redhat

Reports to redhat (18)

Latest CVEs (this partner and the CNAs under it) · RSS

• CVE-2026-89096 2026-10-16 · CVSS 5.9
  A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an ex
• CVE-2026-89088 2026-10-16 · CVSS 5.5
  A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or a
• CVE-2026-89085 2026-10-16 · CVSS 6.6
  A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error duri
• CVE-2026-110759 2026-10-16 · CPANSec
  Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse. When the input t
• CVE-2026-110758 2026-10-16 · CPANSec
  Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace. Under allow_whitespace
• CVE-2026-110757 2026-10-16 · CPANSec
  Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine. combine and print do not check
• CVE-2026-110756 2026-10-16 · CPANSec
  Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in print. When
• CVE-2026-110755 2026-10-16 · CPANSec
  Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline. With eol unset, th
• CVE-2026-110754 2026-10-16 · CPANSec
  Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collects the fields of a record into a ne
• CVE-2026-110753 2026-10-16 · CPANSec
  Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline. With
• CVE-2026-110752 2026-10-16 · CPANSec
  Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment. fragment expands a ro
• CVE-2026-111802 2026-10-16 · CVSS 6.6
  A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying wheth
• CVE-2026-17591 2026-10-16 · CVSS 3.6
  A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which
• CVE-2026-62438 2026-10-16 · CVSS 6.1
  A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or prev
• CVE-2026-62439 2026-10-16 · CVSS 7.0
  A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into
• CVE-2026-85977 2026-10-16 · CVSS 5.3
  A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that u
• CVE-2026-85231 2026-10-16 · CVSS 6.5
  A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Pro
• CVE-2026-89098 2026-10-16 · CVSS 5.5
  A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify comman
• CVE-2026-111581 2026-10-16 · CVSS 3.3
  A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied label values as bare positional arguments
• CVE-2026-111555 2026-10-16 · CVSS 6.0
  A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe
• CVE-2026-105958 2026-10-16 · CVSS 7.5
  A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICE_MSGC_MIGRATE_DATA messages without bounds validation,
• CVE-2026-105959 2026-10-16 · CVSS 7.5
  A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size to int when calling the malloc callback, allowing a
• CVE-2026-104715 2026-10-16 · CVSS 7.8
  A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet
• CVE-2026-84823 2026-10-15 · CVSS 7.1
  A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal vu
• CVE-2026-87029 2026-10-15 · openjs · CVSS 5.9
  undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed respo