{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Red Hat OpenShift Container Platform 4: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/red-hat--red-hat-openshift-container-platform-4/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/red-hat--red-hat-openshift-container-platform-4/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-16460/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-16460/",
   "title": "CVE-2026-16460 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.",
   "date_published": "2026-10-19T06:40:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.21",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.21 (cifs-utils 7.1-r1)",
   "content_text": "Fixed versions: cifs-utils 7.1-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.22",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.22 (cifs-utils 7.3-r1)",
   "content_text": "Fixed versions: cifs-utils 7.3-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.23",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.23 (cifs-utils 7.4-r1)",
   "content_text": "Fixed versions: cifs-utils 7.4-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/alpine-v3.24",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Alpine 3.24 (cifs-utils 7.5-r1)",
   "content_text": "Fixed versions: cifs-utils 7.5-r1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/debian-13",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Debian 13 (cifs-utils 2:7.4-1+deb13u1)",
   "content_text": "Fixed versions: cifs-utils 2:7.4-1+deb13u1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (cifs-utils 2:7.9-1)",
   "content_text": "Fixed versions: cifs-utils 2:7.9-1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.3 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.4 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.5 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (cifs-utils 6.9-13.32.2)",
   "content_text": "Fixed versions: cifs-utils 6.9-13.32.2.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (cifs-utils 6.15-150400.3.27.1)",
   "content_text": "Fixed versions: cifs-utils 6.15-150400.3.27.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (cifs-utils 6.9-13.32.2)",
   "content_text": "Fixed versions: cifs-utils 6.9-13.32.2.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/ubuntu-22.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 22.04 LTS (cifs-utils 2:6.14-1ubuntu0.7)",
   "content_text": "Fixed versions: cifs-utils 2:6.14-1ubuntu0.7.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/ubuntu-24.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 24.04 LTS (cifs-utils 2:7.0-2ubuntu0.6)",
   "content_text": "Fixed versions: cifs-utils 2:7.0-2ubuntu0.6.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/ubuntu-26.04-lts",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 26.04 LTS (cifs-utils 2:7.4-1ubuntu0.26.04.4)",
   "content_text": "Fixed versions: cifs-utils 2:7.4-1ubuntu0.26.04.4.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104715/fixed/ubuntu-26.10",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104715/",
   "title": "CVE-2026-104715 · Red Hat Enterprise Linux 10 · fixed in Ubuntu 26.10 (cifs-utils 2:7.4-1ubuntu3.1)",
   "content_text": "Fixed versions: cifs-utils 2:7.4-1ubuntu3.1.",
   "date_published": "2026-10-16T06:47:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92982/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92982/",
   "title": "CVE-2026-92982 · Red Hat Ansible Automation Platform 2.6 · disclosed",
   "content_text": "A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressions to be executed within the operator pod. This can lead to arbitrary code execution and privilege escalation, granting the attacker control over the operator's service account with cluster-wide permissions.",
   "date_published": "2026-10-15T15:36:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86848/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86848/",
   "title": "CVE-2026-86848 · Red Hat Fast Datapath for RHEL 10 · disclosed",
   "content_text": "A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access in the host backend.",
   "date_published": "2026-10-14T17:50:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86848/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86848/",
   "title": "CVE-2026-86848 · Red Hat Fast Datapath for RHEL 10 · fixed in Debian 14 (dpdk 25.11.4-1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.",
   "date_published": "2026-10-14T17:50:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86848/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86848/",
