TI-2026-41775 CVE-2026-58014 · GHSA-h88q-m8mm-7243
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Priority HIGH 76
A flaw was found in GLib.
RHSA-2026:66357
OpenShift Container Platform 4.22.14 bug fix and security update
Released 2026-09-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202609081748-0, rhcos-ppc64le-4.22.9.8.202609081748-0, rhcos-s390x-4.22.9.8.202609081748-0 +1
Fixes 11 records
TI-2026-07301 CVE-2026-8286 · GHSA-32xh-3x3c-6g6h
wrong STARTTLS connection reuse
Priority HIGH 70
A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.
TI-2026-08389 CVE-2026-9547 · GHSA-xq9p-gxg6-f7q6
SSH improper host validation
Priority HIGH 68
When a libcurl-based application performs transfers via `SCP://` or `SFTP://` and utilizes the `CURLOPT_SSH_KEYFUNCTION` callback, it may silently accept an untrusted server.
TI-2026-40374 CVE-2026-55973 · GHSA-g479-fg97-pf5w
'dns-error-reporting: yes' leads to stack buffer overflow
Priority LOW 39
In NLnet Labs Unbound 1.23.0 up to and including 1.25.1, when 'dns-error-reporting: yes' is set, the EDNS Report-Channel option (code 18) from the last upstream response is read and uses the option's length as the length…
TI-2026-11212 CVE-2026-13204 · GHSA-89q8-qc36-7m58
Unexpected exit in certain situations with NSEC and NSEC3 both present
Priority LOW 39
If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof…
TI-2026-10125 CVE-2026-11721 · GHSA-cq66-h8mj-77hh
Cache poisoning possible with label count discrepancy, RRSIG, and wildcards
Priority LOW 39
It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained.
TI-2026-10207 CVE-2026-11824 · GHSA-8g48-4wfm-7247
SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate
Priority LOW 38
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…
TI-2026-50931 CVE-2026-72693 · GHSA-6766-cx7r-c5q6
Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login
Priority LOW 35
`openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged context.
TI-2026-13304 CVE-2026-15816 · GHSA-8pxm-cr92-crx8
Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
Priority LOW 35
A flaw was found in dracut.
TI-2026-41776 CVE-2026-58015 · GHSA-hmpf-72wc-2r6x
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
Priority LOW 34
A flaw was found in GLib.
TI-2026-31312 CVE-2026-43133 · GHSA-g9j5-v9rr-m845
KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
Priority LOW 33
In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation Commit cc3ed80ae69f ("KVM: nSVM: always use vmcb01 to for vmsave/vmload of guest state") made KV…