Priority HIGH 72
jq is a command-line JSON processor.
RHSA-2026:25181
OpenShift Container Platform 4.18.44 bug fix and security update
Released 2026-06-17 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202606051320-0, rhcos-ppc64le-418.94.202606051320-0, rhcos-s390x-418.94.202606051320-0 +1
Fixes 6 records
TI-2026-28834 CVE-2026-39979
jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers
Priority HIGH 70
jq is a command-line JSON processor.
TI-2026-31217 CVE-2026-43037 · GHSA-p2wf-qj6m-x5fg
ip6_tunnel: clear skb2->cb[] in ip4ip6_err()
Priority MEDIUM 50
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar Kjos reported the following problem.
TI-2026-27521 CVE-2026-35385 · GHSA-jgqr-738j-43cg
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an…
Priority LOW 38
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (pres…
TI-2026-29674 CVE-2026-41035 · GHSA-m34r-4v3r-pp9v
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a…
Priority LOW 34
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free.
TI-2026-04252 CVE-2026-4878
Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()
Priority LOW 32
A flaw was found in libcap.