TI-2026-41775 CVE-2026-58014 · GHSA-h88q-m8mm-7243
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Priority HIGH 76
A flaw was found in GLib.
RHSA-2026:73959
Red Hat AI Base Images 3.0.3 (tpu)
Released 2026-09-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-tpu-rhel9
Fixes 39 records
TI-2026-41772 CVE-2026-58011 · GHSA-8xmh-8wfg-9f6j
Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
Priority HIGH 72
A flaw was found in GLib.
TI-2026-12003 CVE-2026-14164 · GHSA-xq96-f7x8-gfx3
Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
Priority HIGH 72
A double free issue has been identified in libarchive's RAR5 reader.
TI-2026-13488 CVE-2026-16118 · GHSA-cp7g-r78m-cc2g
Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c
Priority MEDIUM 64
A flaw was found in xdgmime.
TI-2026-13117 CVE-2026-15588 · GHSA-hrq7-vgh7-p534
Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
Priority MEDIUM 57
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib.
TI-2026-41777 CVE-2026-58016 · GHSA-8rpw-4xx7-27w7
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
Priority MEDIUM 46
A flaw was found in GLib.
TI-2026-12884 CVE-2026-15308 · GHSA-7qj2-q5c8-cxx5
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
Priority MEDIUM 45
The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.
TI-2026-42784 CVE-2026-60002 · GHSA-gp5v-jg37-fvg6
Use after free in OpenBSD OpenSSH
Priority MEDIUM 42
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.
TI-2026-41773 CVE-2026-58012 · GHSA-vwg8-37h9-g38g
Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
Priority MEDIUM 42
A flaw was found in GLib.
TI-2026-41771 CVE-2026-58010 · GHSA-m7rp-473c-296x
Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
Priority MEDIUM 42
A flaw was found in GLib.
TI-2026-10297 CVE-2026-11940 · GHSA-9mc4-rqmq-h467
tarfile extraction filter bypass allows escaping the destination directory
Priority MEDIUM 41
tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.
TI-2026-32373 CVE-2026-44432 · GHSA-mf9v-mfxr-j63j
urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API
Priority MEDIUM 40
urllib3 is an HTTP client library for Python.
TI-2026-05677 CVE-2026-6477 · GHSA-jm5f-gpfq-q9h3
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
Priority MEDIUM 40
Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the server superuser to overwrite a client stack buffer with…
Priority LOW 39
Vim is an open source, command line text editor.
Priority LOW 38
Vim is an open source, command line text editor.
Priority LOW 38
Vim is an open source, command line text editor.
TI-2026-10207 CVE-2026-11824 · GHSA-8g48-4wfm-7247
SQLite before 3.53.2 Heap Buffer Overflow via FTS5 fts5ChunkIterate
Priority LOW 38
SQLite before 3.53.2 contains a heap-based buffer overflow vulnerability in the FTS5 full-text search extension that allows attackers to cause a crash or execute arbitrary code by supplying a crafted database with malici…
Priority LOW 37
Vim is an open source, command line text editor.
TI-2026-51283 CVE-2026-73076
Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`
Priority LOW 37
Vim is an open source, command line text editor.
Priority LOW 37
Vim is an open source, command line text editor.
TI-2026-41774 CVE-2026-58013 · GHSA-4x46-h598-64qr
Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
Priority LOW 37
A flaw was found in GLib.
Priority LOW 37
Vim is an open source, command line text editor.
TI-2026-39261 CVE-2026-54369 · GHSA-53ch-pxc8-6g72
acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions
Priority LOW 37
acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions acl_get_file(), acl_set_file(), acl_extended_file(), and acl_delete_def_file() that allows local attackers to esc…
TI-2026-32372 CVE-2026-44431 · GHSA-qccp-gfcp-xxvc
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
Priority LOW 36
urllib3 is an HTTP client library for Python.
TI-2023-28738 CVE-2023-52355 · GHSA-fh6j-mgh8-7prh
Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom
Priority LOW 36
An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64() API.
TI-2026-36128 CVE-2026-48864 · GHSA-2927-mfhv-37vh
Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data
Priority LOW 35
A flaw was found in libsolv.
TI-2026-41776 CVE-2026-58015 · GHSA-hmpf-72wc-2r6x
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
Priority LOW 34
A flaw was found in GLib.
TI-2026-34752 CVE-2026-47162
Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
Priority LOW 34
Vim is an open source, command line text editor.
TI-2026-11000 CVE-2026-12912 · GHSA-cg4c-j43f-qcg7
Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image
Priority LOW 34
A flaw was found in libtiff.
Priority LOW 33
Vim is an open source, command line text editor.
TI-2026-10205 CVE-2026-11822 · GHSA-6qj8-gw6p-hc5p
SQLite before 3.53.2 Out-of-Bounds Read in FTS5 fts5LeafSeek
Priority LOW 31
SQLite before 3.53.2 contains an out-of-bounds read vulnerability in the FTS5 full-text search extension that allows attackers to crash the process by supplying a crafted database with a malformed FTS5 leaf page.
TI-2026-39287 CVE-2026-54411 · GHSA-56gg-22rq-q53x
Linux-PAM pam_userdb Observable Timing Discrepancy in Plaintext Password Comparison
Priority LOW 30
Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacke…
TI-2026-51273 CVE-2026-73066
Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata
Priority LOW 29
Tesseract is an open source OCR engine.
TI-2026-30383 CVE-2026-41989 · GHSA-wrv8-79m2-qg24
Out-of-bounds write in GnuPG Libgcrypt
Priority LOW 29
Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.
Priority LOW 26
Vim is an open source, command line text editor.
TI-2026-34757 CVE-2026-47167
Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
Priority LOW 24
Vim is an open source, command line text editor.
Priority LOW 24
systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data.
TI-2026-41387 CVE-2026-57455
Vim: Stack out-of-bounds write in `spell_soundfold_sofo()` via an over-length `soundfold()` argument
Priority LOW 20
Vim is an open source, command line text editor.
TI-2025-05580 CVE-2025-6170 · GHSA-6qrf-r65h-2r77
Libxml2: stack buffer overflow in xmllint interactive shell command handling
Priority LOW 13
A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.