{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Red Hat Enterprise Linux 6: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/red-hat--red-hat-enterprise-linux-6/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/red-hat--red-hat-enterprise-linux-6/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115207/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115207/",
   "title": "CVE-2026-115207 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (patch 2.8.1-1)",
   "content_text": "Fixed versions: patch 2.8.1-1.",
   "date_published": "2026-10-26T08:16:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115486/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115486/",
   "title": "CVE-2026-115486 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet headers. An attacker on the same network segment can send a minimal Neighbor Advertisement to poison the ARP table and redirect network traffic.",
   "date_published": "2026-10-23T00:16:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115485/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115485/",
   "title": "CVE-2026-115485 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is present, causing it to read past the buffer into heap memory. This can result in a daemon crash, a 1-byte heap overwrite, or corruption of the iSCSI initiator name. An attacker on the same network segment can trigger this by sending a crafted DHCPv6 Advertise message.",
   "date_published": "2026-10-23T00:16:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115484/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115484/",
   "title": "CVE-2026-115484 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.",
   "date_published": "2026-10-23T00:16:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115221/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115221/",
   "title": "CVE-2026-115221 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name (CN), without confirming actual ownership in the directory service. Consequently, an enrolled host can disrupt services by revoking certificates belonging to other entities.",
   "date_published": "2026-10-22T21:13:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115207/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115207/",
   "title": "CVE-2026-115207 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers are accepted rather than rejected. Consequently, the utility can create files in arbitrary locations with the permissions of the executing user.",
   "date_published": "2026-10-22T10:16:12Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 10 (ca-certificates 2026.2.92_v9.0.319-100.3.el10_2)",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-100.3.el10_2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 8 (ca-certificates 2026.2.92_v9.0.319-81.3.el8_10)",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-81.3.el8_10.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 9 (ca-certificates 2026.2.92_v9.0.319-90.3.el9_8)",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-90.3.el9_8.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in openSUSE Tumbleweed (ca-certificates-mozilla 2.92-2.1)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-2.1.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 10 (ca-certificates 0:2026.2.92_v9.0.319-100.3.el10_2)",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-100.3.el10_2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 8 (ca-certificates 0:2026.2.92_v9.0.319-81.3.el8_10)",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-81.3.el8_10.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 9 (ca-certificates 0:2026.2.92_v9.0.319-90.3.el9_8)",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-90.3.el9_8.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.3 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.4 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.5 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-module-for-development-tools-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Development Tools 15 SP7 (ca-certificates-mozilla-prebuilt 2.92-150200.50.3)",
   "content_text": "Fixed versions: ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-11-sp4-ltss-extreme-core",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (openssl-certs 2.92-0.7.39.1)",
   "content_text": "Fixed versions: openssl-certs 2.92-0.7.39.1.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85518/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85518/",
   "title": "CVE-2026-85518 · Red Hat Hardened Images · disclosed",
   "content_text": "A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process.",
   "date_published": "2026-10-21T19:42:54Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85518/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85518/",
   "title": "CVE-2026-85518 · Red Hat Hardened Images · fixed in openSUSE Tumbleweed (openscap 1.4.6-1.1)",
   "content_text": "Fixed versions: openscap 1.4.6-1.1.",
   "date_published": "2026-10-21T19:42:54Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114038/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114038/",
   "title": "CVE-2026-114038 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure, or cause the daemon to crash, resulting in a Denial of Service (DoS).",
