{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Red Hat Enterprise Linux 6: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/red-hat--red-hat-enterprise-linux-6/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/red-hat--red-hat-enterprise-linux-6/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115486/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115486/",
   "title": "CVE-2026-115486 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet headers. An attacker on the same network segment can send a minimal Neighbor Advertisement to poison the ARP table and redirect network traffic.",
   "date_published": "2026-10-23T00:16:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115484/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115484/",
   "title": "CVE-2026-115484 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.",
   "date_published": "2026-10-23T00:16:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112177/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112177/",
   "title": "CVE-2026-112177 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted PostScript file may allow an attacker to bypass -dSAFER restrictions and access files outside the permitted paths or execute commands with the permissions of the Ghostscript process.",
   "date_published": "2026-10-20T07:25:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112261/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112261/",
   "title": "CVE-2026-112261 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.",
   "date_published": "2026-10-19T21:37:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112258/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112258/",
   "title": "CVE-2026-112258 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execution.",
   "date_published": "2026-10-19T21:37:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112257/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112257/",
   "title": "CVE-2026-112257 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash and potentially arbitrary code execution when the victim browses or opens the file.",
   "date_published": "2026-10-19T21:37:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112260/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112260/",
   "title": "CVE-2026-112260 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service.",
   "date_published": "2026-10-19T19:24:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-62439/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-62439/",
   "title": "CVE-2026-62439 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR (.pvr) file, an attacker can trigger a heap-based buffer overflow, potentially leading to arbitrary code execution or a Denial of Service (DoS) via an application crash.",
   "date_published": "2026-10-16T21:54:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-62439/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-62439/",
   "title": "CVE-2026-62439 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (gimp 3.2.6-1)",
   "content_text": "Fixed versions: gimp 3.2.6-1.",
   "date_published": "2026-10-16T21:54:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105958/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105958/",
   "title": "CVE-2026-105958 · Red Hat Enterprise Linux 6 · disclosed",
   "content_text": "A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICE_MSGC_MIGRATE_DATA messages without bounds validation, allowing a malicious authenticated SPICE client during VM live migration to read arbitrary heap memory or trigger heap corruption via out-of-bounds read and write operations on the message buffer.",
   "date_published": "2026-10-16T12:18:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105958/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105958/",
   "title": "CVE-2026-105958 · Red Hat Enterprise Linux 6 · fixed in Amazon Linux 2 (spice-server 0.14.0-10.amzn2 and 1 more)",
   "content_text": "Fixed versions: spice-server 0.14.0-10.amzn2, spice-server-devel 0.14.0-10.amzn2.",
   "date_published": "2026-10-16T12:18:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105958/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105958/",
   "title": "CVE-2026-105958 · Red Hat Enterprise Linux 6 · fixed in openSUSE Tumbleweed (spice 0.16.0-3.1)",
   "content_text": "Fixed versions: spice 0.16.0-3.1.",
   "date_published": "2026-10-16T12:18:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105959/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105959/",
