{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Red Hat Hardened Images: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/red-hat--red-hat-hardened-images/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/red-hat--red-hat-hardened-images/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-16460/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-16460/",
   "title": "CVE-2026-16460 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.",
   "date_published": "2026-10-19T06:40:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-88829/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-88829/",
   "title": "CVE-2026-88829 · Red Hat Hardened Images · disclosed",
   "content_text": "A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a URL prefix to a backend server, only the first HTTP request on a TCP connection has its path rewritten. An attacker can send a pipelined second request that is relayed verbatim to the backend, bypassing the configured path restrictions. This allows accessing arbitrary paths on the backend server that were not intended to be exposed through the proxy.",
   "date_published": "2026-10-14T10:00:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-90954/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-90954/",
   "title": "CVE-2026-90954 · Red Hat Hardened Images · disclosed",
   "content_text": "A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio, and unzip handlers which flush once after the last member. A specially crafted .deb archive with two data.tar members can exploit this ordering: the first member declares a symlink pointing to an absolute path (e.g., '/'), which is deferred as unsafe but flushed after the first member. The second member declares a regular file whose path traverses the now-live symlink, resulting in a file being written outside the intended extraction directory. This could allow an attacker to write arbitrary files to arbitrary locations when a user extracts a crafted .deb package.",
   "date_published": "2026-10-14T10:00:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107935/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107935/",
   "title": "CVE-2026-107935 · Red Hat Build of Podman Desktop · disclosed",
   "content_text": "A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.",
   "date_published": "2026-10-09T09:05:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (cyrus-sasl2 2.1.28+dfsg1-12)",
   "content_text": "Fixed versions: cyrus-sasl2 2.1.28+dfsg1-12.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in openSUSE Leap 16.0 (cyrus-sasl 2.1.28-160000.4.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-160000.4.1, cyrus-sasl-bdb 2.1.28-160000.4.1, cyrus-sasl-saslauthd 2.1.28-160000.4.1, cyrus-sasl-saslauthd-bdb 2.1.28-160000.4.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in openSUSE Tumbleweed (cyrus-sasl 2.1.28-13.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-13.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (cyrus-sasl 2.1.28-150500.3.12.1 and 2 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (cyrus-sasl 2.1.28-150500.3.12.1 and 2 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.3 (cyrus-sasl 2.1.27-150300.4.9.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.4 (cyrus-sasl 2.1.27-150300.4.9.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.5 (cyrus-sasl 2.1.28-150500.3.12.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (cyrus-sasl 2.1.28-150600.7.17.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-module-for-legacy-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Legacy 15 SP7 (cyrus-sasl-bdb 2.1.28-150600.7.17.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd-bdb 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-module-for-server-applications-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Server Applications 15 SP7 (cyrus-sasl-bdb 2.1.28-150600.7.17.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (cyrus-sasl 2.1.26-14.10.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.26-14.10.1, cyrus-sasl-saslauthd 2.1.26-14.10.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (cyrus-sasl 2.1.28-150500.3.12.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd-bdb 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (cyrus-sasl 2.1.28-150600.7.17.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150600.7.17.1, cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd-bdb 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 16.0 (cyrus-sasl 2.1.28-160000.4.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-160000.4.1, cyrus-sasl-saslauthd 2.1.28-160000.4.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (cyrus-sasl 2.1.28-150500.3.12.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd-bdb 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (cyrus-sasl 2.1.28-150600.7.17.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150600.7.17.1, cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd-bdb 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP applications 16.0 (cyrus-sasl 2.1.28-160000.4.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-160000.4.1, cyrus-sasl-saslauthd 2.1.28-160000.4.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (cyrus-sasl 2.1.26-14.10.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.26-14.10.1, cyrus-sasl-saslauthd 2.1.26-14.10.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-103242/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-103242/",
