
Use of uninitialized resource in Ubuntu openssh
Priority LOW 24
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.
TI-2025-09325 CVE-2025-10158 · GHSA-3rvc-qcwh-fhqv
Rsync: Out of bounds array access via negative index
Priority LOW 20
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index.
TI-2025-09008 CVE-2025-9820 · GHSA-337w-h8w7-m899
Gnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() function
Priority LOW 18
A flaw was found in the GnuTLS library, specifically in the gnutls_pkcs11_token_init() function that handles PKCS#11 token initialization.