   "date_published": "2026-10-21T00:26:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114038/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114038/",
   "title": "CVE-2026-114038 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (multipath-tools 0.15.1-1)",
   "content_text": "Fixed versions: multipath-tools 0.15.1-1.",
   "date_published": "2026-10-21T00:26:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112177/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112177/",
   "title": "CVE-2026-112177 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted PostScript file may allow an attacker to bypass -dSAFER restrictions and access files outside the permitted paths or execute commands with the permissions of the Ghostscript process.",
   "date_published": "2026-10-20T07:25:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112261/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112261/",
   "title": "CVE-2026-112261 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.",
   "date_published": "2026-10-19T21:37:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112258/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112258/",
   "title": "CVE-2026-112258 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execution.",
   "date_published": "2026-10-19T21:37:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112257/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112257/",
   "title": "CVE-2026-112257 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash and potentially arbitrary code execution when the victim browses or opens the file.",
   "date_published": "2026-10-19T21:37:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112260/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112260/",
   "title": "CVE-2026-112260 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service.",
   "date_published": "2026-10-19T19:24:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112259/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112259/",
   "title": "CVE-2026-112259 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application.",
   "date_published": "2026-10-19T18:42:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89096/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89096/",
   "title": "CVE-2026-89096 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory growth. Sustained requests can exhaust system resources, eventually causing the service to degrade or crash.",
   "date_published": "2026-10-16T23:06:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89096/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89096/",
   "title": "CVE-2026-89096 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (nfs-utils 1:3.1.1-1)",
   "content_text": "Fixed versions: nfs-utils 1:3.1.1-1.",
   "date_published": "2026-10-16T23:06:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89088/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89088/",
   "title": "CVE-2026-89088 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).",
   "date_published": "2026-10-16T23:06:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89088/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89088/",
   "title": "CVE-2026-89088 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2 (parted 3.1-29.amzn2.0.1 and 1 more)",
   "content_text": "Fixed versions: parted 3.1-29.amzn2.0.1, parted-devel 3.1-29.amzn2.0.1.",
   "date_published": "2026-10-16T23:06:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89088/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89088/",
   "title": "CVE-2026-89088 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2023 (parted 3.4-2.amzn2023.0.3 and 1 more)",
   "content_text": "Fixed versions: parted 3.4-2.amzn2023.0.3, parted-devel 3.4-2.amzn2023.0.3.",
   "date_published": "2026-10-16T23:06:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89088/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89088/",
   "title": "CVE-2026-89088 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (parted 3.8-2)",
   "content_text": "Fixed versions: parted 3.8-2.",
   "date_published": "2026-10-16T23:06:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89085/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89085/",
   "title": "CVE-2026-89085 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.",
   "date_published": "2026-10-16T23:04:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89085/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89085/",
   "title": "CVE-2026-89085 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2 (parted 3.1-29.amzn2.0.1 and 1 more)",
   "content_text": "Fixed versions: parted 3.1-29.amzn2.0.1, parted-devel 3.1-29.amzn2.0.1.",
   "date_published": "2026-10-16T23:04:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89085/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89085/",
   "title": "CVE-2026-89085 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2023 (parted 3.4-2.amzn2023.0.3 and 1 more)",
   "content_text": "Fixed versions: parted 3.4-2.amzn2023.0.3, parted-devel 3.4-2.amzn2023.0.3.",
   "date_published": "2026-10-16T23:04:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89085/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89085/",