   "title": "CVE-2026-103242 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A heap-based buffer overflow flaw was found in rpm. RPMTAG_FILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv() to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content — of attacker-chosen length — past the end of that allocation. This is reachable via rpm2cpio, rpm2archive, and rpm -qlvp on an untrusted package.",
   "date_published": "2026-09-30T11:50:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-95520/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-95520/",
   "title": "CVE-2026-95520 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared RPMTAG_LONGFILESIZES value is 0xFFFFFFFFFFFFFFFF causes an integer overflow in iterReadArchiveNext() that shrinks a buffer allocation to one byte, after which the payload's independently-controlled cpio filesize field is used to write attacker-controlled data past the end of that allocation. This is reachable via rpm2cpio, rpm2archive, and rpm -qlvp on an  untrusted package.",
   "date_published": "2026-09-29T11:02:06Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · disclosed",
   "content_text": "A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in Debian 14 (gcc-12 12.5.0-11 and 2 more)",
   "content_text": "Fixed versions: gcc-12 12.5.0-11, gcc-13 13.5.0-2, gcc-14 14.4.0-3.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in openSUSE Leap 16.0 (cross-aarch64-gcc13 13.5.0+git10516-160000.1.1 and 19 more)",
   "content_text": "Fixed versions: cross-aarch64-gcc13 13.5.0+git10516-160000.1.1, cross-aarch64-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-amdgcn-gcc13 13.5.0+git10516-160000.1.1, cross-arm-gcc13 13.5.0+git10516-160000.1.1, cross-arm-none-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-avr-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-bpf-gcc13 13.5.0+git10516-160000.1.1, cross-hppa-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-nvptx-gcc13 13.5.0+git10516-160000.1.1, cross-ppc64-gcc13 13.5.0+git10516-160000.1.1, cross-ppc64le-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-pru-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-riscv64-elf-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-riscv64-gcc13 13.5.0+git10516-160000.1.1, cross-riscv64-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-rx-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-s390x-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-x86_64-gcc13 13.5.0+git10516-160000.1.1, gcc13 13.5.0+git10516-160000.1.1, gcc13-testresults 13.5.0+git10516-160000.1.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in openSUSE Tumbleweed (gcc13 13.5.0+git10516-2.1 and 3 more)",
   "content_text": "Fixed versions: gcc13 13.5.0+git10516-2.1, gcc15 15.3.0+git11272-2.1, gcc16 16.2.1+git9713-1.1, gcc7 7.5.0+r278197-25.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in Red Hat hummingbird 1 (cpp 0:16.2.1-3.hum1 and 43 more)",
   "content_text": "Fixed versions: cpp 0:16.2.1-3.hum1, gcc 0:16.2.1-3.hum1, gcc-c++ 0:16.2.1-3.hum1, gcc-gdb-plugin 0:16.2.1-3.hum1, gcc-gfortran 0:16.2.1-3.hum1, gcc-offload-amdgcn 0:16.2.1-3.hum1, gcc-offload-nvptx 0:16.2.1-3.hum1, gcc-plugin-annobin 0:16.2.1-3.hum1, gcc-plugin-devel 0:16.2.1-3.hum1, gcc13 0:13.5.0-0.2.hum1, gcc13-c++ 0:13.5.0-0.2.hum1, gcc13-gfortran 0:13.5.0-0.2.hum1, gcc13-plugin-annobin 0:13.5.0-0.2.hum1, libasan 0:16.2.1-3.hum1, libasan-static 0:16.2.1-3.hum1, libatomic 0:16.2.1-3.hum1, libgcc 0:16.2.1-3.hum1, libgccjit 0:16.2.1-3.hum1, libgccjit-devel 0:16.2.1-3.hum1, libgdiagnostics 0:16.2.1-3.hum1, libgdiagnostics-devel 0:16.2.1-3.hum1, libgfortran 0:16.2.1-3.hum1, libgfortran-static 0:16.2.1-3.hum1, libgomp 0:16.2.1-3.hum1, libgomp-offload-amdgcn 0:16.2.1-3.hum1, libgomp-offload-nvptx 0:16.2.1-3.hum1, libhwasan 0:16.2.1-3.hum1, libhwasan-static 0:16.2.1-3.hum1, libitm 0:16.2.1-3.hum1, libitm-devel 0:16.2.1-3.hum1, libitm-static 0:16.2.1-3.hum1, liblsan 0:16.2.1-3.hum1, liblsan-static 0:16.2.1-3.hum1, libquadmath 0:16.2.1-3.hum1, libquadmath-devel 0:16.2.1-3.hum1, libquadmath-static 0:16.2.1-3.hum1, libstdc++ 0:16.2.1-3.hum1, libstdc++-devel 0:16.2.1-3.hum1, libstdc++-docs 0:16.2.1-3.hum1, libstdc++-static 0:16.2.1-3.hum1, libtsan 0:16.2.1-3.hum1, libtsan-static 0:16.2.1-3.hum1, libubsan 0:16.2.1-3.hum1, libubsan-static 0:16.2.1-3.hum1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (gcc48 4.8.5-31.32.1)",
   "content_text": "Fixed versions: gcc48 4.8.5-31.32.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Enterprise Server 16.0 (gcc13 13.5.0+git10516-160000.1.1)",
   "content_text": "Fixed versions: gcc13 13.5.0+git10516-160000.1.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Enterprise Server for SAP applications 16.0 (gcc13 13.5.0+git10516-160000.1.1)",
   "content_text": "Fixed versions: gcc13 13.5.0+git10516-160000.1.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (gcc48 4.8.5-31.32.1)",
   "content_text": "Fixed versions: gcc48 4.8.5-31.32.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-micro-6.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Micro 6.2 (gcc13 13.5.0+git10516-160000.1.1)",
   "content_text": "Fixed versions: gcc13 13.5.0+git10516-160000.1.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-micro-extras-6.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Micro Extras 6.2 (gcc13 13.5.0+git10516-160000.1.1)",
   "content_text": "Fixed versions: gcc13 13.5.0+git10516-160000.1.1.",
   "date_published": "2026-09-28T18:54:31Z"
  }
 ]
}