TI-2026-41775 CVE-2026-58014 · GHSA-h88q-m8mm-7243
Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
Priority HIGH 76
A flaw was found in GLib.
RHSA-2026:80771
Red Hat AI Base Images 3.4.4 (CUDA 13.0)
Released 2026-10-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
Fixes 10 records
TI-2026-41772 CVE-2026-58011 · GHSA-8xmh-8wfg-9f6j
Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
Priority HIGH 72
A flaw was found in GLib.
TI-2026-13117 CVE-2026-15588 · GHSA-hrq7-vgh7-p534
Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
Priority MEDIUM 57
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib.
TI-2026-12884 CVE-2026-15308 · GHSA-7qj2-q5c8-cxx5
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
Priority MEDIUM 45
The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.
TI-2026-42784 CVE-2026-60002 · GHSA-gp5v-jg37-fvg6
Use after free in OpenBSD OpenSSH
Priority MEDIUM 42
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.
TI-2026-41773 CVE-2026-58012 · GHSA-vwg8-37h9-g38g
Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
Priority MEDIUM 42
A flaw was found in GLib.
TI-2026-41771 CVE-2026-58010 · GHSA-m7rp-473c-296x
Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
Priority MEDIUM 42
A flaw was found in GLib.
TI-2026-10297 CVE-2026-11940 · GHSA-9mc4-rqmq-h467
tarfile extraction filter bypass allows escaping the destination directory
Priority MEDIUM 41
tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.
TI-2026-41774 CVE-2026-58013 · GHSA-4x46-h598-64qr
Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
Priority LOW 37
A flaw was found in GLib.
TI-2026-41776 CVE-2026-58015 · GHSA-hmpf-72wc-2r6x
Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
Priority LOW 34
A flaw was found in GLib.