Vulnerabilities

TI-2026-53862 CVE-2026-77118 · GHSA-qjrj-qxx7-fc4j

Out-of-bounds write in GraphicsMagick PCD decoder

LOW 38

A heap out-of-bounds write exists in the Photo CD (PCD) decoder of GraphicsMagick.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00171 Published 2026-08-20 Fixed in 1.3.48, 1.4+really1.3.48-1 CWE-787

TI-2025-01086 CVE-2025-1272 · GHSA-xj75-gfvf-4g86

Kernel: secure boot does not automatically enable kernel lockdown

LOW 35

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning.

CVSS 3.1HIGH 7.7 Local High privileges User interaction EPSS 0.00254 Published 2026-02-18 Fixed in 6.12.15-100.fc40, 6.12.15-200.fc41 +1 CWE-306

TI-2022-03380 CVE-2022-3675 · GHSA-747q-wq4p-22g3

Improper input validation in Fedora Project CoreOS

LOW 24

Fedora CoreOS supports setting a GRUB bootloader password using a Butane config.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00185 Published 2022-11-03 Fixed in testing 36.20221030.2.0 , next 37.20221031.1.0 +1 CWE-20

TI-2018-10503 CVE-2018-14638 · GHSA-89rw-hgr3-hvfx

Uncontrolled resource consumption in Fedora Project 389-ds-base

LOW 38

A flaw was found in 389-ds-base before version 1.3.8.4-13.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0265 Published 2018-09-14 Partial fix CWE-400

TI-2012-04654 CVE-2012-5536 · GHSA-xw28-c23x-fjj4

A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux…

LOW 28

A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and Fedora Rawhide calls the glibc error function instead of the error function in the OpenSSH codebase, which allows local us…

CVSS 2.0MEDIUM 6.2 Local No auth Interaction — EPSS 0.00437 Published 2013-02-22 Fixed CWE-20