   "title": "CVE-2026-105959 · Red Hat Enterprise Linux 6 · disclosed",
   "content_text": "A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size to int when calling the malloc callback, allowing a malicious authenticated SPICE client during VM live migration to trigger a massive heap buffer overflow by sending a crafted max_encoders value in migration data.",
   "date_published": "2026-10-16T11:53:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105959/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105959/",
   "title": "CVE-2026-105959 · Red Hat Enterprise Linux 6 · fixed in Amazon Linux 2 (spice-server 0.14.0-10.amzn2 and 1 more)",
   "content_text": "Fixed versions: spice-server 0.14.0-10.amzn2, spice-server-devel 0.14.0-10.amzn2.",
   "date_published": "2026-10-16T11:53:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105959/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105959/",
   "title": "CVE-2026-105959 · Red Hat Enterprise Linux 6 · fixed in openSUSE Tumbleweed (spice 0.16.0-3.1)",
   "content_text": "Fixed versions: spice 0.16.0-3.1.",
   "date_published": "2026-10-16T11:53:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.21",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.21 (cifs-utils 7.1-r1)",
   "content_text": "Fixed versions: cifs-utils 7.1-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.22 (cifs-utils 7.3-r1)",
   "content_text": "Fixed versions: cifs-utils 7.3-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.23 (cifs-utils 7.4-r1)",
   "content_text": "Fixed versions: cifs-utils 7.4-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.24 (cifs-utils 7.5-r1)",
   "content_text": "Fixed versions: cifs-utils 7.5-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2 (cifs-utils 6.2-10.amzn2.0.5 and 1 more)",
   "content_text": "Fixed versions: cifs-utils 6.2-10.amzn2.0.5, cifs-utils-devel 6.2-10.amzn2.0.5.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2023 (cifs-utils 7.7-145.amzn2023.0.1 and 3 more)",
   "content_text": "Fixed versions: cifs-utils 7.7-145.amzn2023.0.1, cifs-utils-devel 7.7-145.amzn2023.0.1, cifs-utils-info 7.7-145.amzn2023.0.1, pam_cifscreds 7.7-145.amzn2023.0.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Debian 13 (cifs-utils 2:7.4-1+deb13u1)",
   "content_text": "Fixed versions: cifs-utils 2:7.4-1+deb13u1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (cifs-utils 2:7.9-1)",
   "content_text": "Fixed versions: cifs-utils 2:7.9-1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.3 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.4 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.5 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (cifs-utils 6.9-13.32.2)",
   "content_text": "Fixed versions: cifs-utils 6.9-13.32.2.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (cifs-utils 6.9-13.32.2)",
   "content_text": "Fixed versions: cifs-utils 6.9-13.32.2.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 22.04 LTS (cifs-utils 2:6.14-1ubuntu0.7)",
   "content_text": "Fixed versions: cifs-utils 2:6.14-1ubuntu0.7.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 24.04 LTS (cifs-utils 2:7.0-2ubuntu0.6)",
   "content_text": "Fixed versions: cifs-utils 2:7.0-2ubuntu0.6.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 26.04 LTS (cifs-utils 2:7.4-1ubuntu0.26.04.4)",
   "content_text": "Fixed versions: cifs-utils 2:7.4-1ubuntu0.26.04.4.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 26.10 (cifs-utils 2:7.4-1ubuntu3.1)",
   "content_text": "Fixed versions: cifs-utils 2:7.4-1ubuntu3.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86476/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86476/",
   "title": "CVE-2026-86476 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets that exceed the actual backing memory allocation. The metadata is not range-checked during deserialization, and the video frame mapping code does not verify that the declared plane geometry fits within the buffer before allowing consumers to read or write video data. A local attacker who controls the sending side of a GStreamer inter-process IPC pipeline can deliver a crafted buffer carrying fabricated strides, causing the receiving process to read or write beyond heap boundaries. Successful exploitation can cause a denial of service or potentially allow code execution within the affected process.",