   "title": "CVE-2026-86848 · Red Hat Fast Datapath for RHEL 10 · fixed in openSUSE Tumbleweed (dpdk 25.11.4-1.1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.1.",
   "date_published": "2026-10-14T17:50:08Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86567/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86567/",
   "title": "CVE-2026-86567 · Red Hat Fast Datapath for RHEL 10 · disclosed",
   "content_text": "A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap.",
   "date_published": "2026-10-14T17:50:03Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86567/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86567/",
   "title": "CVE-2026-86567 · Red Hat Fast Datapath for RHEL 10 · fixed in Debian 14 (dpdk 25.11.4-1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.",
   "date_published": "2026-10-14T17:50:03Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86567/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86567/",
   "title": "CVE-2026-86567 · Red Hat Fast Datapath for RHEL 10 · fixed in openSUSE Tumbleweed (dpdk 25.11.4-1.1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.1.",
   "date_published": "2026-10-14T17:50:03Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-100236/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-100236/",
   "title": "CVE-2026-100236 · Red Hat Fast Datapath for RHEL 10 · disclosed",
   "content_text": "A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. A remote or guest-supplied packet processed with software GSO can trigger an out-of-bounds read or write.",
   "date_published": "2026-10-14T16:33:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-100236/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-100236/",
   "title": "CVE-2026-100236 · Red Hat Fast Datapath for RHEL 10 · fixed in Debian 14 (dpdk 25.11.4-1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.",
   "date_published": "2026-10-14T16:33:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-100236/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-100236/",
   "title": "CVE-2026-100236 · Red Hat Fast Datapath for RHEL 10 · fixed in openSUSE Tumbleweed (dpdk 25.11.4-1.1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.1.",
   "date_published": "2026-10-14T16:33:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86565/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86565/",
   "title": "CVE-2026-86565 · Red Hat Fast Datapath for RHEL 10 · disclosed",
   "content_text": "A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process.",
   "date_published": "2026-10-14T16:08:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86565/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86565/",
   "title": "CVE-2026-86565 · Red Hat Fast Datapath for RHEL 10 · fixed in Debian 14 (dpdk 25.11.4-1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.",
   "date_published": "2026-10-14T16:08:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86565/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86565/",
   "title": "CVE-2026-86565 · Red Hat Fast Datapath for RHEL 10 · fixed in openSUSE Tumbleweed (dpdk 25.11.4-1.1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.1.",
   "date_published": "2026-10-14T16:08:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86563/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86563/",
   "title": "CVE-2026-86563 · Red Hat Fast Datapath for RHEL 10 · disclosed",
   "content_text": "A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access.",
   "date_published": "2026-10-14T16:08:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86563/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86563/",
   "title": "CVE-2026-86563 · Red Hat Fast Datapath for RHEL 10 · fixed in Debian 14 (dpdk 25.11.4-1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.",
   "date_published": "2026-10-14T16:08:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86563/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86563/",
   "title": "CVE-2026-86563 · Red Hat Fast Datapath for RHEL 10 · fixed in openSUSE Tumbleweed (dpdk 25.11.4-1.1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.1.",
   "date_published": "2026-10-14T16:08:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86562/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86562/",
   "title": "CVE-2026-86562 · Red Hat Fast Datapath for RHEL 10 · disclosed",
   "content_text": "A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue handler.",
