TI-2026-04471 CVE-2026-5121 · GHSA-2vwv-vqpv-v8vc
Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
Priority MEDIUM 51
A flaw was found in libarchive.
RHSA-2026:20040
OpenShift Container Platform 4.19.32 bug fix and security update
Released 2026-05-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202605201155-0, rhcos-ppc64le-4.19.9.6.202605201155-0, rhcos-s390x-4.19.9.6.202605201155-0 +1
Fixes 6 records
TI-2026-03838 CVE-2026-4424 · GHSA-c75f-55f6-f63q
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
Priority MEDIUM 41
A flaw was found in libarchive.
TI-2026-21585 CVE-2026-27135
nghttp2 Denial of service: Assertion failure due to the missing state validation
Priority MEDIUM 40
nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C.
TI-2026-27521 CVE-2026-35385 · GHSA-jgqr-738j-43cg
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an…
Priority LOW 38
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (pres…
TI-2026-27645 CVE-2026-35535 · GHSA-g5fc-f834-rcr2
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups…
Priority LOW 35
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
TI-2026-03014 CVE-2026-3497 · GHSA-wcpp-3x59-h8vp
Use of uninitialized resource in Ubuntu openssh
Priority LOW 24
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.