   "date_published": "2026-10-14T10:00:02Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2 (cyrus-sasl 2.1.26-24.amzn2.0.2 and 10 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.26-24.amzn2.0.2, cyrus-sasl-devel 2.1.26-24.amzn2.0.2, cyrus-sasl-gs2 2.1.26-24.amzn2.0.2, cyrus-sasl-gssapi 2.1.26-24.amzn2.0.2, cyrus-sasl-ldap 2.1.26-24.amzn2.0.2, cyrus-sasl-lib 2.1.26-24.amzn2.0.2, cyrus-sasl-md5 2.1.26-24.amzn2.0.2, cyrus-sasl-ntlm 2.1.26-24.amzn2.0.2, cyrus-sasl-plain 2.1.26-24.amzn2.0.2, cyrus-sasl-scram 2.1.26-24.amzn2.0.2, cyrus-sasl-sql 2.1.26-24.amzn2.0.2.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2023 (cyrus-sasl 2.1.27-18.amzn2023.0.4 and 10 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-18.amzn2023.0.4, cyrus-sasl-devel 2.1.27-18.amzn2023.0.4, cyrus-sasl-gs2 2.1.27-18.amzn2023.0.4, cyrus-sasl-gssapi 2.1.27-18.amzn2023.0.4, cyrus-sasl-ldap 2.1.27-18.amzn2023.0.4, cyrus-sasl-lib 2.1.27-18.amzn2023.0.4, cyrus-sasl-md5 2.1.27-18.amzn2023.0.4, cyrus-sasl-ntlm 2.1.27-18.amzn2023.0.4, cyrus-sasl-plain 2.1.27-18.amzn2023.0.4, cyrus-sasl-scram 2.1.27-18.amzn2023.0.4, cyrus-sasl-sql 2.1.27-18.amzn2023.0.4.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (cyrus-sasl2 2.1.28+dfsg1-12)",
   "content_text": "Fixed versions: cyrus-sasl2 2.1.28+dfsg1-12.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in openSUSE Leap 16.0 (cyrus-sasl 2.1.28-160000.4.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-160000.4.1, cyrus-sasl-bdb 2.1.28-160000.4.1, cyrus-sasl-saslauthd 2.1.28-160000.4.1, cyrus-sasl-saslauthd-bdb 2.1.28-160000.4.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in openSUSE Tumbleweed (cyrus-sasl 2.1.28-13.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-13.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (cyrus-sasl 2.1.28-150500.3.12.1 and 2 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (cyrus-sasl 2.1.28-150500.3.12.1 and 2 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.3 (cyrus-sasl 2.1.27-150300.4.9.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.4 (cyrus-sasl 2.1.27-150300.4.9.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.5 (cyrus-sasl 2.1.28-150500.3.12.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (cyrus-sasl 2.1.28-150600.7.17.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-module-for-legacy-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Legacy 15 SP7 (cyrus-sasl-bdb 2.1.28-150600.7.17.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd-bdb 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-module-for-server-applications-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Server Applications 15 SP7 (cyrus-sasl-bdb 2.1.28-150600.7.17.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (cyrus-sasl 2.1.26-14.10.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.26-14.10.1, cyrus-sasl-saslauthd 2.1.26-14.10.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (cyrus-sasl 2.1.28-150500.3.12.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd-bdb 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (cyrus-sasl 2.1.28-150600.7.17.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150600.7.17.1, cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd-bdb 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 16.0 (cyrus-sasl 2.1.28-160000.4.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-160000.4.1, cyrus-sasl-saslauthd 2.1.28-160000.4.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (cyrus-sasl 2.1.28-150500.3.12.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd-bdb 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (cyrus-sasl 2.1.28-150600.7.17.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150600.7.17.1, cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd-bdb 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP applications 16.0 (cyrus-sasl 2.1.28-160000.4.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-160000.4.1, cyrus-sasl-saslauthd 2.1.28-160000.4.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (cyrus-sasl 2.1.26-14.10.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.26-14.10.1, cyrus-sasl-saslauthd 2.1.26-14.10.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106062/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106062/",
   "title": "CVE-2026-106062 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, height, and pitch can be computed using 32-bit arithmetic that overflows. The allocated buffer is too small for the amount of pixel data written through GEGL, following integer overflow in size calculations. This may allow heap corruption and, in the worst case, arbitrary code execution in the context of the GIMP process.",
   "date_published": "2026-10-06T20:02:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106062/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106062/",
   "title": "CVE-2026-106062 · Red Hat Enterprise Linux 10 · fixed in openSUSE Leap 16.0 (gimp 3.0.8-bp160.13.1)",
   "content_text": "Fixed versions: gimp 3.0.8-bp160.13.1.",
   "date_published": "2026-10-06T20:02:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106062/fixed/suse-linux-enterprise-module-for-package-hub-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106062/",
   "title": "CVE-2026-106062 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Package Hub 15 SP7 (gimp 2.10.30-150400.3.85.1)",
   "content_text": "Fixed versions: gimp 2.10.30-150400.3.85.1.",
   "date_published": "2026-10-06T20:02:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-106062/fixed/suse-linux-enterprise-workstation-extension-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-106062/",
   "title": "CVE-2026-106062 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Workstation Extension 15 SP7 (gimp 2.10.30-150400.3.85.1)",
   "content_text": "Fixed versions: gimp 2.10.30-150400.3.85.1.",
   "date_published": "2026-10-06T20:02:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the context of the Ghostscript process. The issue chains memory corruption in document parsing with disabling of internal path access controls at runtime. An attacker can deliver the document directly or through formats that delegate rendering to Ghostscript (for example EPS import or print conversion workflows). Successful exploitation can compromise confidentiality, integrity, and availability of data accessible to the process running Ghostscript.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 10 (ghostscript 10.02.1-16.el10_2.3 and 6 more)",
   "content_text": "Fixed versions: ghostscript 10.02.1-16.el10_2.3, ghostscript-doc 10.02.1-16.el10_2.3, ghostscript-tools-dvipdf 10.02.1-16.el10_2.3, ghostscript-tools-fonts 10.02.1-16.el10_2.3, ghostscript-tools-printing 10.02.1-16.el10_2.3, libgs 10.02.1-16.el10_2.3, libgs-devel 10.02.1-16.el10_2.3.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 8 (ghostscript 9.27-19.el8_10 and 7 more)",
   "content_text": "Fixed versions: ghostscript 9.27-19.el8_10, ghostscript-doc 9.27-19.el8_10, ghostscript-tools-dvipdf 9.27-19.el8_10, ghostscript-tools-fonts 9.27-19.el8_10, ghostscript-tools-printing 9.27-19.el8_10, ghostscript-x11 9.27-19.el8_10, libgs 9.27-19.el8_10, libgs-devel 9.27-19.el8_10.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 9 (ghostscript 9.54.0-19.el9_8.3 and 7 more)",
   "content_text": "Fixed versions: ghostscript 9.54.0-19.el9_8.3, ghostscript-doc 9.54.0-19.el9_8.3, ghostscript-tools-dvipdf 9.54.0-19.el9_8.3, ghostscript-tools-fonts 9.54.0-19.el9_8.3, ghostscript-tools-printing 9.54.0-19.el9_8.3, ghostscript-x11 9.54.0-19.el9_8.3, libgs 9.54.0-19.el9_8.3, libgs-devel 9.54.0-19.el9_8.3.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2 (ghostscript 9.54.0-9.amzn2.0.14 and 5 more)",
   "content_text": "Fixed versions: ghostscript 9.54.0-9.amzn2.0.14, ghostscript-cups 9.54.0-9.amzn2.0.14, ghostscript-doc 9.54.0-9.amzn2.0.14, ghostscript-gtk 9.54.0-9.amzn2.0.14, libgs 9.54.0-9.amzn2.0.14, libgs-devel 9.54.0-9.amzn2.0.14.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2023 (ghostscript 9.56.1-7.amzn2023.0.20 and 8 more)",
   "content_text": "Fixed versions: ghostscript 9.56.1-7.amzn2023.0.20, ghostscript-doc 9.56.1-7.amzn2023.0.20, ghostscript-gtk 9.56.1-7.amzn2023.0.20, ghostscript-tools-dvipdf 9.56.1-7.amzn2023.0.20, ghostscript-tools-fonts 9.56.1-7.amzn2023.0.20, ghostscript-tools-printing 9.56.1-7.amzn2023.0.20, ghostscript-x11 9.56.1-7.amzn2023.0.20, libgs 9.56.1-7.amzn2023.0.20, libgs-devel 9.56.1-7.amzn2023.0.20.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Debian 13 (ghostscript 10.05.1~dfsg-1+deb13u3)",
   "content_text": "Fixed versions: ghostscript 10.05.1~dfsg-1+deb13u3.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (ghostscript 10.08.0~dfsg-1)",
   "content_text": "Fixed versions: ghostscript 10.08.0~dfsg-1.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in openSUSE Tumbleweed (ghostscript 10.08.0-2.1)",
   "content_text": "Fixed versions: ghostscript 10.08.0-2.1.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/red-hat-enterprise-linux-10.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Red Hat Enterprise Linux 10.2 (ghostscript 0:10.02.1-16.el10_2.3 and 1 more)",
