TI-2026-03838 CVE-2026-4424 · GHSA-c75f-55f6-f63q
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
Priority MEDIUM 41
A flaw was found in libarchive.
Vulnerabilities
8 records
TI-2025-12426 CVE-2025-13601 · GHSA-v6c5-9mp4-mwq4
Glib: integer overflow in in g_escape_uri_string()
Priority LOW 34
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.
TI-2025-05441 CVE-2025-6021 · GHSA-32vr-5hxf-x93f
Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
Priority HIGH 72
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow.
TI-2024-08977 CVE-2024-9676 · GHSA-wq2p-5pc6-wpgf
Path traversal in containers/storage
Priority LOW 32
A vulnerability was found in Podman, Buildah, and CRI-O.
TI-2024-01604 CVE-2024-1725 · GHSA-fg9q-5cw2-p6r9
Kubevirt-csi: persistentvolume allows access to hcp's root node
Priority LOW 32
A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP).
TI-2023-05177 CVE-2023-5625 · GHSA-326p-894x-j8c7
Python-eventlet: patch regression for cve-2021-21419 in some red hat builds
Priority MEDIUM 41
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.
TI-2022-03955 CVE-2022-4318 · GHSA-cm9x-c3rh-7rc4
Cri-o: /etc/passwd tampering privesc
Priority LOW 36
A vulnerability was found in cri-o.
TI-2023-02895 CVE-2023-3089 · GHSA-wj5p-x3cr-46w8
Ocp & fips mode
Priority LOW 33
A compliance problem was found in the Red Hat OpenShift Container Platform.