   "date_published": "2026-10-14T16:07:58Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86562/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86562/",
   "title": "CVE-2026-86562 · Red Hat Fast Datapath for RHEL 10 · fixed in Debian 14 (dpdk 25.11.4-1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.",
   "date_published": "2026-10-14T16:07:58Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-86562/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-86562/",
   "title": "CVE-2026-86562 · Red Hat Fast Datapath for RHEL 10 · fixed in openSUSE Tumbleweed (dpdk 25.11.4-1.1)",
   "content_text": "Fixed versions: dpdk 25.11.4-1.1.",
   "date_published": "2026-10-14T16:07:58Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107935/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107935/",
   "title": "CVE-2026-107935 · Red Hat Build of Podman Desktop · disclosed",
   "content_text": "A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.",
   "date_published": "2026-10-09T09:05:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89091/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89091/",
   "title": "CVE-2026-89091 · Red Hat Migration Toolkit for Applications 8 · disclosed",
   "content_text": "A flaw was found in ansible-core. When installing a collection with\n`ansible-galaxy collection install`, the archive extractor validates member\npaths using lexical path normalisation (os.path.abspath) instead of resolving\nsymbolic links (os.path.realpath), and it performs no containment check on\nsymlink-typed directory members before creating them. A crafted collection\ntarball can chain symlink directory entries so that a subsequent file member is\nwritten outside the intended destination directory. This allows an attacker who\ncan get a victim to install a malicious collection to overwrite arbitrary files\nwith the privileges of the user running ansible-galaxy, leading to code\nexecution on the control node. This is a bypass of the fix for CVE-2020-10691.",
   "date_published": "2026-10-08T21:49:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-89091/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-89091/",
   "title": "CVE-2026-89091 · Red Hat Migration Toolkit for Applications 8 · fixed in openSUSE Tumbleweed (ansible-core 2.21.5-2.1 and 3 more)",
   "content_text": "Fixed versions: ansible-core 2.21.5-2.1, ansible-core-2.18 2.18.19-3.1, ansible-core-2.19 2.19.14-2.1, ansible-core-2.20 2.20.10-2.1.",
   "date_published": "2026-10-08T21:49:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · disclosed",
   "content_text": "A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting (escaping special characters) makes the value longer. The under-sized buffer is then passed to strcat(), causing a heap-based out-of-bounds write whose size depends on attacker-controlled input. A malicious or on-path DIGEST-MD5 (or HTTP Digest) server can trigger this flaw in a connecting client by supplying a crafted challenge field, such as realm or nonce, most likely resulting in a crash of the client application.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in Debian 14 (cyrus-sasl2 2.1.28+dfsg1-12)",
   "content_text": "Fixed versions: cyrus-sasl2 2.1.28+dfsg1-12.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in openSUSE Leap 16.0 (cyrus-sasl 2.1.28-160000.4.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-160000.4.1, cyrus-sasl-bdb 2.1.28-160000.4.1, cyrus-sasl-saslauthd 2.1.28-160000.4.1, cyrus-sasl-saslauthd-bdb 2.1.28-160000.4.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in openSUSE Tumbleweed (cyrus-sasl 2.1.28-13.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-13.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-espos",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS (cyrus-sasl 2.1.28-150500.3.12.1 and 2 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-high-performance-computing-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS (cyrus-sasl 2.1.28-150500.3.12.1 and 2 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-micro-5.3",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.3 (cyrus-sasl 2.1.27-150300.4.9.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-micro-5.4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.4 (cyrus-sasl 2.1.27-150300.4.9.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-micro-5.5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Micro 5.5 (cyrus-sasl 2.1.28-150500.3.12.1)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-module-for-basesystem-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Basesystem 15 SP7 (cyrus-sasl 2.1.28-150600.7.17.