   "content_text": "Fixed versions: ghostscript 0:10.02.1-16.el10_2.3, libgs 0:10.02.1-16.el10_2.3.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/red-hat-enterprise-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Red Hat Enterprise Linux 8 (ghostscript 0:9.27-19.el8_10 and 1 more)",
   "content_text": "Fixed versions: ghostscript 0:9.27-19.el8_10, libgs 0:9.27-19.el8_10.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/red-hat-enterprise-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Red Hat Enterprise Linux 9 (ghostscript 0:9.54.0-19.el9_8.3 and 1 more)",
   "content_text": "Fixed versions: ghostscript 0:9.54.0-19.el9_8.3, libgs 0:9.54.0-19.el9_8.3.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 10 (ghostscript 0:10.02.1-16.el10_2.3)",
   "content_text": "Fixed versions: ghostscript 0:10.02.1-16.el10_2.3.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 8 (ghostscript 0:9.27-19.el8_10)",
   "content_text": "Fixed versions: ghostscript 0:9.27-19.el8_10.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 9 (ghostscript 0:9.54.0-19.el9_8.3)",
   "content_text": "Fixed versions: ghostscript 0:9.54.0-19.el9_8.3.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 22.04 LTS (ghostscript 9.55.0~dfsg1-0ubuntu5.15)",
   "content_text": "Fixed versions: ghostscript 9.55.0~dfsg1-0ubuntu5.15.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 24.04 LTS (ghostscript 10.02.1~dfsg1-0ubuntu7.10)",
   "content_text": "Fixed versions: ghostscript 10.02.1~dfsg1-0ubuntu7.10.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 26.04 LTS (ghostscript 10.06.0~dfsg-3ubuntu1.2)",
   "content_text": "Fixed versions: ghostscript 10.06.0~dfsg-3ubuntu1.2.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 26.10 (ghostscript 10.07.1~dfsg-1ubuntu2.1)",
   "content_text": "Fixed versions: ghostscript 10.07.1~dfsg-1ubuntu2.1.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/ubuntu-pro-16.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Ubuntu Pro 16.04 LTS (ghostscript 9.26~dfsg+0-0ubuntu0.16.04.14+esm11)",
   "content_text": "Fixed versions: ghostscript 9.26~dfsg+0-0ubuntu0.16.04.14+esm11.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/ubuntu-pro-18.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Ubuntu Pro 18.04 LTS (ghostscript 9.26~dfsg+0-0ubuntu0.18.04.18+esm6)",
   "content_text": "Fixed versions: ghostscript 9.26~dfsg+0-0ubuntu0.18.04.18+esm6.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101258/fixed/ubuntu-pro-20.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101258/",
   "title": "CVE-2026-101258 · Red Hat Enterprise Linux 10 · fixed in Ubuntu Pro 20.04 LTS (ghostscript 9.50~dfsg-5ubuntu4.15+esm3)",
   "content_text": "Fixed versions: ghostscript 9.50~dfsg-5ubuntu4.15+esm3.",
   "date_published": "2026-10-06T20:02:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104988/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104988/",
   "title": "CVE-2026-104988 · Red Hat Certificate System 10 · disclosed",
   "content_text": "A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without an end-user TLS client certificate. The SSL_CLIENT_CERT session attribute retains the EST subsystem's agent certificate, which causes downstream authorization checks to treat the request as agent-privileged. An authenticated EST user can exploit this to obtain CA-signed certificates with arbitrary subject names.",
   "date_published": "2026-10-02T19:34:33Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86345/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86345/",
   "title": "CVE-2026-86345 · Red Hat Directory Server 11 · disclosed",
   "content_text": "A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to inject a crafted LDAP message that is processed after the TLS upgrade and whose response is delivered to the client in place of the client's own pending operation's response, due to messageID collision. This can cause a client application to treat a failed authentication (bind) attempt as successful.",
   "date_published": "2026-10-01T23:27:47Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86345/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86345/",
   "title": "CVE-2026-86345 · Red Hat Directory Server 11 · fixed in Amazon Linux 2 (389-ds-base 1.3.10.2-17.amzn2.0.14 and 3 more)",
   "content_text": "Fixed versions: 389-ds-base 1.3.10.2-17.amzn2.0.14, 389-ds-base-devel 1.3.10.2-17.amzn2.0.14, 389-ds-base-libs 1.3.10.2-17.amzn2.0.14, 389-ds-base-snmp 1.3.10.2-17.amzn2.0.14.",
   "date_published": "2026-10-01T23:27:47Z"
  }
 ]
}