TI-2026-45185 CVE-2026-63385
Libevent: HTTP header handling bugs create risk of access control bypass.
Priority MEDIUM 42
Libevent is an event notification library.
RHSA-2026:74428
OpenShift Container Platform 4.22.17 bug fix and security update
Released 2026-10-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202609291947-0, rhcos-ppc64le-4.22.9.8.202609291947-0, rhcos-s390x-4.22.9.8.202609291947-0 +1
Fixes 6 records
TI-2026-60889 CVE-2026-89846 · GHSA-w8mp-89wx-m5rw
scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
Priority MEDIUM 40
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read In qla2x00_status_entry(), the FWI2 status path advances sense_data and shrinks par_sense…
TI-2026-57038 CVE-2026-82717 · GHSA-r5xg-xh8m-9q2w
CNAME synthesis could lead to heap corruption
Priority MEDIUM 40
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution.
TI-2026-56296 CVE-2026-81634 · GHSA-x9ff-rj4v-x6mq
Possible heap buffer overflow during DNSSEC canonicalization
Priority LOW 39
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine.
TI-2026-56013 CVE-2026-81000 · GHSA-32hf-vhcc-85c2
net: tun: bound receive headroom
Priority LOW 36
In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user() uses tun->align both as skb headroom and when choosing how much packet data to keep linear.
TI-2026-55857 CVE-2026-80844 · GHSA-jv4j-682x-84w7
xfrm: ah6: validate routing header segments_left
Priority LOW 23
In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV.