{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Red Hat Enterprise Linux 8: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/red-hat--red-hat-enterprise-linux-8/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/red-hat--red-hat-enterprise-linux-8/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115207/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115207/",
   "title": "CVE-2026-115207 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (patch 2.8.1-1)",
   "content_text": "Fixed versions: patch 2.8.1-1.",
   "date_published": "2026-10-26T08:16:45Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115486/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115486/",
   "title": "CVE-2026-115486 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet headers. An attacker on the same network segment can send a minimal Neighbor Advertisement to poison the ARP table and redirect network traffic.",
   "date_published": "2026-10-23T00:16:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115485/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115485/",
   "title": "CVE-2026-115485 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is present, causing it to read past the buffer into heap memory. This can result in a daemon crash, a 1-byte heap overwrite, or corruption of the iSCSI initiator name. An attacker on the same network segment can trigger this by sending a crafted DHCPv6 Advertise message.",
   "date_published": "2026-10-23T00:16:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115484/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115484/",
   "title": "CVE-2026-115484 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.",
   "date_published": "2026-10-23T00:16:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115449/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115449/",
   "title": "CVE-2026-115449 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest in the echo reply, breaking the NAT isolation that user-mode networking is expected to provide.",
   "date_published": "2026-10-22T21:20:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115221/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115221/",
   "title": "CVE-2026-115221 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issue occurs because FreeIPA verifies ownership solely by matching the host name to the certificate's subject Common Name (CN), without confirming actual ownership in the directory service. Consequently, an enrolled host can disrupt services by revoking certificates belonging to other entities.",
   "date_published": "2026-10-22T21:13:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-115207/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-115207/",
   "title": "CVE-2026-115207 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers are accepted rather than rejected. Consequently, the utility can create files in arbitrary locations with the permissions of the executing user.",
   "date_published": "2026-10-22T10:16:12Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certificate authority. A man-in-the-middle attacker could use this flaw to issue certificates for arbitrary host names signed by the weak intermediate CA certificates, which would be considered trusted by a TLS/SSL client using system CA store and cause such clients to connect to malicious sites.\n\nDue to inability to only distrust specific intermediate certificates in all clients using the system CA store, root CA certificates of authorities that signed weak intermediate CA certificates are being removed.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 10 (ca-certificates 2026.2.92_v9.0.319-100.3.el10_2)",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-100.3.el10_2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 8 (ca-certificates 2026.2.92_v9.0.319-81.3.el8_10)",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-81.3.el8_10.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/almalinux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in AlmaLinux 9 (ca-certificates 2026.2.92_v9.0.319-90.3.el9_8)",
   "content_text": "Fixed versions: ca-certificates 2026.2.92_v9.0.319-90.3.el9_8.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in openSUSE Tumbleweed (ca-certificates-mozilla 2.92-2.1)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-2.1.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 10 (ca-certificates 0:2026.2.92_v9.0.319-100.3.el10_2)",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-100.3.el10_2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-8",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 8 (ca-certificates 0:2026.2.92_v9.0.319-81.3.el8_10)",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-81.3.el8_10.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/rocky-linux-9",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in Rocky Linux 9 (ca-certificates 0:2026.2.92_v9.0.319-90.3.el9_8)",
   "content_text": "Fixed versions: ca-certificates 0:2026.2.92_v9.0.319-90.3.el9_8.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.3 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.4 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.5 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (ca-certificates-mozilla 2.92-150200.50.2)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-module-for-development-tools-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Development Tools 15 SP7 (ca-certificates-mozilla-prebuilt 2.92-150200.50.3)",
   "content_text": "Fixed versions: ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-11-sp4-ltss-extreme-core",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (openssl-certs 2.92-0.7.39.1)",
   "content_text": "Fixed versions: openssl-certs 2.92-0.7.39.1.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114406/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114406/",
   "title": "CVE-2026-114406 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (ca-certificates-mozilla 2.92-150200.50.2 and 1 more)",
   "content_text": "Fixed versions: ca-certificates-mozilla 2.92-150200.50.2, ca-certificates-mozilla-prebuilt 2.92-150200.50.3.",
   "date_published": "2026-10-21T20:56:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85518/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85518/",
   "title": "CVE-2026-85518 · Red Hat Hardened Images · disclosed",
   "content_text": "A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process.",
   "date_published": "2026-10-21T19:42:54Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85518/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85518/",
   "title": "CVE-2026-85518 · Red Hat Hardened Images · fixed in openSUSE Tumbleweed (openscap 1.4.6-1.1)",
   "content_text": "Fixed versions: openscap 1.4.6-1.1.",
   "date_published": "2026-10-21T19:42:54Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114370/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114370/",
   "title": "CVE-2026-114370 · Red Hat build of Apache Camel for Spring Boot 4 · disclosed",
   "content_text": "A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serving static files from the file system. The issue occurs because the mechanism used to verify if a symbolic link points to a safe location only checks if the target path starts with a specific string, without ensuring it matches a full directory name. This could allow an attacker to access files in a sibling directory if that directorys name starts with the same characters as an authorized safe directory.",
   "date_published": "2026-10-21T15:02:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92824/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92824/",
   "title": "CVE-2026-92824 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound instead of the number of checksums in the current digest table. Crafted modulemd v2 metadata with multiple digest types can trigger an out-of-bounds read during YAML serialization, typically causing a crash and resulting in a denial of service.",
   "date_published": "2026-10-21T03:18:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92822/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92822/",
   "title": "CVE-2026-92822 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a recursion-depth or node-count limit. An attacker who can supply crafted modulemd YAML with deeply nested xmd content can cause stack exhaustion or excessive resource consumption, resulting in a denial of service.",
   "date_published": "2026-10-21T03:18:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92823/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92823/",
   "title": "CVE-2026-92823 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not enforce a cumulative decompressed-size limit before parsing. An attacker who can supply a highly compressible compressed YAML file can cause excessive CPU and memory consumption, resulting in a denial of service.",
   "date_published": "2026-10-21T03:18:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114038/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114038/",
   "title": "CVE-2026-114038 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure, or cause the daemon to crash, resulting in a Denial of Service (DoS).",
   "date_published": "2026-10-21T00:26:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-114038/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-114038/",
   "title": "CVE-2026-114038 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (multipath-tools 0.15.1-1)",
   "content_text": "Fixed versions: multipath-tools 0.15.1-1.",
   "date_published": "2026-10-21T00:26:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112177/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112177/",
   "title": "CVE-2026-112177 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted PostScript file may allow an attacker to bypass -dSAFER restrictions and access files outside the permitted paths or execute commands with the permissions of the Ghostscript process.",
   "date_published": "2026-10-20T07:25:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112261/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112261/",
   "title": "CVE-2026-112261 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution.",
   "date_published": "2026-10-19T21:37:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112258/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112258/",
   "title": "CVE-2026-112258 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a crafted XCF file can cause a use-after-free in the main GIMP process, leading to a crash and potentially arbitrary code execution.",
   "date_published": "2026-10-19T21:37:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112257/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112257/",
   "title": "CVE-2026-112257 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A crafted grayscale PSD thumbnail can cause a heap out-of-bounds read and write in the plug-in process, leading to a crash and potentially arbitrary code execution when the victim browses or opens the file.",
   "date_published": "2026-10-19T21:37:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112260/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112260/",
   "title": "CVE-2026-112260 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing denial of service.",
   "date_published": "2026-10-19T19:24:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112259/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112259/",