   "title": "CVE-2026-89085 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (parted 3.8-2)",
   "content_text": "Fixed versions: parted 3.8-2.",
   "date_published": "2026-10-16T23:04:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89085/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89085/",
   "title": "CVE-2026-89085 · Red Hat Enterprise Linux 10 · fixed in openSUSE Tumbleweed (parted 3.8-1.1)",
   "content_text": "Fixed versions: parted 3.8-1.1.",
   "date_published": "2026-10-16T23:04:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-111802/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-111802/",
   "title": "CVE-2026-111802 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.",
   "date_published": "2026-10-16T22:03:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-17591/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-17591/",
   "title": "CVE-2026-17591 · Red Hat Hardened Images · disclosed",
   "content_text": "A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data.",
   "date_published": "2026-10-16T22:03:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-17591/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-17591/",
   "title": "CVE-2026-17591 · Red Hat Hardened Images · fixed in Debian 14 (libarchive 3.8.9-1)",
   "content_text": "Fixed versions: libarchive 3.8.9-1.",
   "date_published": "2026-10-16T22:03:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-17591/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-17591/",
   "title": "CVE-2026-17591 · Red Hat Hardened Images · fixed in Red Hat hummingbird 1 (bsdcat 0:3.8.9-2.1.hum1 and 5 more)",
   "content_text": "Fixed versions: bsdcat 0:3.8.9-2.1.hum1, bsdcpio 0:3.8.9-2.1.hum1, bsdtar 0:3.8.9-2.1.hum1, bsdunzip 0:3.8.9-2.1.hum1, libarchive 0:3.8.9-2.1.hum1, libarchive-devel 0:3.8.9-2.1.hum1.",
   "date_published": "2026-10-16T22:03:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-62438/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-62438/",
   "title": "CVE-2026-62438 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive (PAA) texture file. Due to an integer overflow when calculating image dimensions during file decompression, the application allocates an undersized memory buffer. Subsequent processing reads memory past the buffer boundary, terminating the plug-in process unexpectedly.",
   "date_published": "2026-10-16T21:56:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-62438/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-62438/",
   "title": "CVE-2026-62438 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (gimp 3.2.6-1)",
   "content_text": "Fixed versions: gimp 3.2.6-1.",
   "date_published": "2026-10-16T21:56:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-62439/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-62439/",
   "title": "CVE-2026-62439 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR (.pvr) file, an attacker can trigger a heap-based buffer overflow, potentially leading to arbitrary code execution or a Denial of Service (DoS) via an application crash.",
   "date_published": "2026-10-16T21:54:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-62439/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-62439/",
   "title": "CVE-2026-62439 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (gimp 3.2.6-1)",
   "content_text": "Fixed versions: gimp 3.2.6-1.",
   "date_published": "2026-10-16T21:54:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85977/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85977/",
   "title": "CVE-2026-85977 · Red Hat Hardened Images · disclosed",
   "content_text": "A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation, causing the client process to experience a Denial of Service (DoS) due to resource exhaustion.",
   "date_published": "2026-10-16T18:20:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85977/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85977/",
   "title": "CVE-2026-85977 · Red Hat Hardened Images · fixed in openSUSE Tumbleweed (libtirpc 1.3.8-1.1)",
   "content_text": "Fixed versions: libtirpc 1.3.8-1.1.",
   "date_published": "2026-10-16T18:20:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85977/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85977/",
   "title": "CVE-2026-85977 · Red Hat Hardened Images · fixed in Red Hat hummingbird 1 (libtirpc 0:1.3.8-0.1.hum1 and 1 more)",
   "content_text": "Fixed versions: libtirpc 0:1.3.8-0.1.hum1, libtirpc-devel 0:1.3.8-0.1.hum1.",
   "date_published": "2026-10-16T18:20:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85231/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85231/",
   "title": "CVE-2026-85231 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate.",
   "date_published": "2026-10-16T18:20:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85231/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85231/",
   "title": "CVE-2026-85231 · Red Hat Enterprise Linux 10 · fixed in openSUSE Tumbleweed (libtirpc 1.3.8-1.1)",
   "content_text": "Fixed versions: libtirpc 1.3.8-1.1.",
   "date_published": "2026-10-16T18:20:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89098/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89098/",
