Priority HIGH 69
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.
RHSA-2026:7239
OpenShift Container Platform 4.13.65 bug fix and security update
Released 2026-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202604080111-0
Fixes 9 records
TI-2026-03561 CVE-2026-4111 · GHSA-xrqh-48jh-pjv2
Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive
Priority MEDIUM 40
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path.
TI-2026-22691 CVE-2026-28417
Vim has OS Command Injection in netrw
Priority LOW 39
Vim is an open source, command line text editor.
TI-2024-18991 CVE-2024-28757 · GHSA-ch5v-h69f-mxc8
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use…
Priority LOW 37
libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate).
Priority LOW 36
Vim is an open source, command line text editor.
Priority LOW 35
Vim is an open source, command line text editor.
TI-2025-42862 CVE-2025-69419 · GHSA-x77r-97gw-wh89
Out of bounds write in PKCS12_get_friendlyname() UTF-8 conversion
Priority LOW 35
Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trigger a one byte write before the alloca…
TI-2025-38095 CVE-2025-61662 · GHSA-g7mr-vm94-3rv7
Grub2: missing unregister call for gettext command may lead to use-after-free
Priority LOW 33
A Use-After-Free vulnerability has been discovered in GRUB's gettext module.
TI-2026-20817 CVE-2026-25749
Heap Overflow in Vim
Priority LOW 29
Vim is an open source, command line text editor.