TI-2026-69154 CVE-2026-77214 · GHSA-8xfx-9m5m-pgcp
Heap buffer over-read in libexpat XML_ParseBuffer
Priority MEDIUM 42
libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c.
RHSA-2026:89907
Red Hat Update Infrastructure 5.3 security update
Released 2026-10-26 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
Fixes 7 records
TI-2026-65452 CVE-2026-102633 · GHSA-533f-rf84-jgcc
libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc
Priority LOW 36
libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in expat_realloc() function on 32-bit platforms when computing allocation sizes.
TI-2026-42782 CVE-2026-60000 · GHSA-76jm-35gr-hwcm
Resource allocation without limits in OpenBSD OpenSSH
Priority LOW 34
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
TI-2026-16175 CVE-2026-19953 · GHSA-wf9v-63v3-ff2x
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode…
Priority LOW 34
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep.
TI-2026-79000 CVE-2026-114406 · GHSA-jrx5-4fv3-4mcq
Red Hat system CA store trusts weak eMudhra intermediate certificates
Priority LOW 32
The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak pr…
TI-2026-42780 CVE-2026-59998 · GHSA-3j2g-cqmq-cjw9
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior…
Priority LOW 28
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.
TI-2026-42779 CVE-2026-59997 · GHSA-56r6-6mmg-25j5
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line…
Priority LOW 24
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an…