Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-18839

Fixed in a distro release EPSS <1%CVSS 2.2

An integer underflow was found in the popt library when formatting help text for option tables that exceed the terminal width. A local user who can cause an application to print help under those conditions may cause that application to crash or fail to display help, resulting in a denial of service of the affected application.

Published 2026-08-05 · CVE record · OSV

Products: rpm-software-management popt, Red Hat Hardened Images, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4

Distro releases

ReleasePackageFixed in
Debian 12poptno fix
Debian 13poptno fix
Debian 14poptno fix
Red Hat hummingbird 1popt0:1.19-11.2.hum1
Red Hat hummingbird 1popt-devel0:1.19-11.2.hum1
Red Hat hummingbird 1popt-static0:1.19-11.2.hum1
Ubuntu 14.04 LTSpoptno fix
Ubuntu 16.04 LTSpoptno fix
Ubuntu 18.04 LTSpoptno fix
Ubuntu 20.04 LTSpoptno fix
Ubuntu 22.04 LTSpoptno fix
Ubuntu 24.04 LTSpoptno fix
Ubuntu 26.04 LTSpoptno fix
Ubuntu 26.10poptno fix