   "title": "CVE-2026-89098 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.",
   "date_published": "2026-10-16T17:43:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89098/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89098/",
   "title": "CVE-2026-89098 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (nfs-utils 1:3.1.1-1)",
   "content_text": "Fixed versions: nfs-utils 1:3.1.1-1.",
   "date_published": "2026-10-16T17:43:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105958/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105958/",
   "title": "CVE-2026-105958 · Red Hat Enterprise Linux 6 · disclosed",
   "content_text": "A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICE_MSGC_MIGRATE_DATA messages without bounds validation, allowing a malicious authenticated SPICE client during VM live migration to read arbitrary heap memory or trigger heap corruption via out-of-bounds read and write operations on the message buffer.",
   "date_published": "2026-10-16T12:18:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105958/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105958/",
   "title": "CVE-2026-105958 · Red Hat Enterprise Linux 6 · fixed in Amazon Linux 2 (spice-server 0.14.0-10.amzn2 and 1 more)",
   "content_text": "Fixed versions: spice-server 0.14.0-10.amzn2, spice-server-devel 0.14.0-10.amzn2.",
   "date_published": "2026-10-16T12:18:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105958/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105958/",
   "title": "CVE-2026-105958 · Red Hat Enterprise Linux 6 · fixed in openSUSE Tumbleweed (spice 0.16.0-3.1)",
   "content_text": "Fixed versions: spice 0.16.0-3.1.",
   "date_published": "2026-10-16T12:18:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105959/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105959/",
   "title": "CVE-2026-105959 · Red Hat Enterprise Linux 6 · disclosed",
   "content_text": "A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size to int when calling the malloc callback, allowing a malicious authenticated SPICE client during VM live migration to trigger a massive heap buffer overflow by sending a crafted max_encoders value in migration data.",
   "date_published": "2026-10-16T11:53:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105959/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105959/",
   "title": "CVE-2026-105959 · Red Hat Enterprise Linux 6 · fixed in Amazon Linux 2 (spice-server 0.14.0-10.amzn2 and 1 more)",
   "content_text": "Fixed versions: spice-server 0.14.0-10.amzn2, spice-server-devel 0.14.0-10.amzn2.",
   "date_published": "2026-10-16T11:53:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105959/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105959/",
   "title": "CVE-2026-105959 · Red Hat Enterprise Linux 6 · fixed in openSUSE Tumbleweed (spice 0.16.0-3.1)",
   "content_text": "Fixed versions: spice 0.16.0-3.1.",
   "date_published": "2026-10-16T11:53:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.21",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.21 (cifs-utils 7.1-r1)",
   "content_text": "Fixed versions: cifs-utils 7.1-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.22 (cifs-utils 7.3-r1)",
   "content_text": "Fixed versions: cifs-utils 7.3-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.23 (cifs-utils 7.4-r1)",
   "content_text": "Fixed versions: cifs-utils 7.4-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.24 (cifs-utils 7.5-r1)",
   "content_text": "Fixed versions: cifs-utils 7.5-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2 (cifs-utils 6.2-10.amzn2.0.5 and 1 more)",
   "content_text": "Fixed versions: cifs-utils 6.2-10.amzn2.0.5, cifs-utils-devel 6.2-10.amzn2.0.5.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2023 (cifs-utils 7.7-145.amzn2023.0.1 and 3 more)",
   "content_text": "Fixed versions: cifs-utils 7.7-145.amzn2023.0.1, cifs-utils-devel 7.7-145.amzn2023.0.1, cifs-utils-info 7.7-145.amzn2023.0.1, pam_cifscreds 7.7-145.amzn2023.0.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Debian 13 (cifs-utils 2:7.4-1+deb13u1)",
   "content_text": "Fixed versions: cifs-utils 2:7.4-1+deb13u1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (cifs-utils 2:7.9-1)",
   "content_text": "Fixed versions: cifs-utils 2:7.9-1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.3 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.4 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.5 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (cifs-utils 6.9-13.32.2)",
   "content_text": "Fixed versions: cifs-utils 6.9-13.32.2.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (cifs-utils 6.9-13.32.2)",
   "content_text": "Fixed versions: cifs-utils 6.9-13.32.2.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 22.04 LTS (cifs-utils 2:6.14-1ubuntu0.7)",
   "content_text": "Fixed versions: cifs-utils 2:6.14-1ubuntu0.7.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 24.04 LTS (cifs-utils 2:7.0-2ubuntu0.6)",
   "content_text": "Fixed versions: cifs-utils 2:7.0-2ubuntu0.6.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 26.04 LTS (cifs-utils 2:7.4-1ubuntu0.26.04.4)",
   "content_text": "Fixed versions: cifs-utils 2:7.4-1ubuntu0.26.04.4.",
   "date_published": "2026-10-16T06:47:10Z"
  }
 ]
}