   "title": "CVE-2026-112259 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of service of the GIMP application.",
   "date_published": "2026-10-19T18:42:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112214/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112214/",
   "title": "CVE-2026-112214 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation without being limited to the payload available in the object. Processing a crafted ASF, WMV, or WMA file can cause a very large memory allocation request and lead to denial of service if the allocation fails or the process is memory-constrained.",
   "date_published": "2026-10-19T12:15:06Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-112210/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-112210/",
   "title": "CVE-2026-112210 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the privileged yggdrasil system service account can exploit this to gain ownership of arbitrary files, leading to privilege escalation to root.",
   "date_published": "2026-10-19T11:39:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-16460/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-16460/",
   "title": "CVE-2026-16460 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.",
   "date_published": "2026-10-19T06:40:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89096/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89096/",
   "title": "CVE-2026-89096 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd service. The service fails to properly release memory allocated during callback processing, leading to continuous memory growth. Sustained requests can exhaust system resources, eventually causing the service to degrade or crash.",
   "date_published": "2026-10-16T23:06:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89096/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89096/",
   "title": "CVE-2026-89096 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (nfs-utils 1:3.1.1-1)",
   "content_text": "Fixed versions: nfs-utils 1:3.1.1-1.",
   "date_published": "2026-10-16T23:06:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89088/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89088/",
   "title": "CVE-2026-89088 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).",
   "date_published": "2026-10-16T23:06:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89088/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89088/",
   "title": "CVE-2026-89088 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2 (parted 3.1-29.amzn2.0.1 and 1 more)",
   "content_text": "Fixed versions: parted 3.1-29.amzn2.0.1, parted-devel 3.1-29.amzn2.0.1.",
   "date_published": "2026-10-16T23:06:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89088/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89088/",
   "title": "CVE-2026-89088 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2023 (parted 3.4-2.amzn2023.0.3 and 1 more)",
   "content_text": "Fixed versions: parted 3.4-2.amzn2023.0.3, parted-devel 3.4-2.amzn2023.0.3.",
   "date_published": "2026-10-16T23:06:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89088/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89088/",
   "title": "CVE-2026-89088 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (parted 3.8-2)",
   "content_text": "Fixed versions: parted 3.8-2.",
   "date_published": "2026-10-16T23:06:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89085/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89085/",
   "title": "CVE-2026-89085 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.",
   "date_published": "2026-10-16T23:04:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89085/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89085/",
   "title": "CVE-2026-89085 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2 (parted 3.1-29.amzn2.0.1 and 1 more)",
   "content_text": "Fixed versions: parted 3.1-29.amzn2.0.1, parted-devel 3.1-29.amzn2.0.1.",
   "date_published": "2026-10-16T23:04:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89085/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89085/",
   "title": "CVE-2026-89085 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2023 (parted 3.4-2.amzn2023.0.3 and 1 more)",
   "content_text": "Fixed versions: parted 3.4-2.amzn2023.0.3, parted-devel 3.4-2.amzn2023.0.3.",
   "date_published": "2026-10-16T23:04:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89085/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89085/",
   "title": "CVE-2026-89085 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (parted 3.8-2)",
   "content_text": "Fixed versions: parted 3.8-2.",
   "date_published": "2026-10-16T23:04:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89085/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89085/",
   "title": "CVE-2026-89085 · Red Hat Enterprise Linux 10 · fixed in openSUSE Tumbleweed (parted 3.8-1.1)",
   "content_text": "Fixed versions: parted 3.8-1.1.",
   "date_published": "2026-10-16T23:04:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-111802/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-111802/",
   "title": "CVE-2026-111802 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directory paths are symbolic links. An attacker can exploit this flaw by tricking a user into mounting a crafted storage volume and confirming the prompt to empty the trash, leading to the arbitrary deletion of files accessible to that user.",
   "date_published": "2026-10-16T22:03:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-17591/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-17591/",
   "title": "CVE-2026-17591 · Red Hat Hardened Images · disclosed",
   "content_text": "A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a program reads memory that has already been released. This issue arises when the archive_entry_copy_mac_metadata() function deallocates an internal buffer before completing a data copy. An attacker who can supply input to an application utilizing this function can trigger the flaw to crash the application or read uninitialized memory data.",
   "date_published": "2026-10-16T22:03:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-17591/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-17591/",
   "title": "CVE-2026-17591 · Red Hat Hardened Images · fixed in Debian 14 (libarchive 3.8.9-1)",
   "content_text": "Fixed versions: libarchive 3.8.9-1.",
   "date_published": "2026-10-16T22:03:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-17591/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-17591/",
   "title": "CVE-2026-17591 · Red Hat Hardened Images · fixed in Red Hat hummingbird 1 (bsdcat 0:3.8.9-2.1.hum1 and 5 more)",
   "content_text": "Fixed versions: bsdcat 0:3.8.9-2.1.hum1, bsdcpio 0:3.8.9-2.1.hum1, bsdtar 0:3.8.9-2.1.hum1, bsdunzip 0:3.8.9-2.1.hum1, libarchive 0:3.8.9-2.1.hum1, libarchive-devel 0:3.8.9-2.1.hum1.",
   "date_published": "2026-10-16T22:03:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-62438/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-62438/",
   "title": "CVE-2026-62438 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or preview a specially crafted Bohemia Interactive (PAA) texture file. Due to an integer overflow when calculating image dimensions during file decompression, the application allocates an undersized memory buffer. Subsequent processing reads memory past the buffer boundary, terminating the plug-in process unexpectedly.",
   "date_published": "2026-10-16T21:56:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-62438/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-62438/",
   "title": "CVE-2026-62438 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (gimp 3.2.6-1)",
   "content_text": "Fixed versions: gimp 3.2.6-1.",
   "date_published": "2026-10-16T21:56:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-62439/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-62439/",
   "title": "CVE-2026-62439 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewing a specially crafted PowerVR (.pvr) file, an attacker can trigger a heap-based buffer overflow, potentially leading to arbitrary code execution or a Denial of Service (DoS) via an application crash.",
   "date_published": "2026-10-16T21:54:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-62439/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-62439/",
   "title": "CVE-2026-62439 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (gimp 3.2.6-1)",
   "content_text": "Fixed versions: gimp 3.2.6-1.",
   "date_published": "2026-10-16T21:54:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85977/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85977/",
   "title": "CVE-2026-85977 · Red Hat Hardened Images · disclosed",
   "content_text": "A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps() function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocation, causing the client process to experience a Denial of Service (DoS) due to resource exhaustion.",
   "date_published": "2026-10-16T18:20:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85977/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85977/",
   "title": "CVE-2026-85977 · Red Hat Hardened Images · fixed in openSUSE Tumbleweed (libtirpc 1.3.8-1.1)",
   "content_text": "Fixed versions: libtirpc 1.3.8-1.1.",
   "date_published": "2026-10-16T18:20:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85977/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85977/",
   "title": "CVE-2026-85977 · Red Hat Hardened Images · fixed in Red Hat hummingbird 1 (libtirpc 0:1.3.8-0.1.hum1 and 1 more)",
   "content_text": "Fixed versions: libtirpc 0:1.3.8-0.1.hum1, libtirpc-devel 0:1.3.8-0.1.hum1.",
   "date_published": "2026-10-16T18:20:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85231/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85231/",
   "title": "CVE-2026-85231 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service configured with RPCSEC_GSS (Remote Procedure Call Security-Generic Security Service) integrity or privacy. This can lead to unbounded memory allocation, resulting in a Denial of Service (DoS) by exhausting system resources and causing the service to become unstable or terminate.",
   "date_published": "2026-10-16T18:20:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-85231/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-85231/",
   "title": "CVE-2026-85231 · Red Hat Enterprise Linux 10 · fixed in openSUSE Tumbleweed (libtirpc 1.3.8-1.1)",
   "content_text": "Fixed versions: libtirpc 1.3.8-1.1.",
   "date_published": "2026-10-16T18:20:40Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89098/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89098/",
   "title": "CVE-2026-89098 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an assertion failure. This causes the daemon to crash, resulting in a Denial of Service (DoS) for filesystem identifier lookup services until restarted.",
   "date_published": "2026-10-16T17:43:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89098/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89098/",
   "title": "CVE-2026-89098 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (nfs-utils 1:3.1.1-1)",
   "content_text": "Fixed versions: nfs-utils 1:3.1.1-1.",
   "date_published": "2026-10-16T17:43:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-111581/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-111581/",
   "title": "CVE-2026-111581 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied label values as bare positional arguments to the ntfslabel and fatlabel utilities without end-of-options separators or input validation for values beginning with a dash. This allows a label starting with '-' to be interpreted as a command-line flag by the spawned tool, potentially bypassing safety checks or causing unintended operations. This is reachable by unprivileged local users through the udisks2 Filesystem.SetLabel() D-Bus method without administrator authentication.",
   "date_published": "2026-10-16T15:42:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-111555/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-111555/",
   "title": "CVE-2026-111555 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations outside the intended metadata area. An attacker could exploit this vulnerability by providing a crafted header with valid checksums to overwrite or zero out encrypted payload data, resulting in persistent data loss and corrupted storage. Exploitation typically requires privileged access to modify raw block devices or the ability to induce an administrator to process an untrusted disk image.",
   "date_published": "2026-10-16T12:19:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-111555/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-111555/",
   "title": "CVE-2026-111555 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (luksmeta 10-2)",
   "content_text": "Fixed versions: luksmeta 10-2.",
   "date_published": "2026-10-16T12:19:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105958/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105958/",
   "title": "CVE-2026-105958 · Red Hat Enterprise Linux 6 · disclosed",
   "content_text": "A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICE_MSGC_MIGRATE_DATA messages without bounds validation, allowing a malicious authenticated SPICE client during VM live migration to read arbitrary heap memory or trigger heap corruption via out-of-bounds read and write operations on the message buffer.",
   "date_published": "2026-10-16T12:18:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105958/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105958/",
   "title": "CVE-2026-105958 · Red Hat Enterprise Linux 6 · fixed in Amazon Linux 2 (spice-server 0.14.0-10.amzn2 and 1 more)",
   "content_text": "Fixed versions: spice-server 0.14.0-10.amzn2, spice-server-devel 0.14.0-10.amzn2.",
   "date_published": "2026-10-16T12:18:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105958/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105958/",
   "title": "CVE-2026-105958 · Red Hat Enterprise Linux 6 · fixed in openSUSE Tumbleweed (spice 0.16.0-3.1)",
   "content_text": "Fixed versions: spice 0.16.0-3.1.",
   "date_published": "2026-10-16T12:18:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105959/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105959/",
   "title": "CVE-2026-105959 · Red Hat Enterprise Linux 6 · disclosed",
   "content_text": "A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size to int when calling the malloc callback, allowing a malicious authenticated SPICE client during VM live migration to trigger a massive heap buffer overflow by sending a crafted max_encoders value in migration data.",
   "date_published": "2026-10-16T11:53:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105959/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105959/",
   "title": "CVE-2026-105959 · Red Hat Enterprise Linux 6 · fixed in Amazon Linux 2 (spice-server 0.14.0-10.amzn2 and 1 more)",
   "content_text": "Fixed versions: spice-server 0.14.0-10.amzn2, spice-server-devel 0.14.0-10.amzn2.",
   "date_published": "2026-10-16T11:53:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-105959/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-105959/",
   "title": "CVE-2026-105959 · Red Hat Enterprise Linux 6 · fixed in openSUSE Tumbleweed (spice 0.16.0-3.1)",
   "content_text": "Fixed versions: spice 0.16.0-3.1.",
   "date_published": "2026-10-16T11:53:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.21",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.21 (cifs-utils 7.1-r1)",
   "content_text": "Fixed versions: cifs-utils 7.1-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.22 (cifs-utils 7.3-r1)",
   "content_text": "Fixed versions: cifs-utils 7.3-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.23 (cifs-utils 7.4-r1)",
   "content_text": "Fixed versions: cifs-utils 7.4-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.24 (cifs-utils 7.5-r1)",
   "content_text": "Fixed versions: cifs-utils 7.5-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/amazon-linux-2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2 (cifs-utils 6.2-10.amzn2.0.5 and 1 more)",
   "content_text": "Fixed versions: cifs-utils 6.2-10.amzn2.0.5, cifs-utils-devel 6.2-10.amzn2.0.5.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/amazon-linux-2023",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Amazon Linux 2023 (cifs-utils 7.7-145.amzn2023.0.1 and 3 more)",
   "content_text": "Fixed versions: cifs-utils 7.7-145.amzn2023.0.1, cifs-utils-devel 7.7-145.amzn2023.0.1, cifs-utils-info 7.7-145.amzn2023.0.1, pam_cifscreds 7.7-145.amzn2023.0.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Debian 13 (cifs-utils 2:7.4-1+deb13u1)",
   "content_text": "Fixed versions: cifs-utils 2:7.4-1+deb13u1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (cifs-utils 2:7.9-1)",
   "content_text": "Fixed versions: cifs-utils 2:7.9-1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.3 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.4 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.5 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  }
 ]
}