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-module-for-legacy-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Legacy 15 SP7 (cyrus-sasl-bdb 2.1.28-150600.7.17.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd-bdb 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-module-for-server-applications-15-sp7",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Module for Server Applications 15 SP7 (cyrus-sasl-bdb 2.1.28-150600.7.17.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (cyrus-sasl 2.1.26-14.10.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.26-14.10.1, cyrus-sasl-saslauthd 2.1.26-14.10.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-15-sp4-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP4-LTSS (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-15-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP5-LTSS (cyrus-sasl 2.1.28-150500.3.12.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd-bdb 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-15-sp6-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 15 SP6-LTSS (cyrus-sasl 2.1.28-150600.7.17.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150600.7.17.1, cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd-bdb 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server 16.0 (cyrus-sasl 2.1.28-160000.4.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-160000.4.1, cyrus-sasl-saslauthd 2.1.28-160000.4.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp4",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP4 (cyrus-sasl 2.1.27-150300.4.9.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.27-150300.4.9.1, cyrus-sasl-bdb 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd 2.1.27-150300.4.9.1, cyrus-sasl-saslauthd-bdb 2.1.27-150300.4.9.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP5 (cyrus-sasl 2.1.28-150500.3.12.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150500.3.12.1, cyrus-sasl-bdb 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd 2.1.28-150500.3.12.1, cyrus-sasl-saslauthd-bdb 2.1.28-150500.3.12.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-15-sp6",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP Applications 15 SP6 (cyrus-sasl 2.1.28-150600.7.17.1 and 3 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-150600.7.17.1, cyrus-sasl-bdb 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd 2.1.28-150600.7.17.1, cyrus-sasl-saslauthd-bdb 2.1.28-150600.7.17.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server for SAP applications 16.0 (cyrus-sasl 2.1.28-160000.4.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.28-160000.4.1, cyrus-sasl-saslauthd 2.1.28-160000.4.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-107161/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-107161/",
   "title": "CVE-2026-107161 · Red Hat Enterprise Linux 10 · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (cyrus-sasl 2.1.26-14.10.1 and 1 more)",
   "content_text": "Fixed versions: cyrus-sasl 2.1.26-14.10.1, cyrus-sasl-saslauthd 2.1.26-14.10.1.",
   "date_published": "2026-10-07T19:29:28Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101295/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101295/",
   "title": "CVE-2026-101295 · Assisted Installer for Red Hat OpenShift Container Platform 2 · disclosed",
   "content_text": "Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries from catalog image layers without validating that file paths resolve within the intended destination directory.",
   "date_published": "2026-09-30T14:06:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-62146/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-62146/",
   "title": "CVE-2026-62146 · Red Hat OpenShift Container Platform 4 · disclosed",
   "content_text": "A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expose a host-side runtime-management resource inside the container, enabling container escape.",
   "date_published": "2026-09-30T11:49:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · disclosed",
   "content_text": "A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/debian-14",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in Debian 14 (gcc-12 12.5.0-11 and 2 more)",
   "content_text": "Fixed versions: gcc-12 12.5.0-11, gcc-13 13.5.0-2, gcc-14 14.4.0-3.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/opensuse-leap-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in openSUSE Leap 16.0 (cross-aarch64-gcc13 13.5.0+git10516-160000.1.1 and 19 more)",
   "content_text": "Fixed versions: cross-aarch64-gcc13 13.5.0+git10516-160000.1.1, cross-aarch64-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-amdgcn-gcc13 13.5.0+git10516-160000.1.1, cross-arm-gcc13 13.5.0+git10516-160000.1.1, cross-arm-none-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-avr-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-bpf-gcc13 13.5.0+git10516-160000.1.1, cross-hppa-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-nvptx-gcc13 13.5.0+git10516-160000.1.1, cross-ppc64-gcc13 13.5.0+git10516-160000.1.1, cross-ppc64le-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-pru-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-riscv64-elf-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-riscv64-gcc13 13.5.0+git10516-160000.1.1, cross-riscv64-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-rx-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-s390x-gcc13-bootstrap 13.5.0+git10516-160000.1.1, cross-x86_64-gcc13 13.5.0+git10516-160000.1.1, gcc13 13.5.0+git10516-160000.1.1, gcc13-testresults 13.5.0+git10516-160000.1.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/opensuse-tumbleweed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in openSUSE Tumbleweed (gcc13 13.5.0+git10516-2.1 and 3 more)",
   "content_text": "Fixed versions: gcc13 13.5.0+git10516-2.1, gcc15 15.3.0+git11272-2.1, gcc16 16.2.1+git9713-1.1, gcc7 7.5.0+r278197-25.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/red-hat-hummingbird-1",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in Red Hat hummingbird 1 (cpp 0:16.2.1-3.hum1 and 43 more)",
   "content_text": "Fixed versions: cpp 0:16.2.1-3.hum1, gcc 0:16.2.1-3.hum1, gcc-c++ 0:16.2.1-3.hum1, gcc-gdb-plugin 0:16.2.1-3.hum1, gcc-gfortran 0:16.2.1-3.hum1, gcc-offload-amdgcn 0:16.2.1-3.hum1, gcc-offload-nvptx 0:16.2.1-3.hum1, gcc-plugin-annobin 0:16.2.1-3.hum1, gcc-plugin-devel 0:16.2.1-3.hum1, gcc13 0:13.5.0-0.2.hum1, gcc13-c++ 0:13.5.0-0.2.hum1, gcc13-gfortran 0:13.5.0-0.2.hum1, gcc13-plugin-annobin 0:13.5.0-0.2.hum1, libasan 0:16.2.1-3.hum1, libasan-static 0:16.2.1-3.hum1, libatomic 0:16.2.1-3.hum1, libgcc 0:16.2.1-3.hum1, libgccjit 0:16.2.1-3.hum1, libgccjit-devel 0:16.2.1-3.hum1, libgdiagnostics 0:16.2.1-3.hum1, libgdiagnostics-devel 0:16.2.1-3.hum1, libgfortran 0:16.2.1-3.hum1, libgfortran-static 0:16.2.1-3.hum1, libgomp 0:16.2.1-3.hum1, libgomp-offload-amdgcn 0:16.2.1-3.hum1, libgomp-offload-nvptx 0:16.2.1-3.hum1, libhwasan 0:16.2.1-3.hum1, libhwasan-static 0:16.2.1-3.hum1, libitm 0:16.2.1-3.hum1, libitm-devel 0:16.2.1-3.hum1, libitm-static 0:16.2.1-3.hum1, liblsan 0:16.2.1-3.hum1, liblsan-static 0:16.2.1-3.hum1, libquadmath 0:16.2.1-3.hum1, libquadmath-devel 0:16.2.1-3.hum1, libquadmath-static 0:16.2.1-3.hum1, libstdc++ 0:16.2.1-3.hum1, libstdc++-devel 0:16.2.1-3.hum1, libstdc++-docs 0:16.2.1-3.hum1, libstdc++-static 0:16.2.1-3.hum1, libtsan 0:16.2.1-3.hum1, libtsan-static 0:16.2.1-3.hum1, libubsan 0:16.2.1-3.hum1, libubsan-static 0:16.2.1-3.hum1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-enterprise-server-12-sp5-ltss",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Enterprise Server 12 SP5-LTSS (gcc48 4.8.5-31.32.1)",
   "content_text": "Fixed versions: gcc48 4.8.5-31.32.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-enterprise-server-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Enterprise Server 16.0 (gcc13 13.5.0+git10516-160000.1.1)",
   "content_text": "Fixed versions: gcc13 13.5.0+git10516-160000.1.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-enterprise-server-for-sap-applications-16.0",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Enterprise Server for SAP applications 16.0 (gcc13 13.5.0+git10516-160000.1.1)",
   "content_text": "Fixed versions: gcc13 13.5.0+git10516-160000.1.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-enterprise-server-ltss-extended-security-12-sp5",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 (gcc48 4.8.5-31.32.1)",
   "content_text": "Fixed versions: gcc48 4.8.5-31.32.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-micro-6.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Micro 6.2 (gcc13 13.5.0+git10516-160000.1.1)",
   "content_text": "Fixed versions: gcc13 13.5.0+git10516-160000.1.1.",
   "date_published": "2026-09-28T18:54:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102010/fixed/suse-linux-micro-extras-6.2",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102010/",
   "title": "CVE-2026-102010 · Red Hat Hardened Images · fixed in SUSE Linux Micro Extras 6.2 (gcc13 13.5.0+git10516-160000.1.1)",
   "content_text": "Fixed versions: gcc13 13.5.0+git10516-160000.1.1.",
   "date_published": "2026-09-28T18:54:31Z"
  }
 ]
}